Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
File:                     e1e365e0-1156-39fe-8e92-6f88f7279acd.roa (raw, json)
Hash identifier:          VBss87040TH5RnR+pwh2mgmKN0AaIQs5IiHspCykO6U=
Subject key identifier:   5F:5E:47:CE:5C:48:E6:67:6F:99:59:9D:7A:A1:84:44:78:4C:93:DC
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584D67DFBD36C305377695A4D880
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     394625
IP address blocks:        161.129.136.0/24 maxlen: 24
                          161.129.137.0/24 maxlen: 24
                          161.129.138.0/24 maxlen: 24
                          161.129.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:bd:36:c3:05:37:76:95:a4:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=70153f6c-7ec6-4dd6-808d-bf8c0cbd9116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:33:6f:23:2c:1a:1e:c3:d7:bf:ce:61:b1:59:
                    7d:bc:a2:9a:9c:b9:c6:7f:5f:89:a1:4d:fb:72:cf:
                    3a:f8:05:ce:d3:8f:9a:ed:85:b0:30:6c:65:08:11:
                    c6:77:bf:d7:6a:d0:a0:8b:fe:b8:db:fd:a2:0b:41:
                    f1:3c:0b:a9:b6:d1:79:da:29:f3:82:40:29:4b:aa:
                    99:32:f4:f4:9f:21:c8:a9:93:b3:93:c9:12:ce:47:
                    ea:44:e8:dc:04:e5:80:d1:87:0b:a5:1a:68:9d:82:
                    7e:7f:a3:b6:e7:a6:d9:e4:66:b5:23:a9:26:1a:3d:
                    7a:76:67:fe:96:06:32:a2:2a:9f:dd:db:95:ff:89:
                    cb:38:20:a0:a4:d3:21:ae:ee:ce:4b:b7:05:6b:2e:
                    5d:50:47:4f:97:b0:15:8d:f9:07:91:77:7a:74:7e:
                    78:52:05:de:ee:4d:4f:84:b9:73:86:76:76:60:26:
                    d7:0b:c6:be:bd:4a:52:58:87:52:6a:2a:3c:b9:b9:
                    fe:3f:7b:76:2e:39:d1:bb:8a:d8:49:95:dd:70:9f:
                    5b:fd:bb:5f:2f:66:7b:68:56:c5:c8:e2:a2:6d:9e:
                    99:33:e2:12:4f:42:68:61:ba:0b:f8:f1:2b:0f:b1:
                    9a:be:2a:45:55:52:85:db:bf:ff:35:4a:d4:f1:97:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:47:CE:5C:48:E6:67:6F:99:59:9D:7A:A1:84:44:78:4C:93:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c2:04:d5:49:4f:08:4a:e8:30:8b:a4:fb:a8:9a:fd:22:3e:
         99:34:12:64:44:45:ae:81:24:45:2f:6a:98:22:d1:d2:17:dd:
         55:2f:48:91:b4:15:e1:ad:47:67:de:21:43:ff:9a:63:51:b1:
         25:7c:67:0a:49:bc:d8:5d:0e:55:fc:34:1b:e5:4c:98:fd:63:
         0a:64:8b:68:78:00:96:7d:6e:3d:54:ff:f3:87:57:63:da:76:
         97:0b:03:01:c1:cc:c0:db:c8:fe:3a:25:21:17:b1:9f:0a:ab:
         94:36:14:ce:2d:80:3a:49:c1:a7:19:15:13:94:25:e1:3a:f3:
         5b:05:2d:c9:46:de:6c:87:9b:31:73:ab:1a:1f:f7:6d:1a:97:
         83:b5:0a:dd:3f:30:a9:25:4a:93:05:bc:ce:0c:38:3a:2c:31:
         50:0b:52:32:ed:a2:00:ef:62:93:19:19:90:8c:90:27:8c:f1:
         d0:3e:7d:07:c3:e2:be:66:48:c2:5a:53:3f:0b:52:4e:f2:ff:
         21:29:eb:69:f0:0f:e8:06:2a:93:f8:3e:6e:d1:11:59:0f:49:
         58:71:b5:7d:f6:71:14:43:27:1e:b2:41:f3:1c:2b:7d:b2:c6:
         9e:5b:d7:6c:b2:9f:30:0c:48:d8:56:66:ff:c2:79:7d:35:3a:
         5c:44:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:58 2026 by rpki-client