Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/39ad8a08-e7a1-32ce-9fc4-dc5264944584.roa
File:                     39ad8a08-e7a1-32ce-9fc4-dc5264944584.roa (raw, json)
Hash identifier:          LJLYCifyL+RoYBRsn+G26+81DJPxTVWKAKpeQp4M9wo=
Subject key identifier:   FB:AC:C8:27:E8:9C:B2:82:9D:D0:EC:C6:88:E9:2E:66:E6:79:0F:90
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584D75D528DBC334F50ECC8AA380
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/39ad8a08-e7a1-32ce-9fc4-dc5264944584.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        161.129.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:28:db:c3:34:f5:0e:cc:8a:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=a02db079-32ba-454c-b210-f68eb203eeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:3f:91:f4:35:9e:54:cf:5d:85:f9:95:d0:
                    f3:34:76:79:3a:56:ef:53:c2:2d:30:7f:ec:e8:8b:
                    c2:87:a1:95:d7:a4:2f:d8:71:5d:13:24:ad:a2:68:
                    a1:ff:52:59:3e:bc:4f:d2:38:25:46:68:28:e4:39:
                    57:10:46:0c:93:9f:46:0e:12:01:ce:e7:5d:45:38:
                    cd:87:31:8c:4d:15:be:61:be:6c:ab:f1:95:22:9f:
                    44:9b:1c:b6:e2:81:05:9f:b4:fe:43:a3:da:e6:61:
                    7f:fe:f0:b4:1d:b9:9e:f3:55:e7:9a:af:e5:1c:c3:
                    01:ca:18:93:e2:37:f2:2f:d2:7a:ef:9a:c4:05:3d:
                    59:ab:0f:a7:46:cb:8a:4c:af:22:7b:64:dd:e1:20:
                    21:6a:36:f5:35:0b:7e:ab:44:2a:e9:0c:63:4a:9e:
                    ec:d6:e2:33:60:02:84:4d:ff:d0:08:88:01:f2:81:
                    8e:55:52:19:48:58:9a:f0:0f:ce:7d:4c:9e:51:56:
                    27:c9:a6:31:bc:4e:84:f4:54:c5:c9:aa:3d:0b:67:
                    be:0c:36:fa:6d:40:85:9b:41:2c:84:2d:8a:a9:76:
                    e1:f6:21:ff:65:d0:b0:7a:88:4a:03:7e:b6:15:e5:
                    b1:e7:e1:0c:3c:0d:c2:c7:8b:33:68:bf:69:5d:37:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AC:C8:27:E8:9C:B2:82:9D:D0:EC:C6:88:E9:2E:66:E6:79:0F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/39ad8a08-e7a1-32ce-9fc4-dc5264944584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:61:86:f5:19:24:3f:2d:26:50:f2:c4:55:00:25:02:0f:5d:
         73:06:b5:b2:13:f2:29:34:1b:3c:bb:2b:01:a0:56:53:a9:09:
         57:9f:02:6d:d7:92:05:2e:1d:b5:1d:1c:d5:c4:31:8e:52:21:
         52:d8:3d:3c:1e:1d:a3:c0:8b:af:c9:d7:97:b1:0e:63:4a:90:
         66:5a:b1:68:5f:50:5a:c7:87:af:ad:c2:53:c0:dd:2e:11:03:
         70:64:43:80:e0:03:f0:59:ab:dc:3d:02:ca:92:86:b2:bc:a5:
         53:61:4a:af:c4:75:c3:7e:b2:80:e1:f9:c3:cc:32:a6:d1:16:
         f2:ec:46:6d:1c:04:b5:79:fa:a4:41:8f:31:6e:c3:9c:94:cd:
         0e:70:61:ba:9b:0d:e3:3a:2a:e0:8f:4e:e4:fe:a6:c4:1b:c5:
         c7:ce:8c:0d:b9:bf:4c:25:5e:08:7f:0e:48:ad:05:07:5d:40:
         0d:2a:03:59:c8:0c:05:bf:3c:6f:e8:c4:6c:8e:b9:b3:6d:2b:
         43:33:28:dc:09:cf:33:6e:47:7a:10:a1:9f:2b:a8:0d:57:58:
         58:91:9c:25:d0:9e:31:4e:19:49:08:c3:c3:5c:e4:ab:cc:17:
         ca:6e:ed:33:a1:7b:72:05:44:7a:fb:3c:75:a3:1d:8b:45:72:
         8f:0b:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:54 2026 by rpki-client