Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa
File:                     e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa (raw, json)
Hash identifier:          gbXGl0k8xxumZUFy5fm+xK4yYAEUcZTpNm8tLBmqmb4=
Subject key identifier:   C4:92:06:AC:67:C1:69:5D:B5:3C:A3:AA:41:A1:56:05:21:F8:DE:4E
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584F3FAD3E8EE5983128722ED380
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        161.221.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:3e:8e:e5:98:31:28:72:2e:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=0a330e02-3844-477e-8d96-60c06c79a312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:da:7e:72:d4:7f:21:ed:23:ed:d1:f8:a6:
                    7d:a4:cf:36:ef:f7:24:85:fb:63:39:be:96:a3:0b:
                    a3:c4:1f:df:ae:fd:12:e9:c4:1e:d2:21:c4:e2:f7:
                    7c:6b:68:a6:ee:d2:44:c3:37:ab:da:5b:82:4f:86:
                    65:9c:0d:54:b9:49:b8:ec:1e:22:84:19:27:d4:24:
                    bb:56:b0:8a:a9:7f:eb:9e:0f:8a:cd:af:62:f2:5a:
                    58:2f:26:a1:33:67:24:59:e8:46:61:11:70:f6:68:
                    ea:4a:77:ac:a9:30:27:92:c2:c1:e2:21:e5:7e:6a:
                    f1:54:37:b5:35:f1:b4:c2:79:ca:61:f1:e0:5d:f3:
                    8a:60:d4:9d:e1:a3:0f:95:88:e0:d6:5d:ab:d6:65:
                    6b:1c:1a:a7:92:39:6f:d4:43:2d:b6:06:90:4e:5d:
                    a8:bb:08:c9:9d:74:7b:c9:44:7e:cb:b4:c9:32:b8:
                    08:14:07:70:63:e3:cf:32:28:26:da:ce:28:ca:ab:
                    9d:43:0d:ea:bc:db:49:98:c3:28:fd:c0:a2:93:7a:
                    4e:8d:1c:52:cf:8f:e7:de:21:27:92:ef:24:1d:1c:
                    f4:58:0b:2c:9e:bf:d9:a7:4f:92:d4:1c:9b:2d:a5:
                    e1:13:40:e2:3d:93:78:66:30:a1:e3:bb:73:c1:2f:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:92:06:AC:67:C1:69:5D:B5:3C:A3:AA:41:A1:56:05:21:F8:DE:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:8b:3c:2f:bb:33:ed:db:bb:3c:fa:fb:2d:e2:33:ad:cb:
         d2:61:5c:11:26:60:2f:b2:8e:11:1e:da:9c:50:9e:64:ec:a1:
         e9:d0:33:14:93:c4:51:c1:30:aa:35:4d:22:01:57:61:69:75:
         b0:f3:66:54:fb:cd:fd:bd:49:93:59:6b:20:c3:b7:78:47:9c:
         9e:2c:d0:1e:9d:19:36:a7:e2:f4:cf:92:bd:34:80:57:da:49:
         3e:32:6e:0f:ce:51:67:77:95:cf:6e:2b:19:a3:c7:be:a9:a1:
         a2:27:50:7b:b2:56:09:c4:7a:76:39:9f:5b:96:4a:cf:a4:62:
         0c:22:df:fd:21:9a:b3:4e:1a:70:38:85:c2:df:52:fc:72:33:
         00:8c:e2:1a:1c:28:05:6a:f2:89:03:71:c0:1b:eb:38:b8:2a:
         50:0b:f6:63:fa:a5:59:3d:f9:18:51:c8:bb:61:2f:7c:d8:b8:
         07:52:c5:c6:34:78:01:dd:dc:65:f1:77:ea:17:ff:52:ac:ab:
         73:56:ac:9d:60:87:1e:f5:05:c9:2f:4d:9f:9c:5b:2a:4e:d5:
         b3:f7:f5:89:5b:73:06:0a:87:49:f1:ca:cd:3f:7d:2f:23:67:
         b2:0f:9c:75:59:32:d1:57:d0:73:9a:26:81:3c:f7:b0:c9:fd:
         84:f2:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:13:16 2026 by rpki-client