Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
File:                     8f29609a-346f-3347-abbf-261ce08ce477.roa (raw, json)
Hash identifier:          eGayuHgZGy48brGTcAMZb++L9YKqYS58ChYVyLa21aw=
Subject key identifier:   D6:DF:A0:07:D5:51:4A:71:F8:48:E1:CC:1E:FB:C2:76:80:F3:7A:B8
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584D75D524835DF2DF7A387E2A00
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        161.129.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:24:83:5d:f2:df:7a:38:7e:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=e1beab91-3b0f-4425-95ed-3d28102e0961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:ea:8b:d3:0f:8f:74:93:30:16:1f:42:c9:
                    b7:2c:ef:77:33:9b:41:f5:6f:3b:1f:c9:a8:6f:b8:
                    b4:75:51:31:5a:a9:b1:b9:2b:1f:79:5e:a7:28:89:
                    61:bb:33:e7:1b:b9:20:b7:97:6e:b7:4f:f1:2c:69:
                    e0:65:88:5e:3f:4b:67:1f:7b:ba:3b:65:d2:91:a1:
                    7f:2d:1d:c6:b6:21:9a:d0:a2:5f:39:80:9a:4a:8a:
                    e8:7e:b3:35:81:27:6c:75:98:0e:f4:07:aa:f8:fd:
                    da:72:24:ca:25:a2:90:84:f4:68:23:5f:1f:14:04:
                    26:2f:96:3d:ac:69:f7:1d:82:28:0e:a7:69:28:ed:
                    3b:26:0a:3b:c1:55:ff:58:ac:cf:31:14:a6:2c:08:
                    9a:ce:ae:a5:ab:84:da:38:10:2b:79:c9:5c:1f:fb:
                    2c:d6:eb:10:29:d0:fa:2a:43:76:c8:f7:8e:62:56:
                    06:23:80:f7:ee:b2:31:11:e6:01:b5:97:48:70:84:
                    1d:64:8a:d2:06:53:90:f2:bf:d5:95:23:ad:38:62:
                    be:b8:f1:b6:de:01:12:b2:c1:5c:c7:83:11:49:f0:
                    85:a6:ef:2e:d1:a2:33:2a:05:e7:39:b8:7d:dd:82:
                    86:2f:53:b1:03:81:96:39:e4:a6:b7:4a:60:e6:20:
                    23:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DF:A0:07:D5:51:4A:71:F8:48:E1:CC:1E:FB:C2:76:80:F3:7A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:82:8a:8d:e7:01:03:ae:2a:ad:44:20:8e:d8:ca:13:8a:10:
         55:67:34:dd:8b:f2:d0:98:b8:af:0b:18:11:49:b8:3c:aa:ff:
         86:38:98:e7:57:83:51:70:3d:0f:ee:28:45:3a:b6:b1:bf:c0:
         0e:d0:bc:66:f7:bf:8b:34:65:28:5e:c5:5f:b1:c0:d0:24:6e:
         25:f1:d0:e6:88:cc:cd:cc:b0:cb:d6:2c:16:6f:86:5e:c6:bd:
         17:b9:55:b0:f2:bd:ed:ad:15:40:4f:91:b3:7c:0e:71:0f:3d:
         ed:39:4d:38:83:37:9e:a5:7a:8b:7e:6e:cd:de:4e:2b:74:97:
         d4:9a:94:69:43:75:77:f4:32:ff:f7:16:5a:40:a2:32:f4:73:
         12:6e:86:cd:f2:01:34:1b:54:52:a3:ca:37:fc:1d:c3:0a:e2:
         8b:53:be:9e:1b:5a:b5:7a:7e:a4:5a:fd:1e:e2:cc:17:f9:ee:
         1e:86:21:f0:45:1d:b1:ad:bc:1f:ee:f2:d4:de:63:fc:70:c5:
         3e:b1:c8:a9:7f:b0:d0:27:30:9a:1b:f1:ff:f2:e7:98:ff:2a:
         11:eb:a0:f6:b7:ea:2e:89:f1:89:ee:83:2f:e6:56:6e:3c:4e:
         77:4e:ad:04:cd:d9:01:92:fe:ff:bc:c6:d7:4e:7f:08:2d:e8:
         a8:fc:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:36 2026 by rpki-client