Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa
File:                     292a1027-f298-3007-b93d-c51e00d0e2c4.roa (raw, json)
Hash identifier:          pJMa5JmuZPmZ9bsYnmKG+a5Ov0d0bBi6EKkqpQT9+RQ=
Subject key identifier:   4F:DA:25:F4:CA:0D:92:4C:4B:56:A9:67:D9:61:1E:8D:A3:C7:29:24
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584D5E1A7BAD8A24B1B75A1C5680
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        160.32.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:7b:ad:8a:24:b1:b7:5a:1c:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=b77a3eca-17bc-428d-bc1d-4dfc036c0bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:e2:0a:f7:4b:df:e1:15:cd:9e:a3:b2:96:
                    39:5f:80:ed:02:8b:0b:0c:1e:c5:31:42:27:b3:d1:
                    01:c4:b6:87:c2:c4:3e:65:97:96:2a:f9:5e:98:8d:
                    bc:d4:3f:7f:c2:3b:69:3d:e1:ae:63:c1:dc:48:dc:
                    52:71:09:db:73:94:8d:36:18:45:c1:9b:b4:8a:b6:
                    66:4c:29:4e:bb:5d:d4:eb:7a:7b:4d:60:a5:65:4d:
                    00:a4:ea:d9:39:a9:e2:f7:e7:e2:0c:9e:ea:6f:33:
                    90:08:78:8a:78:06:92:e5:d1:7c:d9:56:bf:16:0e:
                    80:49:2c:cb:5f:d7:aa:cb:6f:c8:a7:af:cc:e1:98:
                    ba:28:c5:8c:07:3b:35:cd:a4:b9:88:a8:ac:62:2f:
                    ab:0d:86:85:f1:21:54:80:8f:7a:21:33:bd:0f:c5:
                    b2:36:64:6f:5c:f9:ff:b8:f9:e1:40:bc:b5:f8:98:
                    c5:92:a5:bb:ce:1a:ff:5c:67:a5:c2:fb:bc:c9:47:
                    a0:97:a2:af:fe:dc:59:18:7f:80:ca:39:46:c7:b3:
                    15:4f:7d:35:2c:72:25:fe:74:07:f3:8c:a1:f4:b4:
                    27:16:20:d8:dc:a3:f4:80:0c:a8:8e:e2:ee:ae:5e:
                    b8:f4:46:0a:da:89:4e:8a:c1:a7:11:d1:8d:b4:a4:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:25:F4:CA:0D:92:4C:4B:56:A9:67:D9:61:1E:8D:A3:C7:29:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:dc:c4:04:60:3f:3d:c1:74:f6:3a:d7:b9:df:47:7f:05:
         14:0b:b5:d0:46:b8:d9:e3:8f:8d:aa:87:d1:ae:09:ef:ee:9b:
         ac:f6:73:f8:e8:62:9a:61:11:ee:c1:42:9f:73:f3:76:50:76:
         21:db:7f:e4:18:80:3b:2e:35:41:b3:a9:02:69:7e:99:97:d0:
         8e:c7:e1:23:44:78:06:c4:06:33:cf:58:c9:3f:c5:23:38:9f:
         17:a5:13:4f:32:c4:00:bc:de:5f:ba:8a:05:31:dd:0b:e2:d7:
         31:65:03:39:97:e3:e0:43:d7:0e:22:0f:e1:93:d8:2d:c2:54:
         9e:6a:94:c1:70:38:24:08:4c:30:27:22:b0:3f:a1:e4:0f:90:
         bd:8b:ec:4d:ac:d3:ad:3d:14:20:0a:bb:b4:95:2b:d0:f0:f1:
         98:af:b4:25:5d:7a:d6:91:bc:a7:3f:ab:77:ac:a4:94:b3:da:
         42:0a:1d:79:b1:1d:90:43:60:34:9a:bf:49:c9:fa:0a:44:4a:
         92:50:88:63:3a:81:54:3f:b9:87:7a:85:b0:b5:30:70:fa:46:
         fb:be:23:5c:af:2d:bd:a5:f9:07:23:b9:09:21:79:cb:fc:bc:
         67:02:2c:08:7d:1a:4e:fb:de:e3:2f:cb:b3:d4:fe:e1:81:ef:
         ab:a3:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:20 2026 by rpki-client