Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa
File:                     5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa (raw, json)
Hash identifier:          OEquNbX0z3fxj6NcocPltKy6RDNEth+2N/hcZ06jx3E=
Subject key identifier:   3C:E4:2F:FD:2A:C0:28:CB:90:26:9A:3D:50:A2:0A:1B:55:02:61:2E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EC0A7384B7A32F200F3DDBF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.251.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:38:4b:7a:32:f2:00:f3:dd:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=21a15152-d889-4b2d-8d92-0a188c70667c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:af:39:99:1f:5d:e3:83:ea:a0:73:eb:fe:
                    41:3b:5f:13:1b:9a:c7:90:64:ec:e6:39:d7:ae:f4:
                    70:6c:d2:59:f2:93:5f:aa:62:0f:56:33:18:3f:a8:
                    0e:f1:79:2f:51:33:b2:59:94:95:ec:8b:b9:4e:85:
                    bc:51:13:3c:f7:54:f3:88:0c:a3:c4:52:66:ff:44:
                    92:a4:fc:64:d7:53:fd:fc:03:b7:e8:cc:ed:6f:1a:
                    4e:67:d3:07:02:4c:55:d1:ed:f6:07:be:2c:48:0b:
                    ff:93:2f:bc:bd:d5:d6:dd:88:c1:c1:35:b9:6c:44:
                    0a:fb:bf:ec:de:16:c6:8e:4b:70:98:fd:f6:8b:11:
                    6a:4f:c0:4c:3b:0c:30:5c:a1:cf:de:ff:d6:b6:78:
                    34:49:0f:76:7a:c1:73:09:f9:bd:3f:c3:c2:b5:29:
                    f9:aa:3c:9b:b1:99:7d:3a:9d:c9:06:ad:3e:3e:3a:
                    3f:33:21:90:a9:7b:af:4d:ee:96:6a:e6:81:36:36:
                    d2:91:8e:8a:dc:d6:16:a5:5b:3f:bb:2e:dc:c8:0e:
                    29:a4:1a:d2:82:af:99:95:49:aa:29:af:ad:4a:5e:
                    84:b1:9a:93:5d:60:e7:a2:56:6a:8e:48:2e:33:15:
                    4b:76:22:1c:02:51:86:64:66:f4:31:48:88:2c:09:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E4:2F:FD:2A:C0:28:CB:90:26:9A:3D:50:A2:0A:1B:55:02:61:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b7:5d:00:db:0e:f8:af:f0:cc:e8:f7:77:4c:5c:27:c7:ae:
         fb:ba:79:0b:07:34:96:d3:57:66:a6:49:af:e6:10:51:77:d0:
         c0:93:91:10:77:e5:b7:d5:a2:ba:b2:18:83:11:79:45:a0:6a:
         29:06:1b:11:f8:c8:e7:0b:74:5d:d5:47:52:19:03:c1:38:3b:
         38:35:a8:b4:f4:0d:e1:70:6c:83:68:7f:6a:34:60:be:67:e3:
         6c:24:f7:41:a4:ab:f7:59:e3:37:c2:71:74:ff:1f:34:80:11:
         14:a7:d8:d3:2f:d0:a3:65:6f:c3:9e:80:46:c1:54:24:83:cc:
         19:d8:52:63:36:2d:ce:f3:16:cc:f5:5b:70:f2:de:ab:27:85:
         3a:9e:15:84:b4:bd:d0:5c:20:26:aa:6d:2f:ba:e6:5b:02:80:
         f9:bf:a1:39:88:43:34:58:55:ca:17:11:e8:5f:de:cb:ed:6d:
         e5:9d:8e:6e:d8:79:44:31:14:8b:b8:85:d1:7d:02:25:aa:b0:
         83:13:95:dd:f6:af:10:f1:18:05:9e:89:5c:e7:98:6a:4a:09:
         75:fd:cb:0b:88:0f:ae:6f:7f:8f:2f:33:79:ec:f7:b7:7e:6a:
         6c:eb:dc:a2:f7:68:2d:30:2e:57:a7:64:67:a2:f4:d6:cf:48:
         e4:de:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:45:39 2026 by rpki-client