Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6297adc8-6cb6-3872-ac71-d678e23f793d.roa
File:                     6297adc8-6cb6-3872-ac71-d678e23f793d.roa (raw, json)
Hash identifier:          2bJfFUgb+Wg5RyKKkR/8/mE28XRn4JvmQEiiNHOrUxw=
Subject key identifier:   AF:88:BF:13:DF:70:CC:E4:83:E5:35:02:D4:02:94:8D:05:A7:03:42
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F4986996D7B85C9B1B94CA380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6297adc8-6cb6-3872-ac71-d678e23f793d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.251.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:99:6d:7b:85:c9:b1:b9:4c:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=48547a9a-af94-45da-acde-8b377443f31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:b4:4e:f6:47:71:fb:80:27:52:43:e8:26:
                    3e:e3:9e:74:e0:a6:9a:6d:3c:71:d2:b9:60:4b:7a:
                    bf:3b:73:e6:4b:7a:8f:1d:65:c6:64:8a:fd:41:42:
                    be:30:2a:10:b9:d4:b6:e2:ed:cf:a7:2e:c7:f0:c0:
                    5c:a6:ea:60:f9:76:87:88:27:ff:83:d0:8a:78:9c:
                    07:2c:40:6f:0b:78:b7:14:ce:1d:39:5e:1a:0d:16:
                    84:66:a2:5d:33:c6:0e:92:a0:36:af:59:15:c6:17:
                    56:c8:95:04:71:10:ee:f6:2f:79:0e:2d:31:f8:ff:
                    0f:3a:1e:ab:a0:8c:d6:88:0c:e6:e2:59:1e:45:54:
                    43:cb:59:73:60:07:71:38:d7:ff:5c:e8:86:6e:53:
                    91:ad:4c:0e:0c:81:b5:4f:a5:db:4d:24:ab:d9:3a:
                    f3:7f:39:4c:02:6a:3f:b0:86:73:3f:1c:05:87:eb:
                    ea:28:d6:e3:0a:58:d3:e0:ca:82:42:8c:4e:6a:ad:
                    eb:c3:fc:cf:d8:bc:48:e6:33:53:09:a8:19:cb:cd:
                    3c:30:41:55:ef:4c:e4:45:58:da:d7:89:09:99:82:
                    7a:53:34:58:7b:6d:3d:33:06:83:6a:fb:8f:55:6a:
                    19:79:c6:bb:50:22:71:c3:ee:8f:a2:02:e0:96:69:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:88:BF:13:DF:70:CC:E4:83:E5:35:02:D4:02:94:8D:05:A7:03:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6297adc8-6cb6-3872-ac71-d678e23f793d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:26:65:e8:95:30:eb:f0:4e:9a:c7:d5:32:48:25:60:93:7a:
         2b:eb:e7:cf:c1:c1:37:c9:b3:6f:50:9a:a3:35:e3:74:83:34:
         db:df:c1:a8:c6:55:6e:11:c5:c9:9a:61:be:6f:68:bf:7b:33:
         6b:16:d4:1a:93:fb:29:47:3a:dd:ca:63:90:10:ea:3d:6c:27:
         f1:01:43:8e:34:7f:2f:ff:8e:16:fc:18:12:cb:b0:b6:2b:d6:
         56:23:0c:fe:7e:30:c3:e2:aa:36:15:19:ed:25:a4:70:75:8f:
         9e:e4:0a:f9:9f:1a:92:67:0d:a2:31:19:96:2b:f6:09:fc:c9:
         5f:c4:77:33:9a:6b:e3:1a:a8:b4:bf:15:57:9e:8e:9b:b4:7b:
         16:46:c0:ed:65:57:25:08:ad:4c:1f:88:39:f4:ba:7c:bd:11:
         ea:af:e3:be:74:8a:76:06:fd:7a:29:c2:8c:37:1d:00:3a:37:
         1c:18:9d:5b:09:f7:3b:c1:f0:d1:db:da:01:8a:7b:57:b2:c6:
         15:e9:ee:a0:a7:d7:e4:78:56:4e:23:53:f6:8e:e5:06:60:6e:
         e7:75:db:11:bf:05:e6:0c:0f:ea:72:9f:85:8b:fd:ea:5b:3d:
         a0:f2:09:7e:d9:61:48:1d:32:f7:f3:34:fb:b6:49:70:95:b2:
         6b:54:ed:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhplte4XJsblMo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDg1NDdhOWEtYWY5NC00NWRhLWFjZGUtOGIzNzc0NDNmMzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0m0TvZHcfuAJ1JD6CY+45504KaabTxx0rlg
S3q/O3PmS3qPHWXGZIr9QUK+MCoQudS24u3Ppy7H8MBcpupg+XaHiCf/g9CKeJwH
LEBvC3i3FM4dOV4aDRaEZqJdM8YOkqA2r1kVxhdWyJUEcRDu9i95Di0x+P8POh6r
oIzWiAzm4lkeRVRDy1lzYAdxONf/XOiGblORrUwODIG1T6XbTSSr2TrzfzlMAmo/
sIZzPxwFh+vqKNbjCljT4MqCQoxOaq3rw/zP2LxI5jNTCagZy808MEFV70zkRVja
14kJmYJ6UzRYe209MwaDavuPVWoZeca7UCJxw+6PogLglmlgZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+IvxPfcMzkg+U1AtQClI0FpwNCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjI5N2FkYzgtNmNiNi0z
ODcyLWFjNzEtZDY3OGUyM2Y3OTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvvTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsmZeiVMOvwTprH1TJIJWCTeivr58/BwTfJs29QmqM143SDNNvfwajG
VW4RxcmaYb5vaL97M2sW1BqT+ylHOt3KY5AQ6j1sJ/EBQ440fy//jhb8GBLLsLYr
1lYjDP5+MMPiqjYVGe0lpHB1j57kCvmfGpJnDaIxGZYr9gn8yV/EdzOaa+MaqLS/
FVeejpu0exZGwO1lVyUIrUwfiDn0uny9Eeqv4750inYG/Xopwow3HQA6NxwYnVsJ
9zvB8NHb2gGKe1eyxhXp7qCn1+R4Vk4jU/aO5QZgbud12xG/BeYMD+pyn4WL/epb
PaDyCX7ZYUgdMvfzNPu2SXCVsmtU7eI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:37:17 2026 by rpki-client