Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b56b776e-53aa-311a-ada4-eb2a1a02564c.roa
File:                     b56b776e-53aa-311a-ada4-eb2a1a02564c.roa (raw, json)
Hash identifier:          XEuuw8m/MitVtSIBkmLg/1l3zp8m9jKvUYx0CujoW+s=
Subject key identifier:   AE:FD:D8:55:00:94:98:6C:7A:7E:51:20:09:7E:EA:F2:0B:14:E9:D8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D00B24B36ED6AF9ABE003C800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b56b776e-53aa-311a-ada4-eb2a1a02564c.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     0
IP address blocks:        161.198.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:4b:36:ed:6a:f9:ab:e0:03:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=5eec33b6-7c6f-42df-a924-f87cc16afe45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:95:b0:83:a2:57:ae:d5:e6:d2:c0:a6:7a:
                    07:51:b8:bc:61:67:1a:08:e2:74:a8:dd:39:9f:15:
                    39:4d:03:61:ba:c0:17:93:5a:d8:a5:ef:b4:24:fb:
                    37:b6:ad:5b:d5:43:71:eb:d8:b3:2c:33:0a:da:1b:
                    bd:cb:b6:99:a8:00:f3:cb:0e:c6:37:e9:5d:0b:e4:
                    77:de:12:af:e8:c7:b4:98:c4:93:65:d2:11:72:15:
                    09:16:4c:36:7f:f3:f2:3f:d4:f6:d4:32:25:dc:7c:
                    48:1e:76:50:5c:2c:8a:8c:15:b9:50:c6:59:48:66:
                    c8:07:4d:4a:b9:8d:04:9b:6f:de:86:ca:34:5e:87:
                    64:50:a3:40:6e:d3:c7:d1:29:72:a8:13:30:da:ea:
                    cf:0a:dc:95:fb:dd:8f:a7:51:13:73:f2:4e:6d:51:
                    47:3d:ad:2c:83:09:fa:38:73:68:1a:f9:88:04:f5:
                    6e:7c:8b:07:dd:27:35:cf:3d:0c:9f:20:5f:4c:fb:
                    a9:28:6a:54:e1:f6:b7:1e:c9:21:af:53:f7:d6:88:
                    b5:95:66:80:9f:dd:61:c5:83:0a:1b:61:a7:52:19:
                    9d:71:dd:30:9e:b0:0f:cd:93:fa:95:29:fc:05:69:
                    31:75:1a:3e:89:89:27:fa:1d:ea:ac:4e:f2:d5:d0:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FD:D8:55:00:94:98:6C:7A:7E:51:20:09:7E:EA:F2:0B:14:E9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b56b776e-53aa-311a-ada4-eb2a1a02564c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:99:f7:58:c1:7b:bc:b0:bd:54:97:5a:98:62:f3:c9:23:0c:
         5d:78:38:96:d5:a9:82:cc:59:5c:4c:c0:97:18:4a:7f:c2:4f:
         49:1b:88:62:3b:d5:d3:00:c6:cb:e0:87:ca:d3:c5:6b:50:c0:
         c3:0b:8a:ba:3c:58:fa:9e:7f:2c:b0:d4:47:38:eb:79:2a:0a:
         c9:75:b6:6c:10:0a:eb:e4:4b:fa:9c:c8:55:6b:72:3f:8b:c7:
         ff:85:e9:a5:fb:27:55:d3:ca:c0:7b:83:6a:66:06:92:73:96:
         43:8b:6e:4f:52:bb:3c:41:9f:b7:a4:85:1a:aa:80:e7:87:18:
         ae:4f:76:84:57:66:1c:3c:94:4c:8f:bc:ff:6a:72:94:51:d1:
         0e:eb:72:ce:14:fa:27:66:a1:0e:9c:28:96:32:36:7b:5f:55:
         1d:dd:98:b4:c3:ae:ba:be:20:7b:07:93:37:04:93:2a:33:3e:
         12:ae:7a:2e:2a:d9:a8:30:76:ca:bd:0f:e3:3b:75:9b:b1:fd:
         0c:19:60:77:60:02:b2:a7:a5:fb:40:76:a3:c9:ab:a1:1e:3f:
         5b:41:62:c8:fb:4f:8f:81:0f:0a:84:c8:a5:56:13:2e:8e:d0:
         f2:de:a7:08:fd:2a:f5:9e:9f:f9:55:5d:df:f5:dd:a7:25:51:
         47:d5:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:24 2026 by rpki-client