Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa
File:                     962bf7de-0c9c-3eff-a5b5-952421fda78c.roa (raw, json)
Hash identifier:          Mga/aJVEWEJQ9CzW5zvvhFZVNDEttstxYnMd4exXqYU=
Subject key identifier:   7F:48:4F:D0:BB:EF:DF:1E:D0:C4:52:55:98:DA:F0:EA:CB:A0:B2:C5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CD6064717B2DA099BEFC00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.251.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:60:64:71:7b:2d:a0:99:be:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=88f67152-a780-4f33-ad6e-42942fd626ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:56:f5:ea:99:88:74:eb:5c:fe:07:92:a8:b3:
                    44:de:52:ff:0d:e7:cf:cf:6c:90:93:94:e6:d5:ac:
                    c3:53:b8:49:e3:5f:4d:72:b3:a8:5e:d6:91:a1:b5:
                    d0:6f:72:8f:c4:ca:09:43:89:21:eb:0c:f6:ff:0e:
                    06:2f:9f:92:8e:7f:85:44:30:3b:88:65:e5:e2:c4:
                    7a:98:32:09:d2:6c:1d:da:36:b1:92:00:4a:78:6e:
                    dc:eb:fb:fe:04:d0:2a:6f:a8:ae:ee:ae:11:60:9c:
                    2b:12:8c:46:20:4c:11:f9:66:94:7a:00:d2:dd:1c:
                    71:21:af:70:a4:89:64:8a:18:16:a6:64:f0:bb:83:
                    96:f7:14:15:e8:0a:85:34:92:bb:b2:51:f7:ee:cf:
                    12:0a:24:b9:f5:6c:98:42:f6:c5:f5:68:9f:79:aa:
                    f8:cb:c8:d5:bd:c5:41:3d:a0:0c:f7:b9:c9:9e:fd:
                    aa:d8:22:6d:b5:68:10:d0:80:97:4c:ba:ff:1f:cc:
                    7c:b4:78:4a:c3:de:9b:9e:30:f4:34:c1:e2:e5:ce:
                    8e:75:ac:dd:13:50:76:e6:a0:e9:49:a8:aa:25:05:
                    59:a3:a6:29:0c:37:13:37:24:ea:60:d0:20:6b:46:
                    ef:22:32:a2:41:17:22:1a:b2:94:48:f9:3e:e0:c8:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:4F:D0:BB:EF:DF:1E:D0:C4:52:55:98:DA:F0:EA:CB:A0:B2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:5f:48:28:d8:cd:c8:c1:36:b1:93:02:97:16:64:6d:18:
         db:75:98:55:26:d6:b9:61:22:fc:86:73:e5:cd:3d:7f:43:ed:
         df:da:d4:01:6b:a2:f9:d3:c8:67:78:98:d5:35:cc:5c:1b:71:
         90:d8:57:fd:15:7a:10:5f:60:2c:3b:44:0f:12:31:f3:c0:02:
         bf:1c:15:62:8f:bf:59:66:52:5d:4a:0e:bc:55:8d:fe:8a:70:
         3d:8e:c5:91:19:b9:e3:c3:b7:9f:6d:35:0c:0d:4b:4a:98:a4:
         88:4f:82:b9:43:94:50:ef:96:9d:3d:4a:a3:7f:46:b1:92:8a:
         a9:a8:68:a8:8a:1e:97:0c:13:40:37:40:2a:9a:45:7d:fb:19:
         52:64:aa:b2:9a:82:0d:35:a7:cc:5a:61:e4:f7:37:3c:29:bc:
         c7:91:3a:fb:02:ea:89:56:c5:3d:6e:28:a9:66:27:fd:3c:de:
         84:67:2d:fd:4c:15:53:12:75:42:8d:71:49:31:c1:11:15:fd:
         da:26:35:12:9f:52:04:b0:80:6e:b8:72:2f:1c:b8:93:90:3d:
         e7:fa:22:c0:4f:bb:93:78:cc:58:80:8f:ff:c0:ba:2b:4f:45:
         de:2f:e7:3f:de:6e:30:51:9f:e4:e7:77:d5:90:f8:81:1d:a6:
         4c:92:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:05 2025 by rpki-client