Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/664ede03-b682-3e63-bb5b-87bb02f55a2e.roa
File:                     664ede03-b682-3e63-bb5b-87bb02f55a2e.roa (raw, json)
Hash identifier:          4U6AFey9SzzrDdVSyHFgqp4cHj29ChR61savROfFBtY=
Subject key identifier:   AA:CE:CC:95:6F:09:DB:88:38:9A:F8:0D:72:49:2F:22:05:19:54:FF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D2A74C20C7BCC635820F2C000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/664ede03-b682-3e63-bb5b-87bb02f55a2e.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        142.251.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c2:0c:7b:cc:63:58:20:f2:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=716a1ec2-fce1-4737-963a-810b713643cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:76:2e:45:31:7b:03:1c:59:14:73:8a:0f:
                    05:96:95:79:b9:e6:13:4b:8d:82:d0:04:84:58:71:
                    0b:10:57:0b:a0:78:b6:85:93:b2:23:2e:b9:03:8f:
                    25:aa:07:da:4a:75:6d:64:81:65:5f:1a:ce:2a:5a:
                    69:8f:c0:d9:09:36:58:8b:b1:e8:b3:36:94:fa:8f:
                    80:79:8e:45:86:92:a7:70:f8:72:27:da:d4:7c:aa:
                    96:b2:6b:68:63:6e:e7:58:7a:1d:ba:ca:5f:ab:bd:
                    c6:ff:ae:98:b4:e2:d5:f8:97:3d:39:34:87:0b:31:
                    00:0b:92:91:7e:84:0a:4a:4d:7c:e5:14:b6:53:f4:
                    e1:35:04:cb:d8:4d:5b:6b:7b:42:09:c1:62:6d:ef:
                    18:ec:18:2d:97:9f:37:f5:6e:11:cb:7c:74:8d:76:
                    5e:3e:34:74:22:cf:22:c8:d4:e3:3f:67:a6:9c:17:
                    b0:d8:60:dc:1e:5c:36:07:dd:bf:d9:ab:bf:a4:30:
                    0c:b4:a5:ea:14:2c:10:e5:80:bc:b4:39:24:b5:41:
                    7a:3a:2a:01:0e:3d:82:fe:36:ca:30:7d:e2:b2:1e:
                    fe:37:e9:5c:4d:ba:7d:ef:78:ea:24:1f:4e:17:67:
                    d9:80:58:1f:36:4d:62:0e:ed:63:ad:59:47:a5:f3:
                    4d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CE:CC:95:6F:09:DB:88:38:9A:F8:0D:72:49:2F:22:05:19:54:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/664ede03-b682-3e63-bb5b-87bb02f55a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:37:40:e2:e5:be:9c:e1:fd:df:80:11:43:fd:33:77:30:40:
         23:25:a7:10:10:37:a6:a3:22:72:7c:a0:61:0d:63:77:58:bf:
         a7:95:2c:cd:25:13:53:7f:61:2b:0d:20:3d:ad:8e:a3:44:4a:
         01:96:2f:39:1d:c2:37:81:9a:76:0b:1e:e6:94:58:82:ed:c1:
         76:94:fe:73:f2:e0:e4:5d:20:72:26:28:2d:a4:d9:35:9c:c2:
         1e:78:aa:9c:5c:07:7a:c0:d9:35:78:2b:33:71:58:08:72:f8:
         e4:ec:19:1c:80:3f:4e:6c:ce:bd:62:7a:ec:f2:27:c2:ef:f8:
         30:33:59:1d:bd:0c:d1:87:f5:94:60:b6:65:89:81:4c:96:0e:
         f9:9b:73:a4:cf:6b:7f:a1:af:e2:10:fc:02:b2:0d:95:c6:2d:
         9c:3d:ef:dd:68:1b:1c:d0:3d:d9:f0:6e:e6:e9:16:dd:03:0d:
         be:ba:1f:75:30:94:a7:2a:65:6f:a2:f9:19:7c:2d:b6:db:2d:
         a0:81:cb:3a:90:4a:11:be:1a:81:ee:84:37:4e:94:8d:c8:72:
         93:de:07:d3:00:6c:e0:5a:14:ed:d7:c2:ef:1b:10:6d:5c:69:
         03:96:2f:c8:e9:2e:28:aa:c4:46:a9:41:2f:ca:87:c8:76:95:
         2d:d5:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:30:06 2026 by rpki-client