Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/3cbf8699-96e9-34d2-92c1-50ee8c27be25.roa
File:                     3cbf8699-96e9-34d2-92c1-50ee8c27be25.roa (raw, json)
Hash identifier:          stN9Qa2TYG9qsp/VWYJJiWhg8n9/3j5Kq3I1QOHKTMs=
Subject key identifier:   0C:41:22:92:F4:FC:80:22:9E:F8:28:B8:58:FC:A8:B6:24:AC:B1:3C
Certificate issuer:       /CN=c83fa88a-ebc2-4a18-a5e5-fc14978afe7f
Certificate serial:       010D0C9F4328584EA0158CB008352E7F163937E0
Authority key identifier: 07:5A:D8:07:87:A4:AA:7C:25:C2:25:A2:C7:03:E8:BE:18:2D:7D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/3cbf8699-96e9-34d2-92c1-50ee8c27be25.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     63027
IP address blocks:        161.129.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:8c:b0:08:35:2e:7f:16:39:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83fa88a-ebc2-4a18-a5e5-fc14978afe7f
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=57ced043-dd8e-4682-800c-fef7d4f197b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:9c:c9:2d:14:b5:a9:e3:5d:66:3c:fa:66:
                    ea:df:e0:80:15:5b:a9:3d:af:3c:d0:e6:70:1f:e7:
                    21:8a:59:46:29:02:1c:e6:d3:ea:3d:18:a3:40:84:
                    b5:0e:53:bf:e1:fe:24:26:f0:a2:49:62:79:20:cf:
                    9c:8f:da:a9:fa:28:ec:47:49:58:30:58:dd:c2:93:
                    34:4f:fa:ee:83:f9:82:2b:4e:b6:8c:e2:eb:81:a3:
                    57:49:d8:7e:32:02:61:05:8d:f4:d3:a2:f2:f1:f4:
                    38:9a:71:2b:39:56:27:06:bf:f7:4f:5b:6d:b5:10:
                    7b:8f:b4:14:c3:03:89:06:e9:b4:0b:84:80:9e:86:
                    f9:f1:82:5a:13:6b:c2:10:ab:ab:c3:97:a9:1a:b8:
                    6d:1e:0a:36:02:15:98:73:b1:cb:f2:a4:9c:16:51:
                    f6:31:64:d6:1d:5f:94:ad:80:20:eb:52:82:e6:78:
                    27:a5:53:98:4f:9c:e3:b9:0d:db:18:5f:67:52:73:
                    fd:8b:06:68:82:79:21:ed:24:0c:34:88:2c:e7:67:
                    99:43:11:10:17:e5:cd:a8:96:a8:39:72:a9:2c:b3:
                    6d:d7:45:ed:d3:fd:a3:d7:95:21:46:18:20:2f:3e:
                    34:dd:5a:49:50:e8:2a:fd:af:49:17:6a:ff:73:3b:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:41:22:92:F4:FC:80:22:9E:F8:28:B8:58:FC:A8:B6:24:AC:B1:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/3cbf8699-96e9-34d2-92c1-50ee8c27be25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.crl

            X509v3 Authority Key Identifier:
                keyid:07:5A:D8:07:87:A4:AA:7C:25:C2:25:A2:C7:03:E8:BE:18:2D:7D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c5:f9:ba:ca:2a:29:11:7c:6d:2d:06:3d:2a:a3:d3:55:cd:
         09:51:08:8d:c2:b0:a2:7c:ff:50:35:6d:43:e1:a1:66:64:55:
         92:ac:49:2c:6c:13:92:58:67:1b:16:d2:8a:30:d4:9f:44:88:
         42:f0:8e:d5:f1:fd:f3:e5:ed:52:0c:e7:dd:75:60:05:d2:4b:
         dc:7c:8b:03:c3:8d:64:57:12:8c:1b:84:82:86:21:f6:01:d9:
         b9:3f:3e:4a:dd:6d:0a:1a:6f:33:44:27:df:39:f6:fa:cc:cf:
         d8:78:d6:a0:74:39:7d:8b:8a:8d:35:6b:7a:ea:58:0a:ed:18:
         b6:24:a4:a7:c7:97:ce:be:86:64:a4:9a:c9:73:a3:09:a6:d9:
         d1:eb:5d:f2:c4:49:10:95:93:5a:11:f0:a5:09:e1:26:5d:dd:
         7d:8d:aa:64:20:f3:4d:1e:5c:a3:da:f7:de:b1:4d:12:e9:4f:
         fa:56:52:e2:b3:53:23:f3:f9:f5:b6:10:2f:a4:8b:d5:42:4d:
         d1:da:e1:96:cd:e7:d7:3a:c4:50:7f:e0:22:fb:d1:9e:5a:9c:
         0f:ec:dd:b9:1f:a1:ff:02:d5:66:2f:d6:ac:72:c8:33:70:78:
         5c:98:be:5b:e9:ad:c5:dc:db:f7:1e:e0:69:64:9b:06:cf:88:
         e6:2a:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 21:32:42 2026 by rpki-client