Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa
File:                     b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa (raw, json)
Hash identifier:          3kXHPr1E/Ql+JstbLNrqpCfrZ/6zViN0tZzf4WNEFlY=
Subject key identifier:   13:79:B5:FF:48:B0:44:86:9D:04:49:02:CE:E5:FF:CF:F1:4D:C5:8F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EC0A754956F933F517D322000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.250.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:54:95:6f:93:3f:51:7d:32:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=2f0adfb6-7165-4d86-bae7-84efb9283ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:96:03:d9:3a:8e:6f:ed:d5:e2:f7:55:04:
                    d1:04:7b:23:f7:da:b8:d3:5a:da:7f:68:79:c2:79:
                    b1:b9:b0:80:4c:48:f8:47:5c:a2:12:a4:9c:ca:e2:
                    52:98:67:4d:4e:ae:af:9d:03:5d:bc:e4:e9:b8:9f:
                    95:83:e0:40:d6:39:ae:05:fe:2d:2a:11:b9:09:45:
                    50:41:43:63:d1:68:02:9a:8b:21:65:40:67:93:7f:
                    66:1e:cc:6e:50:25:49:9b:c2:aa:bf:9b:0a:67:70:
                    cb:e5:fd:f4:d3:dd:96:61:c7:2a:60:2e:2d:c5:c0:
                    55:eb:0f:ee:ce:78:32:d7:96:85:22:5a:e4:61:9a:
                    bf:2f:cc:fb:18:ac:3d:00:38:4d:63:e0:4e:bf:9d:
                    37:ac:fc:c8:87:05:de:06:4c:ea:da:d8:9f:0e:87:
                    a6:91:19:03:11:ac:69:80:64:8f:10:fd:ae:a3:d4:
                    ce:de:42:ee:11:09:8d:65:50:08:ba:6e:27:e4:11:
                    14:c7:b7:7e:c6:95:03:a2:02:2c:58:de:20:18:25:
                    5d:ef:f6:32:2c:ff:26:f2:af:e1:ed:a6:05:ae:95:
                    5f:03:a9:e1:f0:ee:e2:fd:a3:f2:75:f8:26:c6:24:
                    9c:1c:22:2f:07:0d:63:71:0b:47:da:9e:90:a9:85:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:79:B5:FF:48:B0:44:86:9D:04:49:02:CE:E5:FF:CF:F1:4D:C5:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:df:0c:46:24:c8:45:51:79:cb:f0:47:db:96:41:63:f8:
         66:86:1d:58:d9:84:42:d6:90:f9:a4:35:24:2b:29:f6:5f:d3:
         5f:6a:3e:0f:f3:04:95:b0:86:fb:2c:cc:a3:6a:cd:64:5e:a5:
         bc:7c:66:54:c5:43:2d:23:99:4b:cb:7a:d7:f6:eb:2a:5b:b7:
         6e:c4:d8:c9:40:c7:3e:8f:7e:ed:25:16:46:0b:bf:21:e5:b3:
         80:e3:e4:c5:4a:41:bc:e3:dc:3f:3c:89:b1:61:c5:35:01:24:
         f0:90:04:59:3a:8f:1a:9b:d4:3a:e0:e7:59:e0:49:89:c6:51:
         4c:5a:c3:b6:00:00:73:fb:1b:04:f7:b8:cb:d2:02:03:cc:9f:
         c5:6b:a3:3c:54:b2:e4:6e:6b:5a:ea:00:8d:45:43:b5:e4:45:
         7c:85:09:a3:3e:e6:f6:04:c7:e4:63:7a:f0:93:3f:75:86:68:
         f6:72:9f:48:4b:78:3a:b7:d5:69:60:d1:7a:d0:47:88:af:e0:
         52:dc:80:aa:7d:c5:da:5c:1e:6c:e9:ee:21:6e:77:0e:e0:6d:
         a0:48:81:2c:8c:17:a9:3c:41:38:f2:b6:9e:c3:32:15:46:ed:
         3f:29:a3:a3:8e:b6:2b:c4:19:af:e4:41:ed:7f:55:84:30:0f:
         78:fe:45:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1SVb5M/UX0yIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
MmYwYWRmYjYtNzE2NS00ZDg2LWJhZTctODRlZmI5MjgzY2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBSWA9k6jm/t1eL3VQTRBHsj99q401raf2h5
wnmxubCATEj4R1yiEqScyuJSmGdNTq6vnQNdvOTpuJ+Vg+BA1jmuBf4tKhG5CUVQ
QUNj0WgCmoshZUBnk39mHsxuUCVJm8Kqv5sKZ3DL5f30092WYccqYC4txcBV6w/u
zngy15aFIlrkYZq/L8z7GKw9ADhNY+BOv503rPzIhwXeBkzq2tifDoemkRkDEaxp
gGSPEP2uo9TO3kLuEQmNZVAIum4n5BEUx7d+xpUDogIsWN4gGCVd7/YyLP8m8q/h
7aYFrpVfA6nh8O7i/aPydfgmxiScHCIvBw1jcQtH2p6QqYXz6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBN5tf9IsESGnQRJAs7l/8/xTcWPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjYwMDM0YWQtYTEzZS0z
Yjg0LThlZWQtM2M0ZWUxZmE4ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvptMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8Q3wxGJMhFUXnL8EfblkFj+GaGHVjZhELWkPmkNSQrKfZf019qPg/z
BJWwhvsszKNqzWRepbx8ZlTFQy0jmUvLetf26ypbt27E2MlAxz6Pfu0lFkYLvyHl
s4Dj5MVKQbzj3D88ibFhxTUBJPCQBFk6jxqb1Drg51ngSYnGUUxaw7YAAHP7GwT3
uMvSAgPMn8VrozxUsuRua1rqAI1FQ7XkRXyFCaM+5vYEx+RjevCTP3WGaPZyn0hL
eDq31Wlg0XrQR4iv4FLcgKp9xdpcHmzp7iFudw7gbaBIgSyMF6k8QTjytp7DMhVG
7T8po6OOtivEGa/kQe1/VYQwD3j+RSk=
-----END CERTIFICATE-----
Generated at Fri Aug 7 21:44:52 2026 by rpki-client