Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa
File:                     558a9f03-d275-3df3-9fd9-2afd50775883.roa (raw, json)
Hash identifier:          cyPb666zc8Ste4CtObW1Jtlc4ab8o84+EQ+lFb+VTlk=
Subject key identifier:   1A:76:26:0A:FC:C5:FD:66:E1:79:51:0F:84:8A:E9:9D:04:CC:56:08
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EC0A73883DCA348B2E2A22540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.250.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:38:83:dc:a3:48:b2:e2:a2:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=287b4532-a235-457d-8c92-7a13e32ef232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6d:e4:1a:f4:ed:ff:b7:f1:33:ec:5b:18:f3:
                    42:4a:8a:07:c2:01:3c:d2:79:1c:53:06:ea:f7:ab:
                    58:dc:35:5f:95:a5:9c:48:2b:49:fc:f1:75:d0:8c:
                    ef:db:64:ce:a5:9d:0a:4d:33:4f:01:02:0b:b2:87:
                    1f:98:b7:7c:6c:5a:0e:76:95:1c:f6:b6:86:9d:d4:
                    0b:35:66:6b:15:9a:06:d4:5a:4a:5d:59:9c:17:c2:
                    7c:eb:0d:ff:c6:68:f5:32:3e:2d:37:32:fc:d0:fe:
                    1d:9d:43:e7:ee:ba:e1:c5:f1:7e:02:08:c9:d5:ac:
                    ef:65:a7:0e:b6:f1:ba:ee:c4:a7:83:11:45:8b:1c:
                    b6:b9:ae:65:57:e8:b5:40:8f:65:49:09:5b:9d:cb:
                    8e:90:e5:dd:97:d0:c5:9b:b7:f4:18:ff:91:46:41:
                    9d:7a:8d:10:b5:da:98:c1:f2:b2:ac:32:11:0a:14:
                    d7:81:8c:6f:f1:c9:62:a5:36:1c:56:4e:ac:71:f7:
                    64:9c:6f:38:8f:70:7a:a3:36:95:3f:94:77:6a:64:
                    9d:61:5c:8b:0c:fa:0f:3f:c3:b1:a0:56:55:2d:03:
                    1d:be:e9:93:99:b8:d1:c3:3a:08:ba:b7:f1:bd:33:
                    eb:bb:bc:cc:17:13:15:51:cd:21:ec:58:0f:9c:6d:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:76:26:0A:FC:C5:FD:66:E1:79:51:0F:84:8A:E9:9D:04:CC:56:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:53:b7:46:ff:71:93:7b:17:65:fc:e8:ba:c9:47:1f:16:31:
         9a:50:44:bf:08:2d:e2:6b:3a:a5:00:3b:5f:aa:f1:19:a3:39:
         ee:9d:ae:bf:45:23:46:58:0e:98:94:38:1f:75:51:23:80:9c:
         cc:0a:7b:58:a9:04:a9:c4:99:21:7d:81:43:65:e7:ef:ed:6d:
         54:27:6f:f0:b0:cf:05:8b:25:fb:cb:c6:9d:31:16:a9:8d:84:
         5b:4a:cc:a0:77:89:99:d4:90:d9:ad:18:eb:43:d6:1f:b7:6b:
         2e:76:de:e5:db:9a:b6:cf:54:eb:fc:1c:5b:26:a4:3a:90:b0:
         77:c7:78:7f:90:b7:f8:5e:06:36:ea:87:72:60:8c:ed:bc:d3:
         8f:98:ac:de:36:dd:df:7f:9a:ad:12:68:c2:3e:fc:96:e6:ee:
         ba:68:e6:f6:84:ad:5a:b2:d5:9b:1b:27:76:89:c6:17:48:48:
         b2:8b:87:60:3f:0c:71:85:47:f8:d7:ea:fb:41:1a:b1:36:15:
         57:73:62:e1:b8:55:92:ca:4a:34:ff:f2:c7:df:95:2d:72:c1:
         be:d2:76:70:df:c7:48:3e:df:bb:48:78:91:85:d5:4f:bc:0f:
         dd:60:89:48:88:f2:9b:cf:67:c4:73:56:2b:ee:a4:e8:90:ff:
         2c:13:6f:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApziD3KNIsuKiJUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
Mjg3YjQ1MzItYTIzNS00NTdkLThjOTItN2ExM2UzMmVmMjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA723kGvTt/7fxM+xbGPNCSooHwgE80nkcUwbq
96tY3DVflaWcSCtJ/PF10Izv22TOpZ0KTTNPAQILsocfmLd8bFoOdpUc9raGndQL
NWZrFZoG1FpKXVmcF8J86w3/xmj1Mj4tNzL80P4dnUPn7rrhxfF+AgjJ1azvZacO
tvG67sSngxFFixy2ua5lV+i1QI9lSQlbncuOkOXdl9DFm7f0GP+RRkGdeo0QtdqY
wfKyrDIRChTXgYxv8clipTYcVk6scfdknG84j3B6ozaVP5R3amSdYVyLDPoPP8Ox
oFZVLQMdvumTmbjRwzoIurfxvTPru7zMFxMVUc0h7FgPnG1UEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBp2Jgr8xf1m4XlRD4SK6Z0EzFYIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU4YTlmMDMtZDI3NS0z
ZGYzLTlmZDktMmFmZDUwNzc1ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZTt0b/cZN7F2X86LrJRx8WMZpQRL8ILeJrOqUAO1+q8RmjOe6drr9F
I0ZYDpiUOB91USOAnMwKe1ipBKnEmSF9gUNl5+/tbVQnb/CwzwWLJfvLxp0xFqmN
hFtKzKB3iZnUkNmtGOtD1h+3ay523uXbmrbPVOv8HFsmpDqQsHfHeH+Qt/heBjbq
h3JgjO2804+YrN423d9/mq0SaMI+/Jbm7rpo5vaErVqy1ZsbJ3aJxhdISLKLh2A/
DHGFR/jX6vtBGrE2FVdzYuG4VZLKSjT/8sfflS1ywb7SdnDfx0g+37tIeJGF1U+8
D91giUiI8pvPZ8RzVivupOiQ/ywTbxk=
-----END CERTIFICATE-----
Generated at Fri Aug 7 21:45:57 2026 by rpki-client