Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cea4d942-b1e3-3aee-9939-b071ecb89414.roa
File:                     cea4d942-b1e3-3aee-9939-b071ecb89414.roa (raw, json)
Hash identifier:          MX93RGdtiGYle1ooEaxaonlcr/MxtGfGqlXviI7KiLU=
Subject key identifier:   1B:9A:93:1E:3D:B4:31:ED:3A:0D:3B:68:F0:EA:20:F4:67:54:97:0B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA7A061986AFA093D47EC1D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cea4d942-b1e3-3aee-9939-b071ecb89414.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        142.250.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:61:98:6a:fa:09:3d:47:ec:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b5762140-f81a-4111-9680-a0953a782ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:ca:4c:0f:94:5d:e6:64:b9:c2:60:53:29:
                    1b:0d:7f:59:e4:13:f1:9b:88:ca:ce:bb:c3:37:bf:
                    6c:f4:9f:4b:21:d1:5c:68:07:1c:7a:66:71:2f:53:
                    e9:d8:00:2f:83:12:9c:ea:86:33:67:ee:23:e8:d5:
                    55:6d:d1:c4:38:1c:ef:51:e6:85:49:5b:f2:ae:19:
                    fd:4a:63:04:1a:79:fd:87:e0:fc:c7:fe:15:72:b6:
                    fa:33:02:f6:64:83:6f:68:ea:84:00:05:5b:34:ca:
                    f5:c5:d8:cb:cb:32:32:ec:b4:59:8e:52:2d:e4:7c:
                    3b:5f:29:0f:3a:f0:4d:af:34:be:20:b0:35:d3:8a:
                    62:5c:8b:7a:9b:e1:53:12:5d:bb:80:64:ce:83:4c:
                    43:97:56:c0:d5:a5:d3:71:74:ce:3b:99:7a:c9:d2:
                    30:f1:f5:83:7a:2b:71:24:fb:e1:3b:5f:06:c4:d6:
                    e0:9d:65:e9:5f:5e:23:55:42:5d:55:cf:06:aa:dd:
                    48:60:37:8f:b4:a9:48:e3:e3:45:37:af:06:53:52:
                    ef:29:f9:cb:e5:a4:98:b1:6a:20:c1:d7:bc:28:01:
                    52:f3:17:e9:f8:29:67:9e:a7:1b:eb:f6:b6:5d:e4:
                    28:e3:72:02:36:92:e9:35:40:bb:dd:85:4a:d7:0c:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9A:93:1E:3D:B4:31:ED:3A:0D:3B:68:F0:EA:20:F4:67:54:97:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cea4d942-b1e3-3aee-9939-b071ecb89414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0b:40:bc:81:74:b2:cc:96:73:ba:c8:54:95:80:d4:54:9a:
         d9:8f:82:38:80:21:bb:0c:08:20:be:5b:8c:43:2b:d2:8e:19:
         06:03:2e:15:20:eb:0c:6a:d3:ed:7f:59:bb:92:e4:ea:f8:61:
         b2:26:d9:66:9e:d9:77:09:43:4b:07:18:23:e2:c1:40:85:37:
         e0:b2:a0:1c:86:a1:35:53:fc:b7:80:89:27:73:cb:de:55:87:
         d3:8b:14:fb:37:64:2a:34:27:5f:ce:da:6e:4b:38:25:b0:0c:
         57:4f:6c:7f:e5:c4:2d:1f:32:07:f9:f9:66:96:97:13:3b:6b:
         38:ea:b2:2c:67:84:68:ca:37:dd:3d:d6:a5:8c:95:13:90:8b:
         d1:da:9f:39:b7:e1:fe:7c:94:ef:77:a5:be:a0:cc:4c:32:e8:
         f3:3d:ab:31:84:df:17:0c:39:13:b7:f1:67:cd:c7:3a:65:da:
         9b:7f:aa:ad:bf:8b:94:88:12:ba:4e:a9:59:ca:25:8c:e2:82:
         e9:2b:8c:d0:1f:56:9a:ab:75:89:ac:76:9b:79:cf:7e:71:9d:
         68:02:00:e4:84:ca:c0:9b:f5:f0:36:a6:9a:ea:e6:3a:3d:94:
         29:41:07:6f:93:1d:00:94:8b:d7:63:dd:44:5b:66:9f:e3:46:
         c5:59:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:45:35 2026 by rpki-client