Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ae7a87ea-09e3-37ff-a1a2-19775fb24ccc.roa
File:                     ae7a87ea-09e3-37ff-a1a2-19775fb24ccc.roa (raw, json)
Hash identifier:          Lkr34qfrV4zlEYlatwh6WyEMvUwhS3068uqeV7cBhXw=
Subject key identifier:   DC:05:89:49:E8:0A:7E:19:DF:58:3F:6D:9B:C3:C9:9B:83:8D:2D:DB
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584DD8F0768B45A03C0BC7B74380
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ae7a87ea-09e3-37ff-a1a2-19775fb24ccc.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     401585
IP address blocks:        161.129.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:76:8b:45:a0:3c:0b:c7:b7:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=7a032c5c-78de-4802-89bb-e6dd44f132d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:b8:b0:aa:c9:5b:8a:31:1f:b2:da:dc:4b:
                    7b:8e:53:ae:55:32:16:74:4b:96:27:ac:b4:d1:60:
                    74:b9:aa:b3:3f:cd:72:d3:8b:2d:ea:e5:d1:f6:e1:
                    11:23:0a:04:4f:63:3f:cb:b1:96:cb:d2:55:41:0f:
                    c6:4a:ec:c7:43:30:f4:9b:ae:9a:3e:20:0e:9a:2b:
                    4d:fb:43:3e:83:f4:98:d5:74:99:11:9c:b4:16:40:
                    aa:c6:2d:b1:2f:6a:ea:1a:cc:29:7c:f8:1a:4b:de:
                    29:98:64:a5:6a:27:56:11:33:26:f3:49:37:b7:70:
                    60:11:86:d8:7c:3f:17:0b:f6:e9:88:d5:52:ad:83:
                    0f:ed:e2:ce:12:e7:18:6d:43:6b:89:82:31:a6:3e:
                    42:56:21:29:c4:50:3d:ea:3f:31:b3:d4:66:81:76:
                    97:fd:55:c2:34:67:1e:5f:44:2d:e3:8f:d3:64:72:
                    16:ec:7c:65:e3:56:d9:ac:1a:30:20:56:88:91:56:
                    71:61:23:c2:f0:6b:aa:35:86:e6:9b:b4:4b:96:d4:
                    02:42:22:a4:49:16:7e:05:19:32:73:64:dd:0d:dd:
                    ad:2d:c3:bd:42:5f:e8:07:96:0a:74:52:fd:6f:cd:
                    c7:4b:d0:5c:79:6a:be:54:6c:59:31:e8:1e:a1:25:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:05:89:49:E8:0A:7E:19:DF:58:3F:6D:9B:C3:C9:9B:83:8D:2D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ae7a87ea-09e3-37ff-a1a2-19775fb24ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:84:9e:49:78:d3:17:89:2a:28:79:64:63:20:84:dc:7f:
         47:43:b1:6a:ef:ef:cc:fc:02:34:33:92:4d:87:10:89:bf:39:
         4e:8c:ca:69:72:01:d8:09:26:cf:26:2d:0a:d2:44:cc:6c:96:
         ff:d5:89:9a:d9:89:65:fc:0e:e8:8c:f0:db:d0:39:7f:37:67:
         17:40:a3:eb:de:7e:2b:29:a1:b3:04:7d:69:a0:99:1a:26:a6:
         7b:c9:7c:59:39:87:f9:88:ab:0a:63:0b:c8:73:92:1a:ff:ea:
         d3:0e:85:b7:d8:31:e3:df:25:23:18:1e:ee:be:7e:4f:9b:ce:
         02:83:99:4b:14:b7:05:8f:ef:f7:73:0a:76:05:f6:bc:1e:64:
         1f:33:6f:34:14:fd:d0:cb:85:fb:68:a1:7c:3c:08:00:17:85:
         3c:30:48:49:70:69:2f:6c:80:5b:e4:a6:e1:15:e6:67:23:4b:
         a3:38:2c:22:d5:fd:fd:65:7a:3e:a8:0e:9d:b4:be:64:ca:a2:
         e4:86:75:73:56:49:44:ea:25:b6:ec:25:48:b5:d7:24:fb:da:
         35:f9:8b:df:82:f1:9e:84:79:74:8f:e8:c0:cf:a6:61:02:c9:
         04:22:3b:38:4b:4e:d3:f5:1d:ce:40:dc:18:36:5e:a4:d4:93:
         bd:76:5d:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HaLRaA8C8e3Q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
N2EwMzJjNWMtNzhkZS00ODAyLTg5YmItZTZkZDQ0ZjEzMmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOO4sKrJW4oxH7La3Et7jlOuVTIWdEuWJ6y0
0WB0uaqzP81y04st6uXR9uERIwoET2M/y7GWy9JVQQ/GSuzHQzD0m66aPiAOmitN
+0M+g/SY1XSZEZy0FkCqxi2xL2rqGswpfPgaS94pmGSlaidWETMm80k3t3BgEYbY
fD8XC/bpiNVSrYMP7eLOEucYbUNriYIxpj5CViEpxFA96j8xs9RmgXaX/VXCNGce
X0Qt44/TZHIW7Hxl41bZrBowIFaIkVZxYSPC8GuqNYbmm7RLltQCQiKkSRZ+BRky
c2TdDd2tLcO9Ql/oB5YKdFL9b83HS9BceWq+VGxZMegeoSU1awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwFiUnoCn4Z31g/bZvDyZuDjS3bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYWU3YTg3ZWEtMDllMy0z
N2ZmLWExYTItMTk3NzVmYjI0Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoYEiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGx3hJ5JeNMXiSooeWRjIITcf0dDsWrv78z8AjQzkk2HEIm/OU6Mymly
AdgJJs8mLQrSRMxslv/ViZrZiWX8DuiM8NvQOX83ZxdAo+vefispobMEfWmgmRom
pnvJfFk5h/mIqwpjC8hzkhr/6tMOhbfYMePfJSMYHu6+fk+bzgKDmUsUtwWP7/dz
CnYF9rweZB8zbzQU/dDLhftooXw8CAAXhTwwSElwaS9sgFvkpuEV5mcjS6M4LCLV
/f1lej6oDp20vmTKouSGdXNWSUTqJbbsJUi11yT72jX5i9+C8Z6EeXSP6MDPpmEC
yQQiOzhLTtP1Hc5A3Bg2XqTUk712Xds=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:15 2026 by rpki-client