Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/50657a51-68a7-349d-b89d-b61b8fcb4f8a.roa
File:                     50657a51-68a7-349d-b89d-b61b8fcb4f8a.roa (raw, json)
Hash identifier:          nt6qqSMF8jQXT6SrCLmeLGWCUfGX4Yw3onztd4x3XX0=
Subject key identifier:   C1:55:C9:6A:E6:6F:CD:D8:F0:D6:35:2B:FB:71:89:EC:BE:41:B7:8B
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584CE4C7769805FA4FEDCB7B8600
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/50657a51-68a7-349d-b89d-b61b8fcb4f8a.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     213122
IP address blocks:        161.129.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:76:98:05:fa:4f:ed:cb:7b:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=7876cff6-ab00-434d-90c8-f18e3b976e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:fa:66:8d:2f:de:7b:f2:d7:5f:63:b9:78:
                    5b:40:56:af:bb:b0:03:ad:92:4f:b4:1b:f9:fb:4c:
                    a0:e1:e1:ab:2c:b9:aa:fe:f8:4e:6b:e6:65:04:da:
                    f0:f8:cb:56:a0:81:aa:c4:c3:a8:f2:02:24:0c:2a:
                    70:87:71:d1:14:78:a7:26:a0:37:b1:b5:ef:11:47:
                    97:e6:7c:4d:37:53:42:93:e5:6d:d7:69:92:27:0a:
                    f9:57:3d:d6:8a:62:59:a1:75:ec:6b:82:21:64:f3:
                    e8:0b:6e:3c:45:b4:e5:1f:83:d8:80:e7:37:8e:2b:
                    cb:cb:d2:7c:1c:30:ad:86:c1:30:d0:20:bc:2f:48:
                    c8:68:a6:0d:be:26:ab:ab:0f:1e:79:b5:e6:50:00:
                    40:ff:c0:08:d2:80:35:7a:aa:54:e9:4f:07:e1:5e:
                    72:d4:f0:13:dc:15:8d:06:6b:bb:cc:ce:21:cf:1e:
                    93:4d:19:34:cc:a4:2d:02:e5:af:a7:62:07:ba:7e:
                    b6:1e:ea:ac:2a:62:48:11:5f:7c:ac:4c:94:27:19:
                    cf:c5:24:1c:a8:26:d7:95:25:df:ef:98:10:08:5d:
                    c3:fb:bf:a4:99:cd:6a:74:0f:02:50:46:ee:1d:4e:
                    ea:7d:62:3f:eb:17:c4:3e:9c:cd:2d:58:40:4b:1f:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:55:C9:6A:E6:6F:CD:D8:F0:D6:35:2B:FB:71:89:EC:BE:41:B7:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/50657a51-68a7-349d-b89d-b61b8fcb4f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:ba:d9:85:eb:62:f5:75:9a:d6:48:97:5e:a3:7f:31:58:
         e3:28:85:e6:94:8b:5f:cb:0d:8c:df:7a:58:8f:44:10:68:a7:
         f8:a9:a5:dd:e1:19:5b:93:28:31:76:01:be:d7:f2:ef:d2:54:
         cf:88:f1:3f:61:65:f7:88:d7:b2:0e:ba:eb:2d:ff:40:86:ed:
         3f:a3:2e:73:32:3c:8e:31:09:19:60:56:fa:53:98:02:bd:81:
         00:1a:9f:5a:c6:b5:64:22:64:da:ad:4c:57:41:ab:73:9c:ff:
         d5:b4:7f:c0:17:7b:cd:81:b0:14:85:dc:c1:eb:66:3c:1b:b0:
         b0:c8:0b:69:f1:ee:b7:08:a4:df:97:68:ec:dd:b7:77:2e:60:
         7a:c9:73:33:0d:aa:81:68:44:8b:ce:25:8f:e5:57:46:ae:0d:
         c6:74:d7:78:93:1c:be:7d:21:ce:8c:97:f5:62:ec:a7:97:46:
         e3:61:d9:49:05:18:f0:a0:5c:ca:1b:44:3b:78:a6:39:8a:90:
         b7:3b:49:99:b3:90:67:50:31:65:37:e0:69:9e:e4:97:d9:02:
         db:72:26:b3:a7:42:50:8a:b5:3d:86:9a:88:8a:cc:05:65:c8:
         b6:02:e6:f7:75:92:8a:1b:6e:cf:24:98:05:4d:82:29:af:73:
         d7:df:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:03 2026 by rpki-client