Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/c16fa5a0-822a-3d10-8287-ed9ee557819c.roa
File:                     c16fa5a0-822a-3d10-8287-ed9ee557819c.roa (raw, json)
Hash identifier:          zO7y+i0qQa9Y2egA82rY26z1tjEzKf04yW9vDChAfBY=
Subject key identifier:   55:E9:67:DE:B9:27:52:62:55:F7:2D:AA:EF:A7:D1:34:E4:5D:33:8A
Certificate issuer:       /CN=5028ee72-1629-4552-a11f-947b5a925519
Certificate serial:       010D0C9F4328584B64A8E26795B71590E79AFD80
Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/c16fa5a0-822a-3d10-8287-ed9ee557819c.roa
Signing time:             Thu 02 Oct 2025 23:48:49 +0000
ROA not before:           Thu 02 Oct 2025 23:48:49 +0000
ROA not after:            Thu 01 Jan 2026 00:48:49 +0000
asID:                     399244
IP address blocks:        161.129.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:a8:e2:67:95:b7:15:90:e7:9a:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519
        Validity
            Not Before: Oct  2 23:48:49 2025 GMT
            Not After : Jan  1 00:48:49 2026 GMT
        Subject: CN=86f1ed8e-1b02-4330-a80b-d1c725b74ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:de:7d:9f:13:c7:05:46:c1:b3:ff:16:18:b9:
                    f9:9f:e2:2d:63:5a:be:d2:6d:cc:f0:ea:c0:6d:16:
                    97:d2:77:cc:33:8a:95:73:27:04:bf:b2:df:ff:a1:
                    14:1a:dc:41:aa:60:c5:2c:b8:9f:e4:9c:44:69:1d:
                    6d:73:0b:57:e3:ec:b9:cb:66:7a:91:df:57:73:ad:
                    69:a0:d0:61:a8:7a:b6:72:ee:35:da:df:15:bc:d9:
                    1b:ec:c6:5c:8f:ff:18:ef:41:16:d8:5e:4a:cc:ba:
                    a6:c2:e5:8b:d2:1a:c8:70:53:1c:ef:a4:8b:77:bf:
                    a4:d2:0d:ad:16:6c:d5:dc:bf:4f:a6:91:cd:fe:c9:
                    72:7f:33:d4:15:fe:d1:8e:09:dc:aa:48:84:7e:c5:
                    53:b7:e2:98:b4:04:dc:0c:52:9d:69:e9:f1:7f:30:
                    36:d3:05:4f:3b:bf:22:d0:e1:f5:83:4c:5a:23:eb:
                    8b:77:4a:db:87:f9:f6:10:b9:24:ad:0f:98:18:58:
                    b5:b3:0f:cc:1e:4d:51:ba:fa:ec:a3:c6:d3:dc:05:
                    5b:80:67:f4:c8:91:e5:3b:e5:42:31:0e:3f:7e:ab:
                    d3:6b:dc:0a:6e:20:b5:2f:7e:ae:24:eb:37:7c:a6:
                    c9:c4:24:0c:51:6a:29:6b:95:66:a4:3d:2a:d4:36:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E9:67:DE:B9:27:52:62:55:F7:2D:AA:EF:A7:D1:34:E4:5D:33:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/c16fa5a0-822a-3d10-8287-ed9ee557819c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl

            X509v3 Authority Key Identifier:
                keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:09:e7:24:ab:c4:90:60:17:e8:ac:8d:a7:ba:2b:97:f6:d1:
         45:11:58:4b:f4:88:f2:cb:2e:0b:41:0f:78:2a:44:26:0d:f7:
         28:b9:54:61:0b:81:16:e1:f9:e2:d9:59:ae:e0:fd:11:e9:47:
         a0:f4:2d:06:0b:93:0b:7c:97:e1:86:9e:00:38:71:46:db:b2:
         47:40:53:54:f9:10:e6:84:18:89:fa:26:b3:b7:23:92:45:33:
         7e:f5:fd:53:f2:b2:f2:ba:54:bd:07:8b:74:e4:e9:36:d2:2b:
         f1:ce:0b:d6:7c:1b:ab:3a:04:3d:42:c0:7a:34:0c:72:18:be:
         6b:f8:01:bc:6b:47:8c:be:d4:46:49:92:3e:b8:ba:87:f2:78:
         58:82:92:71:ec:a7:85:8e:25:44:a7:cd:79:e0:39:bb:3e:ad:
         a2:69:9e:86:7a:03:6d:de:02:ea:d4:d8:08:65:0c:7a:8a:5f:
         db:6b:2a:1e:8b:2d:e6:cf:de:cc:c9:8e:62:87:50:32:a3:8d:
         90:2b:2e:33:6d:e4:d5:25:b7:01:17:58:bd:e5:36:af:4a:c4:
         3b:1c:0f:fe:89:10:bd:d7:e3:65:70:5c:99:4b:c0:6d:c5:8d:
         4c:7b:08:08:10:c0:bf:ea:30:5f:b2:ed:b1:31:6c:cc:19:0f:
         0d:02:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:32:02 2025 by rpki-client