Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435/47368a28-4994-370e-90bb-7185cbe5e39d.roa
File:                     47368a28-4994-370e-90bb-7185cbe5e39d.roa (raw, json)
Hash identifier:          3SfJ+1g2pAqBneDOK5joYUQzmNMvTMpVGuyOWQfncq8=
Subject key identifier:   A8:C5:02:40:38:E2:97:89:E5:E3:4F:9E:BE:5D:7E:A4:66:A6:CD:85
Certificate issuer:       /CN=6e55c82a-a340-435b-9fe1-06c21b1d2435
Certificate serial:       010D0C9F4328584CC7154076DBC9C4E488A86100
Authority key identifier: DF:6B:22:29:A5:D5:1C:A1:49:29:A6:1F:38:F2:F6:B9:E8:40:08:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435/47368a28-4994-370e-90bb-7185cbe5e39d.roa
Signing time:             Fri 06 Feb 2026 22:43:19 +0000
ROA not before:           Fri 06 Feb 2026 22:43:19 +0000
ROA not after:            Thu 07 May 2026 21:43:19 +0000
asID:                     396284
IP address blocks:        161.129.232.0/24 maxlen: 24
                          161.129.233.0/24 maxlen: 24
                          161.129.234.0/24 maxlen: 24
                          161.129.235.0/24 maxlen: 24
                          161.129.236.0/24 maxlen: 24
                          161.129.237.0/24 maxlen: 24
                          161.129.238.0/24 maxlen: 24
                          161.129.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435/6e55c82a-a340-435b-9fe1-06c21b1d2435.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435/6e55c82a-a340-435b-9fe1-06c21b1d2435.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:15:40:76:db:c9:c4:e4:88:a8:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e55c82a-a340-435b-9fe1-06c21b1d2435
        Validity
            Not Before: Feb  6 22:43:19 2026 GMT
            Not After : May  7 21:43:19 2026 GMT
        Subject: CN=b768ead7-d083-4b12-8fe0-fec22ed31695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:f8:e8:40:d5:a7:0b:c8:87:01:52:b3:6a:
                    ca:98:ff:24:04:e7:b3:0d:c0:d9:68:a7:e6:5c:7d:
                    ed:0f:98:fd:dc:a5:b0:f3:e9:0f:b4:75:fb:91:5b:
                    12:6d:f9:fa:8f:d0:3f:40:25:d6:9b:26:94:bd:86:
                    78:20:32:a4:37:8e:57:3a:fd:5d:15:dc:82:ce:24:
                    32:6b:05:8e:bc:7e:d5:f5:10:2b:1c:44:80:11:62:
                    f6:13:c8:6a:67:30:46:a1:79:60:f7:75:30:92:11:
                    6e:ad:50:89:af:15:80:42:eb:aa:41:83:e2:f4:80:
                    04:a1:fe:a0:0e:26:fb:b6:fc:e4:00:d0:d1:29:df:
                    62:7f:7a:ef:c7:01:7b:f1:de:6d:76:a6:ef:b1:8d:
                    9c:25:60:84:e7:0e:a5:fc:5a:15:ec:ae:19:3a:e2:
                    95:f7:e7:5f:97:84:24:87:8b:84:20:80:37:23:09:
                    10:4b:f6:0a:d6:25:4d:ec:ea:80:08:1c:0f:50:28:
                    69:ea:5d:06:c8:ae:89:a0:34:bf:49:9b:b3:27:f0:
                    e7:27:ad:f8:cc:42:c6:6d:fb:cc:29:03:d7:bd:c0:
                    34:10:b6:84:61:8c:ef:80:a3:14:d1:c1:63:5d:fe:
                    74:a3:4d:4e:d1:49:e2:69:9d:e0:ce:28:0c:21:97:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C5:02:40:38:E2:97:89:E5:E3:4F:9E:BE:5D:7E:A4:66:A6:CD:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435/47368a28-4994-370e-90bb-7185cbe5e39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435/6e55c82a-a340-435b-9fe1-06c21b1d2435.crl

            X509v3 Authority Key Identifier:
                keyid:DF:6B:22:29:A5:D5:1C:A1:49:29:A6:1F:38:F2:F6:B9:E8:40:08:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e55c82a-a340-435b-9fe1-06c21b1d2435.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:47:71:47:8c:cc:f2:28:c7:0f:24:a0:9c:72:68:0a:6e:4f:
         2f:a1:6d:f9:08:cb:60:2f:19:b7:88:26:8f:a6:14:d3:a9:33:
         8e:43:7e:02:c2:42:b9:7b:31:bd:fd:13:d0:69:9f:0c:2c:11:
         50:ce:ae:bf:21:1f:7f:19:86:64:ea:8b:c4:a8:f0:20:d4:07:
         e9:9a:ec:f6:29:48:32:8b:cb:70:17:56:4b:de:34:76:54:ab:
         b6:b8:f0:3b:1f:e8:40:39:00:42:18:f8:37:5e:39:67:98:49:
         cc:df:e1:ca:09:9e:72:77:3b:20:b0:02:87:99:8a:13:20:da:
         f7:70:a6:99:b2:e1:3e:46:79:c9:7c:69:08:d1:02:e9:8f:42:
         df:0f:50:47:f5:35:e2:5e:da:e4:ea:56:36:fa:69:39:0d:28:
         3e:24:08:67:41:a5:7b:0f:33:91:a9:e7:e2:a5:29:11:7e:e3:
         66:da:66:52:eb:56:d4:f0:af:07:c2:da:f3:ad:33:a2:eb:41:
         1f:e2:eb:e4:ef:4e:67:5c:ea:82:46:ef:13:11:e5:60:48:82:
         6b:4f:fc:c4:41:7b:86:ff:1c:02:c5:b1:be:4a:02:93:07:2f:
         b7:4d:e9:36:5a:55:82:82:c4:a0:e6:25:4c:08:bc:50:ce:d7:
         fc:54:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:20 2026 by rpki-client