Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa
File:                     bab99bc5-d663-3ba0-b545-5274edb63cfa.roa (raw, json)
Hash identifier:          l/K1kfc1+d2upR6gYohmIt4+RDcuJ2fs1BcjrSFqp+s=
Subject key identifier:   B6:B6:8B:1C:40:45:69:D2:D5:33:D9:62:6B:D0:3D:55:A5:55:F2:AE
Certificate issuer:       /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial:       010D0C9F4328584CF15772B01385584AC0631780
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     394089
IP address blocks:        161.223.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:72:b0:13:85:58:4a:c0:63:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=de5e5a5c-6b55-46de-9107-436db42ef06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:96:4d:a4:e6:c8:b1:b5:9b:a3:f0:48:d3:
                    7c:45:90:68:2b:21:b1:49:84:2a:ea:45:58:6a:22:
                    6b:51:1d:16:56:bd:3f:1d:02:7a:8b:04:fb:e3:1c:
                    63:8b:51:d7:16:82:32:05:f1:7f:74:e4:d3:5e:da:
                    af:f8:ab:a0:45:17:4f:bb:bb:ef:50:66:e6:1f:c1:
                    50:29:07:e9:b9:37:e7:f4:be:95:fb:3d:be:00:81:
                    01:19:f7:78:26:dc:f4:ff:bf:59:df:78:d3:dc:14:
                    19:67:99:d2:d2:64:94:fe:c7:04:c0:c0:d6:34:b5:
                    c5:f9:d3:ad:fa:04:01:0e:ef:f9:86:54:2f:ba:42:
                    79:a1:fb:9d:6e:f3:76:a7:32:f8:68:8a:1d:d7:bf:
                    6e:e0:3a:6c:06:2c:e1:9c:f1:6f:c2:fa:45:bb:24:
                    c9:e4:56:3a:1d:9e:a5:40:44:e8:9e:c3:0e:e8:c8:
                    82:50:ad:e1:56:1a:1e:bd:e7:b0:3f:c6:0c:31:7e:
                    77:0d:71:a3:d3:10:2b:0e:7f:b9:6b:e5:5a:b8:39:
                    0c:3a:d9:4e:7f:b4:58:c1:51:79:79:0f:c7:57:6d:
                    36:c1:ed:df:7f:34:e1:bd:3b:70:07:9e:64:bf:7b:
                    0d:83:46:c0:5e:1d:85:9f:ac:fb:f5:6e:79:8c:7c:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B6:8B:1C:40:45:69:D2:D5:33:D9:62:6B:D0:3D:55:A5:55:F2:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.223.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:49:ec:de:a8:dd:93:51:8e:f2:23:6b:bc:64:52:13:e1:
         10:9d:dc:9c:63:67:a4:8a:66:5d:1f:7b:55:65:d8:98:af:3d:
         87:ce:7c:2c:47:26:07:93:f7:7e:8f:88:b4:b1:90:14:8a:f8:
         35:f4:96:77:1e:d9:a7:73:de:30:86:b1:e2:e3:8c:1e:fe:a4:
         61:f7:37:2f:fd:90:82:47:ca:ac:95:2d:e9:ab:7a:64:31:a9:
         eb:ac:16:8d:52:26:43:6b:d0:c3:5a:66:8f:36:66:86:d1:02:
         03:5d:df:c5:d3:5c:27:30:bd:d4:23:86:d5:42:dd:8e:1a:ff:
         7c:77:6a:63:e0:de:ab:a7:e1:1b:d5:c9:03:71:3d:0b:b8:aa:
         f1:a4:9a:27:7a:a3:12:e2:0d:54:88:1a:d6:89:19:da:24:04:
         90:3e:91:21:0d:8a:2f:9b:48:30:ab:4b:d9:60:00:d7:a9:44:
         07:96:b9:97:63:4a:43:6d:09:0c:c7:40:ec:c5:0f:79:30:2f:
         e1:83:ea:c0:0c:21:71:e8:50:b7:fe:0a:0b:f8:9a:4b:be:75:
         5c:a2:c9:54:4a:4a:6a:32:1e:21:d4:54:62:6a:3b:8b:d0:d5:
         22:37:ee:45:ae:21:b0:af:fc:c7:58:5c:8d:d4:93:24:ea:10:
         3b:95:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:20 2026 by rpki-client