Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
File:                     12211a98-a467-395a-802f-13b6b78c07d9.roa (raw, json)
Hash identifier:          u2rNeEC2hkAuBsECsyOrfIFHGsWRCAYWZ0aQI7ff8Z8=
Subject key identifier:   C3:5F:9D:B9:94:48:5F:B1:7E:C4:38:A9:45:DD:C4:7E:A1:5A:AC:7B
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584D703FDCC31DC11AE578260B40
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     8075
IP address blocks:        161.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:dc:c3:1d:c1:1a:e5:78:26:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=b57b46f2-9e5b-465c-b844-37c44b65b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:47:39:82:2a:df:9c:43:1d:a0:fa:60:fc:
                    e4:dc:18:55:ff:ce:ca:76:d7:b6:ce:cc:e7:e0:f0:
                    8d:65:0d:43:79:4a:02:91:5e:99:d9:8b:88:8b:e9:
                    b6:a8:37:c4:96:ee:6c:47:ff:40:1e:9c:03:64:9f:
                    03:74:7a:0f:37:98:f4:ab:18:13:e5:84:e3:71:d6:
                    86:01:cc:e1:3f:2c:6d:3e:3f:9b:d5:1e:d0:86:43:
                    d8:ae:66:0d:f7:4e:e0:94:68:17:01:b1:8c:7a:ce:
                    89:34:9b:e5:d6:75:b9:76:30:12:92:9a:cc:bc:fb:
                    0d:7f:63:3d:99:89:ea:33:ad:18:8b:92:2a:96:72:
                    a3:5d:ca:d8:6e:e1:f1:5f:69:3b:54:5a:52:26:07:
                    d2:f6:a7:7d:82:18:83:32:c4:40:43:5f:60:5c:ce:
                    03:6c:81:7f:a7:33:dd:b4:05:42:96:5c:92:87:cf:
                    06:62:82:03:5b:d7:15:d9:f0:3b:f1:5b:ca:7b:55:
                    3c:9f:26:64:0a:2f:ea:bf:5b:df:77:a1:07:25:22:
                    50:33:6f:50:8e:cc:e0:10:03:17:99:96:87:e3:5f:
                    17:4f:7e:ed:63:fa:ed:ab:9c:93:06:5d:09:81:c1:
                    7c:dd:1e:7d:18:ee:32:94:fb:78:d9:62:10:d2:bf:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:9D:B9:94:48:5F:B1:7E:C4:38:A9:45:DD:C4:7E:A1:5A:AC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:25:74:e0:7b:b4:83:9d:95:b8:f5:4d:8d:6d:e9:af:53:
         df:3d:c0:1e:6b:66:05:5a:ca:4f:5b:b8:0a:92:37:d7:8e:d1:
         e9:8a:6c:aa:0e:97:d4:23:d7:c6:32:20:e1:9e:fd:08:bd:96:
         a9:03:2b:94:37:c0:2f:08:cb:4a:6b:12:89:67:de:7c:d3:b0:
         1e:b2:5d:b9:e9:eb:bc:2e:3d:0d:cd:77:af:2f:00:da:be:bb:
         c4:f0:ae:c7:63:dc:75:b8:22:77:3d:3a:74:5d:3f:04:70:ed:
         8d:fb:00:18:6e:51:1d:1b:d1:3d:78:f3:75:ae:7c:56:a5:7b:
         a9:d7:a4:64:05:5b:eb:2c:ea:59:e4:3c:25:10:6e:d1:eb:bf:
         ed:9e:cf:c0:9a:b8:ad:bd:ad:66:87:e2:6b:67:44:03:83:93:
         b0:50:27:57:fc:83:9f:d7:c8:e6:84:37:84:7d:6d:f6:3f:71:
         fa:a8:53:e3:49:91:e6:37:ec:52:22:10:ba:e1:91:43:b4:6b:
         49:f4:f8:c3:3f:e5:df:d0:70:d7:5b:0c:f5:ff:3c:54:df:d0:
         87:76:ad:1c:86:fd:30:64:ba:19:e8:0a:19:73:ca:34:3b:4b:
         97:93:f4:d9:61:cc:87:1e:8a:95:69:c9:52:fb:34:ee:ff:8b:
         d8:93:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:22 2026 by rpki-client