Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa
File:                     ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa (raw, json)
Hash identifier:          ZfMuxGbqpctm4IOvg51f+r+vO0g07Gi4aPkpZJRILU0=
Subject key identifier:   18:B7:D1:2D:E7:C1:C7:FA:FF:FF:4D:98:02:A2:73:F8:FE:06:56:89
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B7DECBC0707BE773BCCD38D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     15169
IP address blocks:        142.250.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:bc:07:07:be:77:3b:cc:d3:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=39de4101-d505-4312-b227-fd486e5707fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:d2:e4:07:33:15:d0:e7:6d:fb:fc:a2:9d:
                    f7:a1:ff:24:55:c9:f2:fa:f2:a1:02:55:b3:de:22:
                    78:95:2b:e7:2c:c5:ea:ec:10:3e:29:11:72:69:21:
                    7f:1f:56:e6:78:04:ee:13:45:80:71:fa:14:60:3d:
                    2b:eb:aa:ac:29:7e:79:9e:e3:cd:70:69:1d:87:00:
                    e1:a4:91:16:ba:dd:cc:78:d8:87:02:d8:97:f5:02:
                    7b:44:7a:85:8c:fd:03:12:c2:d7:43:d0:a2:60:47:
                    77:c7:5b:e6:23:8e:08:b1:64:45:a6:f2:c6:33:e7:
                    a3:be:47:dd:49:b1:46:90:8a:52:76:af:a1:06:e0:
                    be:7e:e2:27:1a:ce:d8:b6:d8:7e:ab:2a:c0:5e:dd:
                    df:0f:86:49:63:1d:ce:a7:51:2e:7d:5d:ce:5f:dc:
                    d5:31:bf:dc:fa:b7:18:ca:8a:33:46:d7:8e:d5:cd:
                    c2:9b:bf:15:04:b4:86:2b:24:bf:07:86:83:04:24:
                    37:cd:41:65:29:6b:72:54:ca:c7:a7:e5:78:7e:6a:
                    46:6e:8d:b2:e1:5f:d3:ac:c4:7f:e6:18:71:20:3b:
                    dd:dd:75:9c:99:2b:0b:04:6b:d1:21:2b:52:05:be:
                    e8:cf:67:27:2a:8d:08:c5:99:76:e9:b3:b1:a6:98:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B7:D1:2D:E7:C1:C7:FA:FF:FF:4D:98:02:A2:73:F8:FE:06:56:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:e8:45:51:5b:5d:9f:d8:45:7c:d6:e8:b4:fb:bf:21:fe:
         3a:db:96:1b:cc:fc:61:74:93:27:95:6d:1f:19:ed:29:c9:3a:
         5d:95:31:ff:45:8c:8c:e1:d2:04:d6:7e:0d:09:25:e3:3b:fe:
         68:b5:a8:ab:ac:0e:30:53:a5:f8:4f:29:d3:85:38:47:56:cc:
         2b:0b:d9:8a:87:22:aa:5f:d9:b8:d9:e0:72:97:f0:26:51:63:
         48:5b:40:98:5d:c4:ca:7c:ce:17:5c:7c:33:16:36:82:f5:59:
         e2:67:7b:d0:2b:5c:81:52:2d:00:ec:d9:a0:f4:f0:71:b6:16:
         41:5c:5c:95:56:b9:d7:3b:d9:c5:cf:e2:d0:06:8c:7d:94:1b:
         9e:4d:bc:41:13:78:ed:ef:23:43:eb:59:9a:a8:93:9a:35:9f:
         a5:49:35:8c:07:fe:0e:40:8d:04:ce:63:05:76:99:2d:a5:90:
         3b:f6:de:22:78:8a:ed:43:6c:47:22:6c:24:0a:6d:f4:f0:58:
         2e:d8:13:60:67:76:b2:e2:09:1b:26:e0:69:d0:17:9e:db:08:
         43:2d:fe:a4:02:a9:ba:c3:d3:80:56:29:0c:cb:ab:1a:4b:09:
         48:bf:08:f1:98:f3:9a:6e:16:36:f8:23:ae:2c:87:18:20:ec:
         45:69:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:25 2025 by rpki-client