Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/d824169d-a996-348c-9055-8a487cc8ac8f.roa
File:                     d824169d-a996-348c-9055-8a487cc8ac8f.roa (raw, json)
Hash identifier:          lGWJaqatRTk1NzOnQ6pgPWFMYLNM7eE79fW1ZwYFG+U=
Subject key identifier:   AD:23:2C:2B:52:2E:31:C6:5C:92:8C:FE:66:79:6B:87:CD:47:14:73
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F4328584D65151527BE4B92A7F7234C80
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/d824169d-a996-348c-9055-8a487cc8ac8f.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        161.129.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:15:27:be:4b:92:a7:f7:23:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=50d56b2c-97e5-432d-80fb-da84c796475a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:f1:ad:03:9c:c9:09:b1:b2:99:5a:75:3e:
                    51:e7:b9:cf:41:2b:36:bd:16:b9:eb:0d:52:1f:fe:
                    aa:bf:4c:82:51:df:3b:76:90:74:ed:2f:a7:ec:3b:
                    fd:1c:3d:2a:56:8e:13:24:22:40:3a:fc:ee:60:25:
                    de:de:70:30:d1:44:49:a2:a2:57:c6:3f:33:8f:19:
                    3f:cc:5c:ae:29:ab:28:d5:07:46:1d:7f:5f:fa:51:
                    66:dd:c1:84:c5:2a:27:06:b7:56:5b:6f:ef:86:be:
                    b2:30:94:e1:90:e1:85:34:43:ef:d6:f3:cc:f1:82:
                    de:eb:fc:cc:08:c0:21:9f:da:e8:4d:e7:ed:05:5b:
                    02:e2:ff:c6:b9:7c:b4:b7:ab:97:a0:62:f0:ae:a1:
                    03:df:5d:51:25:cf:ba:6e:0d:32:08:0d:5c:ad:c4:
                    fa:32:e4:f3:a9:05:3d:49:eb:0e:c6:f8:7b:99:fb:
                    de:b1:04:78:bb:c5:c6:0a:1a:83:b9:11:47:c7:ed:
                    e3:f4:63:ab:6a:9a:42:23:b6:cb:d4:39:e7:03:0c:
                    1f:78:69:53:2d:5c:ad:95:7b:85:6d:e7:45:62:4e:
                    78:73:e8:f4:ce:5f:46:3e:a5:f3:11:ba:71:f4:7c:
                    a0:81:f7:3d:ba:ca:ea:22:67:46:9c:c3:88:76:76:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:23:2C:2B:52:2E:31:C6:5C:92:8C:FE:66:79:6B:87:CD:47:14:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/d824169d-a996-348c-9055-8a487cc8ac8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:6e:9d:3f:06:72:1d:98:00:18:f1:41:34:e6:c3:38:be:b5:
         b6:25:24:80:8e:00:91:f4:2a:2f:f8:17:0c:f8:2a:58:66:13:
         93:ef:04:81:b7:49:3b:70:b0:e1:04:8e:1a:c4:c1:f0:ba:63:
         9b:36:6f:e8:dd:8a:dd:93:7c:cc:87:03:c8:fd:bc:03:7d:47:
         32:70:77:2e:bd:6a:c6:3d:90:dd:c5:98:29:66:ee:c4:0d:ab:
         56:23:04:0b:27:fb:0b:46:e6:a0:99:fc:a8:71:f3:d9:00:e8:
         48:dc:9f:fa:37:af:8d:a1:b0:82:fc:24:99:fa:a9:98:31:b2:
         53:2d:60:bc:c9:fe:f7:48:67:71:6d:39:b3:0c:8c:10:12:ce:
         6d:c5:37:84:36:93:9b:e0:1e:90:55:9d:7f:3c:3b:2d:9f:aa:
         5b:24:a7:54:03:45:7b:53:fe:ac:50:ec:51:51:47:c7:ca:43:
         33:ae:3f:2e:1a:bb:5c:dd:90:2d:0b:04:5c:75:5e:8a:b0:9e:
         9a:0d:2d:ba:6e:b0:4f:9e:37:bf:d2:cd:3d:d6:ab:0e:e1:06:
         aa:5e:28:24:e0:ed:9b:5e:4e:63:7e:d0:02:86:1c:6b:22:32:
         ca:c9:41:86:ed:65:38:4c:95:ab:c1:12:98:45:e2:1b:8c:59:
         52:34:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:31:01 2026 by rpki-client