Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
File:                     e1e365e0-1156-39fe-8e92-6f88f7279acd.roa (raw, json)
Hash identifier:          q0wgnMa0dAcTRepdRsoCm6mp484EOh5wcQ7BcvlX5iA=
Subject key identifier:   D9:2C:22:B9:63:29:C9:23:E6:02:22:9F:80:BA:AD:40:42:08:DF:6C
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584BA667A317D51C0F1FAB0043C0
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     394625
IP address blocks:        161.129.136.0/24 maxlen: 24
                          161.129.137.0/24 maxlen: 24
                          161.129.138.0/24 maxlen: 24
                          161.129.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:a3:17:d5:1c:0f:1f:ab:00:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=a994f516-e939-4e5b-a18a-9f4d1c190bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:bd:65:21:70:9e:22:6c:01:5a:04:a5:1b:
                    df:e3:a6:6f:54:47:c0:b5:81:f9:37:89:dd:ad:9a:
                    ec:59:dc:64:81:c8:47:58:92:5c:78:9f:93:5d:73:
                    c1:c4:e0:6f:6e:2f:db:af:55:dd:08:86:bb:1b:33:
                    42:b7:8d:15:94:e1:78:3d:cb:04:4a:09:a8:2e:26:
                    1e:74:45:e8:0e:1c:21:33:6c:d0:a9:45:d7:79:86:
                    2e:fc:2d:c1:0b:46:62:e3:67:ec:5f:0c:04:3d:01:
                    e7:60:b1:b4:6f:18:1b:b4:46:6e:eb:08:d2:1b:00:
                    fa:62:59:00:df:75:a8:1e:c3:f7:e4:f5:11:33:19:
                    78:5c:43:87:3b:4a:97:d2:ca:3d:80:1b:85:45:9d:
                    d3:c0:5b:27:b9:b0:7b:39:f3:f6:5a:3c:c8:87:02:
                    bf:fb:b7:71:02:b5:db:a1:34:d7:c6:e2:c9:1a:40:
                    a3:26:85:c3:0e:79:48:3e:4f:ac:41:fd:92:6d:75:
                    56:62:58:66:38:c8:a8:22:21:fa:d6:6a:33:34:58:
                    c3:9b:35:d4:01:bb:9e:27:37:ec:6f:dc:7d:3b:3e:
                    73:5c:69:e4:e4:34:c3:e5:70:d0:83:6a:d8:67:1a:
                    74:9c:f3:f1:a0:6c:66:45:35:49:07:67:31:91:21:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2C:22:B9:63:29:C9:23:E6:02:22:9F:80:BA:AD:40:42:08:DF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:24:9b:12:8f:36:4b:64:4d:a5:40:f0:0e:57:76:78:b7:5c:
         a4:b7:1e:58:aa:e0:a6:c0:e1:5d:e0:40:11:18:0e:bd:a6:4c:
         4c:5d:53:97:65:99:83:3f:a5:fd:44:fb:76:24:7f:04:2f:49:
         b2:56:c8:b6:09:ac:3f:3b:c4:21:8f:73:3a:54:5a:55:a3:c0:
         8d:73:ea:a1:b5:f3:6d:88:bb:25:41:a4:38:65:94:17:41:0f:
         46:9b:b2:a6:31:89:c8:55:b9:2a:78:e1:e3:a2:6a:6c:e5:bc:
         7a:51:07:7d:57:83:a0:63:ea:dc:b1:f1:ee:d5:07:9c:2b:40:
         0c:3c:7f:00:1a:d1:d0:22:15:81:26:b2:29:a8:09:b5:fa:1b:
         d8:16:5f:25:59:af:0c:43:04:7b:96:47:d9:4b:c7:42:ed:0f:
         8b:50:95:21:2d:06:ca:2c:da:de:87:43:f5:c7:ff:6a:55:67:
         b1:ee:71:3f:ae:6a:3f:ac:10:60:f1:e3:f2:78:5d:aa:17:73:
         ff:75:ca:34:b7:be:88:ad:be:64:b1:00:97:d6:15:c6:85:11:
         b0:a3:00:6e:1e:34:d6:34:d9:84:18:ab:11:a0:90:75:ab:ef:
         f5:ff:a3:d5:af:2d:a0:28:66:02:a4:16:d6:6d:c9:23:18:a0:
         cf:d5:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:46:32 2025 by rpki-client