Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/5d92693d-c1e5-346a-97ec-ed796291c0ba.roa
File:                     5d92693d-c1e5-346a-97ec-ed796291c0ba.roa (raw, json)
Hash identifier:          VF6QXMEJS+AVof2W68bI22MvTx+vYRJeOc2fIwfrwXs=
Subject key identifier:   70:79:7C:A6:F8:4B:3F:16:79:1D:B4:44:E7:59:50:AD:A6:34:00:B9
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F4328584D80FFF94EF75FED254219FE00
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/5d92693d-c1e5-346a-97ec-ed796291c0ba.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     19318
IP address blocks:        161.129.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f9:4e:f7:5f:ed:25:42:19:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=70c9d84e-fd1e-42a6-b8e7-040e1a02ef93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fc:f8:bf:fa:fa:c9:37:41:81:ad:17:3e:cb:
                    92:f3:1f:d8:fc:a9:bd:03:08:0f:0f:a1:2a:04:ce:
                    f3:a9:70:dc:19:e7:7a:90:3d:17:89:66:91:9f:5f:
                    af:90:0b:f5:8c:07:5c:bb:88:f6:fe:6d:53:e9:8a:
                    84:30:13:f1:26:eb:59:5a:60:ec:8b:9a:4a:b0:fa:
                    0e:87:e8:d3:0f:c9:03:55:64:73:0d:27:46:a1:aa:
                    df:fc:e5:07:23:5a:ea:5d:a7:10:26:1c:9a:43:59:
                    0e:fb:43:c2:8f:e0:40:59:cd:4b:bc:ff:56:18:87:
                    9b:4e:58:ea:c5:84:2b:97:ac:ea:1e:5b:99:b1:15:
                    d6:8b:ec:6e:62:23:82:1d:30:76:7f:7f:19:5b:24:
                    4e:16:2d:42:77:7f:40:e8:d8:f4:48:1a:85:c5:43:
                    ed:18:72:17:da:b9:10:9c:07:42:f9:1e:03:69:64:
                    dc:06:74:c1:b6:18:b8:1f:cf:83:3f:a3:aa:40:43:
                    44:09:0d:0a:8c:56:92:a5:a1:df:44:d3:7e:db:13:
                    16:09:fd:07:62:db:5b:89:9f:d7:55:1f:89:56:58:
                    fc:b7:7a:60:e2:1d:b8:b3:df:bd:8a:da:3c:4d:3f:
                    d9:de:55:b2:b1:5b:96:fd:2a:f2:da:5d:e1:da:e9:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:79:7C:A6:F8:4B:3F:16:79:1D:B4:44:E7:59:50:AD:A6:34:00:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/5d92693d-c1e5-346a-97ec-ed796291c0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:b2:14:3c:93:2e:55:4b:c9:82:f3:a6:ba:7e:2f:9f:6d:
         a5:81:03:81:25:c4:d7:83:49:b3:79:57:e4:d6:d3:7c:ea:d6:
         00:9f:56:f5:0b:49:40:70:cc:e7:ce:5a:d6:f4:d3:94:7d:d3:
         0f:00:d0:bf:dd:8b:d4:78:ae:ac:cf:af:56:2c:87:69:d8:60:
         64:e8:5d:b4:3b:24:8a:71:66:66:36:97:88:7a:59:0f:22:dc:
         92:07:4c:fc:c1:73:55:e8:64:0f:cf:c8:3a:77:c5:0d:e8:f6:
         66:54:ca:11:82:d7:60:6b:5a:f9:aa:76:6e:d4:09:40:21:97:
         b7:b6:62:9f:24:e0:44:e9:fd:72:45:c2:b0:5a:4b:89:25:ac:
         f4:86:dd:24:c5:f4:04:f7:79:26:af:12:37:24:83:61:d3:20:
         7d:37:50:9f:1e:2d:8c:0b:79:49:1c:f1:11:bd:d7:ea:5f:93:
         b2:a7:de:31:71:20:5f:d6:36:c1:90:e9:64:04:ee:50:c8:aa:
         8f:b3:fc:38:df:6c:e2:5b:2a:46:4d:4e:d4:e6:60:70:be:38:
         f9:88:79:81:04:01:31:7f:23:3a:40:1f:82:e1:12:93:00:b8:
         cd:87:22:79:1c:c7:ce:1f:f9:a3:6c:43:4a:8b:0b:90:fc:79:
         1e:f1:35:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:20 2026 by rpki-client