Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa
File:                     a9966c45-3097-3836-a14e-cf2190dd857d.roa (raw, json)
Hash identifier:          kFAs7+HK2mCe2jVllK/gmxpHHCA4vrhqdC9O28emiVE=
Subject key identifier:   0A:30:B5:30:24:85:00:50:2F:17:C1:8D:26:37:71:50:35:72:5D:98
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584D75D528CEB68AA579F7D405A0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        161.129.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:28:ce:b6:8a:a5:79:f7:d4:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=dd5b5e10-58e4-41ee-af95-1b69fb595e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7b:65:98:86:3a:ee:48:17:9c:ab:41:28:8a:
                    c2:8d:60:25:a8:fd:df:3e:62:12:45:80:72:c2:f6:
                    72:2d:d5:6b:44:f6:3f:96:27:8d:16:03:86:00:6e:
                    3b:fb:38:aa:8a:0d:2d:78:3a:50:69:2f:84:02:1f:
                    86:f1:12:45:34:06:8c:d9:44:3d:af:50:bf:df:88:
                    35:de:57:28:03:11:ad:d8:c5:09:06:eb:a2:d4:17:
                    3f:f5:01:d2:8d:13:96:0f:c1:89:99:01:c5:3e:8d:
                    64:5a:53:bd:fd:41:c9:1b:9b:5a:75:76:f5:91:a2:
                    e8:a8:08:68:76:fb:4e:78:15:dd:f9:8a:0d:0c:37:
                    75:be:a6:9b:f9:25:06:4c:25:25:a5:87:1c:16:69:
                    ae:bf:3e:45:47:36:18:0d:7e:1a:30:95:c4:51:ba:
                    0d:21:c5:8e:a8:d6:3c:9e:7f:60:0f:c5:81:ea:84:
                    91:a1:55:7f:94:94:cd:43:82:a0:53:ef:0f:76:18:
                    50:12:ca:f3:34:87:e4:f6:29:69:e9:bd:56:9b:22:
                    b0:d4:3e:5d:71:48:36:37:47:69:90:00:13:99:51:
                    f5:34:e9:00:d8:de:87:a6:95:b1:ae:7a:74:93:69:
                    90:c8:59:91:27:1a:c2:a2:b9:50:6f:6a:fd:eb:35:
                    44:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:30:B5:30:24:85:00:50:2F:17:C1:8D:26:37:71:50:35:72:5D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:45:fa:72:c6:1f:6d:91:a7:74:39:f9:6e:01:fe:5a:6b:20:
         b2:09:2f:d6:28:77:54:03:83:98:f5:bc:82:b4:6e:9c:6c:be:
         4f:a1:18:1a:43:5a:e6:34:33:b6:b4:07:ab:f4:f4:74:49:6c:
         16:9a:f7:d2:22:46:ed:22:1b:0e:ad:4a:2e:26:40:76:fa:cb:
         da:f5:90:78:5e:a7:96:18:4a:74:c1:56:18:4d:00:44:de:44:
         de:7a:4c:9c:af:38:df:03:92:9c:15:10:a6:56:c8:17:d3:00:
         ca:a5:af:e0:ab:5b:c1:a3:99:b0:ac:d8:dd:bb:4b:ff:38:8a:
         e0:f4:2a:f3:0c:2e:3d:f0:31:61:e8:68:4e:9e:78:49:5d:50:
         6a:b8:cb:ec:42:87:2a:c9:0c:96:97:d8:07:9e:2f:c3:aa:1b:
         9f:1f:2a:41:85:88:a0:cf:63:70:68:54:4e:e8:a1:16:0e:66:
         77:42:8e:9c:81:8a:8e:f4:d8:59:d2:5a:f3:50:b5:75:89:f4:
         d5:0a:33:73:1b:5b:65:86:74:36:c9:71:f0:38:f3:a5:e8:d8:
         d1:b9:c0:47:78:d9:8b:57:f7:90:ff:fd:98:06:3e:c9:b9:38:
         b5:99:6f:11:2e:f0:d2:80:ee:cb:8d:78:8e:2c:48:df:21:63:
         63:09:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:44 2026 by rpki-client