Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa2a0cc6-6a4b-3cf5-8ac7-94c00ad87635.roa
File:                     fa2a0cc6-6a4b-3cf5-8ac7-94c00ad87635.roa (raw, json)
Hash identifier:          yzx9PAWvzVgu1c4Gv+X7236kkcU3RpUazVHH5QlRpFk=
Subject key identifier:   F3:CD:04:B5:66:2B:15:D6:52:2A:CA:84:DF:D6:C5:D0:84:0E:FE:9B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F497D265326692FBBE04D2FC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa2a0cc6-6a4b-3cf5-8ac7-94c00ad87635.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.251.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:26:53:26:69:2f:bb:e0:4d:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4e8da9b4-cb8f-4b74-85c6-1d5a44d2253b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:53:c4:5f:0a:69:2b:bd:30:b6:1e:d0:7e:
                    2a:0e:9c:cb:27:cb:3b:24:da:c3:01:68:d8:23:1e:
                    ec:b9:55:92:d8:f2:b3:ff:e0:dc:77:b4:5e:3d:38:
                    41:de:ae:b0:59:af:ba:9f:34:83:5c:18:8b:84:62:
                    58:d2:32:50:0d:ef:3d:e5:aa:82:32:f7:24:53:e6:
                    d8:eb:fb:9b:99:7a:04:07:80:a6:89:57:a6:7b:1f:
                    2d:15:3e:b7:4d:08:89:3e:f3:75:2d:99:b2:1f:1a:
                    6a:38:4f:4f:6e:d3:42:0d:cf:ed:e7:dd:36:cb:04:
                    01:ee:bd:e9:7d:a1:b7:a5:ba:80:ba:27:f3:31:ed:
                    a4:a1:f1:62:c8:80:fa:b4:be:c4:85:b8:ee:48:91:
                    a1:aa:ca:20:26:81:af:a6:9f:4d:06:0d:d2:5e:2d:
                    3e:2e:51:52:a0:48:99:49:8b:0b:3e:69:26:88:44:
                    c9:25:e4:63:ca:96:79:91:55:b7:ba:5b:38:2d:f7:
                    7f:cf:2d:f2:67:3c:24:fe:66:1e:65:44:d3:15:07:
                    8f:3f:e0:0c:79:a2:24:2b:20:1e:dd:e3:67:3d:fa:
                    93:15:0f:68:5e:f2:df:2a:d8:cf:f2:0f:55:c9:76:
                    21:1b:b3:55:b7:29:0c:7b:f8:5a:01:c5:24:6d:a2:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CD:04:B5:66:2B:15:D6:52:2A:CA:84:DF:D6:C5:D0:84:0E:FE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa2a0cc6-6a4b-3cf5-8ac7-94c00ad87635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:d4:05:87:8b:2f:b3:da:f7:42:11:d8:af:63:e6:84:1f:
         be:7a:35:24:6b:1d:03:b3:4f:ed:b1:af:58:af:87:d4:54:33:
         af:a2:a6:22:d0:28:20:2b:02:e4:cf:fa:15:09:ed:30:c4:39:
         11:42:38:5b:55:6d:58:7b:b7:fa:1c:11:a2:f8:65:4e:a8:51:
         a5:77:cd:3b:16:4a:a0:76:57:69:d9:53:de:86:43:70:f4:b7:
         84:d1:b9:91:96:fb:32:c5:a2:2a:e9:20:20:cb:85:34:f0:03:
         48:96:9a:1e:b0:0f:2e:4c:92:f6:77:60:af:f4:1d:c7:3a:8b:
         a7:9c:40:7e:9a:b4:62:34:98:68:23:a6:6c:36:2d:20:48:e1:
         ec:49:0c:43:9f:25:89:22:76:e3:82:68:51:f5:5e:18:e6:a6:
         ec:42:f1:10:d4:79:27:8a:0c:05:25:57:e0:cc:64:df:03:20:
         47:f1:4f:4a:3b:10:15:cb:12:5c:0f:2f:9c:a3:35:5e:6d:f3:
         c8:e1:4b:91:70:f9:d3:00:f4:f8:2b:a1:ac:96:32:8d:61:b9:
         ef:46:30:20:b4:33:d7:19:db:28:c0:c3:73:fd:27:1d:be:91:
         47:07:79:00:88:59:2d:a0:32:01:97:85:80:08:fd:4b:c9:9c:
         94:82:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:52:55 2026 by rpki-client