Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d43041ea-aff5-3067-8e35-88b1e8faae8a.roa
File:                     d43041ea-aff5-3067-8e35-88b1e8faae8a.roa (raw, json)
Hash identifier:          G1/GZKXSc0/HkaP9vmskQoVG3VbHoTwCa+zYGX2B6ko=
Subject key identifier:   F2:A4:3E:19:46:B4:64:E7:82:56:EF:08:E7:80:AF:36:94:8A:ED:C8
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D24E0F33D7CAB730146F1A6C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d43041ea-aff5-3067-8e35-88b1e8faae8a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        142.251.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:f3:3d:7c:ab:73:01:46:f1:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=70294b74-6d5e-4e1a-b1af-b5cee381fab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:51:ca:af:30:80:5f:72:54:22:5e:c5:42:
                    17:b1:ec:b2:05:0b:00:b4:77:4f:c1:ce:7b:f5:b3:
                    76:74:09:54:b6:37:b0:8d:8d:53:4f:86:3d:60:5b:
                    02:11:a7:3e:59:95:77:6f:4a:bb:c9:cf:74:ea:83:
                    b2:cb:d4:2f:6d:14:57:42:0c:b7:cb:27:da:db:04:
                    f3:61:72:73:21:54:18:e3:6a:89:2e:4e:3e:7a:91:
                    80:bb:39:b9:ad:74:9a:ea:05:3b:0f:8e:7d:72:fb:
                    11:94:ea:8d:05:11:99:e4:40:b1:7b:54:cc:ca:ac:
                    71:81:28:05:01:09:60:ff:bc:ca:a5:9f:7f:c4:4e:
                    b1:01:a9:6e:19:f9:ee:96:63:c6:92:5f:02:d8:ff:
                    59:ac:cc:d2:4a:8f:11:d8:14:e8:65:33:3f:2e:f0:
                    74:95:e2:f7:54:6d:ed:27:b6:df:b6:93:3f:40:09:
                    2e:90:97:9b:ac:24:de:bb:b1:f2:d4:68:87:16:d1:
                    d6:47:62:5d:70:1f:ad:9c:0e:59:06:1c:44:0a:25:
                    ef:68:65:ec:63:9d:f5:97:f4:36:46:31:a8:89:0a:
                    33:42:04:ca:ad:60:37:3d:87:65:72:b1:fb:a1:5c:
                    3a:68:77:14:17:a8:3c:7e:90:59:35:32:24:a5:ed:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A4:3E:19:46:B4:64:E7:82:56:EF:08:E7:80:AF:36:94:8A:ED:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d43041ea-aff5-3067-8e35-88b1e8faae8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:20:19:4a:5c:76:9a:36:53:fa:5e:0d:b2:4c:06:91:56:35:
         01:fc:63:93:89:21:fd:4b:15:69:14:a5:bb:b1:e8:18:17:80:
         c0:fe:71:68:24:1f:b6:fa:3f:56:b9:35:f7:10:ed:f6:25:a6:
         ff:87:d0:c7:58:e0:7b:4a:a6:a9:48:28:53:01:b1:af:ab:bf:
         aa:53:a8:6f:1b:b9:cd:8a:ce:54:4c:71:25:4b:91:9b:c5:1e:
         74:98:f6:73:ba:19:91:42:14:8d:19:e5:d5:d1:91:00:20:91:
         07:75:1f:9d:c4:45:50:60:41:08:56:62:87:cb:1d:54:5f:22:
         87:8f:a1:f8:98:01:a5:71:76:c7:c4:7b:e7:86:07:ba:ab:0c:
         90:05:48:84:04:19:24:5b:aa:6c:66:d6:27:7b:38:9d:f9:3a:
         1c:30:04:de:dd:6c:81:2e:39:a6:a8:4b:37:76:71:ce:48:16:
         3b:03:6a:91:4d:51:bf:41:ff:e9:10:47:4e:b6:a1:f8:67:d2:
         82:ec:00:dd:6e:7c:e7:e8:59:75:03:a6:e3:c3:64:56:31:bd:
         e9:83:8b:8c:8b:d6:56:62:87:a0:08:8e:da:0b:a4:72:d4:bf:
         e6:fa:58:51:6d:11:e9:8d:23:5b:83:2b:cb:06:b4:b7:6b:4f:
         d7:09:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:29:50 2026 by rpki-client