Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
File:                     c57102d8-3cbd-3865-8113-05facb712676.roa (raw, json)
Hash identifier:          yw3TKWWBrXF/2iI2qB6DGi3B3jy646UziVOz0PFR/fA=
Subject key identifier:   36:EF:24:A8:A2:75:E2:14:FE:E7:90:50:15:94:34:29:7C:7B:CF:DF
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584CE4C776B65D062A70C93F38A0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     7922
IP address blocks:        161.129.33.0/24 maxlen: 24
                          161.129.36.0/24 maxlen: 24
                          161.129.37.0/24 maxlen: 24
                          161.129.38.0/24 maxlen: 24
                          161.129.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:76:b6:5d:06:2a:70:c9:3f:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=364dcf1f-86f5-42f2-93b5-72b17f5c58e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:31:7f:e9:86:44:08:07:d6:1c:69:d1:5b:
                    43:38:ae:bc:8e:72:dc:c4:d0:c7:c1:dc:9b:95:25:
                    35:c1:d0:a6:c0:24:1b:bd:d4:1f:fb:8b:37:44:77:
                    3f:c2:1c:7f:74:9b:25:ef:e6:cc:f7:f8:12:ae:6b:
                    73:56:9a:3e:fa:e3:86:4c:e5:47:b4:3b:ca:f3:59:
                    ff:7c:c5:f3:b3:fd:26:74:b2:4e:bc:4d:b2:75:cd:
                    74:7a:87:84:ad:49:31:8e:7d:64:f0:f3:af:81:65:
                    2c:10:ec:24:76:f4:91:51:4b:e7:16:e8:3d:28:c0:
                    2c:ce:2b:bc:b4:1a:44:8b:4b:ad:74:9a:d0:0b:6d:
                    f4:82:dd:b5:7b:52:47:8e:4b:53:70:a8:ae:b9:c1:
                    38:7b:1a:2b:50:41:2c:58:c0:5f:b6:ad:1a:7c:94:
                    b7:cc:4d:3f:a7:72:23:ae:43:89:fa:c1:ee:a0:71:
                    b7:87:1d:32:17:22:02:3c:93:26:cf:5a:d1:1f:ca:
                    74:e1:de:c6:a1:f2:bc:d5:0d:89:ad:0d:37:0a:7b:
                    f6:f1:69:05:00:70:e4:96:e8:e7:d7:78:54:43:b6:
                    61:72:a8:c4:5a:00:55:1e:ed:13:d8:3c:aa:fe:39:
                    eb:cb:17:7d:e9:c8:70:ca:50:18:40:8f:8f:b5:65:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EF:24:A8:A2:75:E2:14:FE:E7:90:50:15:94:34:29:7C:7B:CF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.33.0/24
                  161.129.36.0-161.129.38.255
                  161.129.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:c6:f6:47:9d:df:5f:ac:a3:f1:25:ca:db:09:1c:76:9d:
         2c:18:6e:be:97:63:65:08:04:4e:c3:d9:0b:8b:35:55:4e:10:
         82:2c:13:6c:77:44:7d:14:89:8d:b8:07:29:88:5b:62:be:c3:
         73:3f:a6:b5:38:76:e6:80:2d:8e:58:e1:85:48:6b:d9:db:33:
         6e:96:42:a4:26:90:31:fd:28:18:27:18:f3:f1:02:73:bc:60:
         c1:d0:ee:c2:eb:03:92:6d:c0:30:d6:68:da:2d:90:52:66:98:
         97:17:61:6d:83:66:cc:8f:37:58:15:21:5e:24:8d:4f:e8:d4:
         6b:de:a9:a4:fe:ae:4d:87:d2:4e:f0:1b:4c:61:36:f9:98:ff:
         3a:f2:70:8d:09:1f:38:dc:2b:dc:b6:57:a2:4c:8d:1c:85:88:
         46:dc:3e:75:0d:cf:97:f9:df:60:d6:1f:8c:df:42:10:6d:05:
         e8:93:3d:26:7a:ac:cf:b0:8a:98:e8:95:3b:0b:4a:0a:c7:b6:
         4f:21:80:d0:04:6c:86:c5:26:b8:c2:44:a0:95:1d:b7:2b:4e:
         0b:59:ae:37:d0:85:a5:a0:12:62:d0:57:39:1d:0e:83:74:e6:
         9c:3e:e4:5e:04:d2:73:61:0c:cc:50:b3:8a:ef:5f:9e:0d:1a:
         f7:f3:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 20:05:31 2026 by rpki-client