Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4eec12-f322-37ab-ab29-a10d04821136.roa
File:                     fd4eec12-f322-37ab-ab29-a10d04821136.roa (raw, json)
Hash identifier:          +k6W/bQWpggs7GhkikCAi6vOQ8ieJWPG630qnj8Y1+o=
Subject key identifier:   D4:05:88:D7:95:3C:4D:98:88:1C:30:B4:E9:88:F2:3B:82:42:AB:99
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F4985437F57B20B4D60205580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4eec12-f322-37ab-ab29-a10d04821136.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.250.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:43:7f:57:b2:0b:4d:60:20:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=371d3b0c-a896-4299-96fd-507813bcbc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3e:03:20:13:51:64:28:5d:2c:82:eb:62:4e:
                    3c:38:73:a9:bb:0a:35:57:e2:9b:aa:f1:c7:e3:e6:
                    0f:c4:7a:a9:39:56:42:c9:e7:88:16:1b:48:4d:9c:
                    c4:e4:70:1d:d0:16:48:7a:d6:31:fc:e0:17:d0:a9:
                    f0:a6:6c:f8:0a:73:10:1b:e0:d2:7a:c5:8d:83:b3:
                    75:dc:7f:95:9a:1e:01:5f:01:b5:b4:05:af:3f:c1:
                    a3:5b:27:65:80:ea:fa:af:5c:6f:64:11:74:fd:18:
                    39:d0:7f:e8:f2:1d:15:ea:8a:17:6d:7b:f7:b8:25:
                    3f:f6:90:86:c4:f9:64:be:22:0e:53:c9:af:76:6f:
                    c7:57:12:16:9b:97:63:20:9d:49:89:89:9f:0c:97:
                    2f:49:b8:fc:75:c9:39:5b:32:d3:b2:8d:7e:10:05:
                    c8:4d:10:da:66:44:a2:5a:89:b4:3f:a9:27:4c:25:
                    02:67:f4:31:a7:77:ab:e2:4b:50:8a:f4:55:af:2b:
                    9a:8c:9d:f3:b3:0e:f2:3a:ad:50:84:a4:74:2d:e2:
                    31:75:66:96:68:11:95:13:4f:40:df:28:98:2e:2e:
                    30:32:96:b9:e4:1a:ef:b3:12:74:96:c6:00:e2:dc:
                    d3:cf:e5:95:35:19:e2:ef:46:4a:45:e5:0f:de:0e:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:88:D7:95:3C:4D:98:88:1C:30:B4:E9:88:F2:3B:82:42:AB:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4eec12-f322-37ab-ab29-a10d04821136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:d8:91:5b:ed:c6:53:32:7f:ad:af:41:bd:38:44:fc:e7:
         65:02:1b:ec:fa:28:8d:c1:74:ca:8f:6e:07:e2:1b:3f:c0:db:
         43:81:3c:78:a6:9a:4d:6d:60:cc:c0:cf:0b:5c:cf:39:c1:22:
         fa:4e:b9:3f:7c:7c:08:95:d7:47:82:bb:98:d4:d5:fa:cd:71:
         68:0e:4d:7d:4a:bb:19:8f:1b:59:b8:b1:b4:9c:3d:65:c3:7f:
         ff:1f:b3:8f:65:3d:16:2c:fb:79:33:2e:60:fe:a3:40:fb:0e:
         da:d0:32:f6:93:20:97:bf:71:f7:06:99:e3:10:67:4f:ff:0d:
         17:33:13:27:37:6b:32:61:d3:31:15:37:cb:5b:89:b0:c6:24:
         cb:58:71:75:f6:f9:17:c7:ff:2e:7e:97:1f:3e:65:7e:3a:58:
         fd:91:58:0e:7f:ae:1d:c6:7c:ad:a8:a7:51:74:2c:32:3f:2b:
         be:30:6e:0e:ec:12:5d:dd:81:a0:79:4e:d2:b6:92:a6:7a:c2:
         42:39:43:1a:a2:e7:76:8f:57:53:77:a8:28:90:10:2b:55:43:
         5d:ea:e9:55:14:f2:ca:72:85:32:82:0b:22:87:21:5c:2b:7e:
         55:93:7d:02:e7:39:8b:88:ee:b3:c7:56:db:45:00:e6:e2:12:
         84:78:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:50:17 2026 by rpki-client