Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924/eb7db234-f597-3252-ac74-fbb803c7ae21.roa
File:                     eb7db234-f597-3252-ac74-fbb803c7ae21.roa (raw, json)
Hash identifier:          gAf3qaVtBwXgrCRn6fg6E/drIvkCAL1OkteGkf7K69c=
Subject key identifier:   C7:21:D5:98:CE:43:07:E9:D2:62:DE:21:FD:93:DE:06:BB:47:15:98
Certificate issuer:       /CN=043f255b-e75e-4170-bfa3-82cc1e2f2924
Certificate serial:       010D0C9F4328584F7E1A12A1E42972F5F4AAC768
Authority key identifier: 0A:81:D9:9E:D0:55:6A:76:E4:74:02:65:1C:F1:9B:22:61:BC:69:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924/eb7db234-f597-3252-ac74-fbb803c7ae21.roa
Signing time:             Tue 13 Oct 2026 21:39:50 +0000
ROA not before:           Tue 13 Oct 2026 21:39:50 +0000
ROA not after:            Mon 11 Jan 2027 22:39:50 +0000
asID:                     397860
IP address blocks:        161.129.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924/043f255b-e75e-4170-bfa3-82cc1e2f2924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924/043f255b-e75e-4170-bfa3-82cc1e2f2924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:1a:12:a1:e4:29:72:f5:f4:aa:c7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043f255b-e75e-4170-bfa3-82cc1e2f2924
        Validity
            Not Before: Oct 13 21:39:50 2026 GMT
            Not After : Jan 11 22:39:50 2027 GMT
        Subject: CN=5b77ca78-6a3d-4438-b789-414fd4f0959d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:96:27:e9:d0:30:30:21:0d:e2:11:c2:7b:ab:
                    1f:a2:44:8d:22:11:45:4c:ce:92:f3:9c:bf:5e:55:
                    8a:0d:51:7a:3b:c9:2c:0d:eb:03:e6:58:2b:f5:c0:
                    c0:84:10:7c:70:c7:c8:2c:cc:d1:7b:16:d6:54:c7:
                    ba:d5:9a:57:38:4c:41:99:21:9b:4b:60:be:64:07:
                    72:e7:1b:67:ca:ac:60:cd:d1:93:e0:87:7d:1e:80:
                    15:9e:98:43:2e:59:91:2d:db:26:9a:85:f2:96:09:
                    48:c9:7e:de:4d:a8:d0:e7:c2:b4:36:b6:2a:2f:9d:
                    e5:b5:84:64:40:37:3a:c0:9e:cd:4f:d3:46:1b:19:
                    99:c8:71:ae:d6:2c:4f:00:c2:c2:27:f0:43:87:04:
                    a6:fc:2e:8f:2b:da:64:de:d7:74:00:92:a5:98:c0:
                    bf:10:24:f8:6a:76:f7:88:16:71:6d:04:1e:5b:ad:
                    03:39:82:80:c2:f4:b0:ec:df:ba:71:7e:d8:2c:ca:
                    31:0a:7b:95:83:78:12:1b:fe:1a:a6:01:d9:ea:65:
                    43:9b:d6:33:fe:8c:21:2b:fc:ba:94:f1:83:3b:88:
                    04:67:99:46:7b:9c:c7:d0:31:9a:af:3b:1d:76:39:
                    f3:e0:ac:b3:64:1d:73:9e:c8:eb:19:19:16:4d:35:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:D5:98:CE:43:07:E9:D2:62:DE:21:FD:93:DE:06:BB:47:15:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924/eb7db234-f597-3252-ac74-fbb803c7ae21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924/043f255b-e75e-4170-bfa3-82cc1e2f2924.crl

            X509v3 Authority Key Identifier:
                keyid:0A:81:D9:9E:D0:55:6A:76:E4:74:02:65:1C:F1:9B:22:61:BC:69:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/043f255b-e75e-4170-bfa3-82cc1e2f2924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4f:29:65:3d:e6:85:e8:13:26:74:40:d5:22:f6:fd:c4:18:
         68:6a:99:af:30:25:ab:78:8e:e2:ea:b4:1c:64:f8:2c:e8:4e:
         41:e8:3c:b9:7a:a8:84:bb:4e:01:48:92:c6:7c:c4:15:07:83:
         10:a8:2b:82:5b:c3:f3:b9:a1:0c:44:a4:ef:e2:7d:da:fb:cc:
         42:c4:46:3b:70:8d:65:16:d6:42:18:37:67:2c:9d:3a:ef:df:
         98:b2:f3:91:47:11:09:9d:82:bc:2f:d3:cc:c3:a8:38:35:0c:
         ca:41:99:2c:8e:61:5a:a6:52:f1:0e:fd:05:96:07:17:2b:1d:
         cf:f1:4d:7b:a3:a9:a8:f0:4f:24:14:c5:f9:7e:cb:77:2b:14:
         d6:6a:21:11:e7:d3:82:80:2c:d2:12:94:5b:df:80:e0:51:3c:
         7d:9a:4e:69:ab:d7:b9:9e:74:b4:de:88:07:0c:0a:40:cc:46:
         f8:1f:f5:3a:bb:3f:68:2f:1d:07:07:83:0e:9a:f3:55:63:ac:
         93:3d:d4:88:57:85:a6:0f:bf:fc:7c:6c:79:93:da:be:78:cb:
         13:5e:6a:de:82:a7:60:d3:dc:5f:e2:8e:ab:6e:dc:f4:04:89:
         be:71:80:bb:05:82:bd:66:4f:ce:23:ee:15:f6:a3:0a:97:b5:
         5b:bc:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:16:13 2026 by rpki-client