Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa
File:                     f585be5d-4b82-3039-bcb5-12d932832a7c.roa (raw, json)
Hash identifier:          EcPiy+gvPS3BSpfxA3mf99DLcu25ljOjrRrdC2AMbUQ=
Subject key identifier:   1B:52:1A:82:5B:2A:3E:D6:D0:BB:1E:29:0D:59:0F:FC:5C:85:2C:96
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D5E1A639725E159B49C8A9300
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16696
IP address blocks:        161.38.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:63:97:25:e1:59:b4:9c:8a:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=82a4385b-c031-4c20-aef2-fc7ade725f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:83:0d:62:b8:1e:c8:6b:a6:fd:4f:59:6a:
                    bb:7f:a3:06:d1:7f:b8:0b:3d:45:35:b8:36:dc:08:
                    2e:9e:77:72:f3:e6:b9:34:ef:ec:b9:36:62:bd:8a:
                    75:5b:90:8c:d0:14:b3:f6:73:47:7f:c1:cc:9c:a4:
                    a0:91:aa:c9:d6:ee:f5:6b:c4:99:f8:9e:64:96:19:
                    30:fc:92:d3:f1:a8:bd:f1:e0:9e:06:a9:c4:24:2b:
                    71:ae:a9:99:f1:de:da:4b:6c:3e:93:3b:3c:59:98:
                    36:c6:3e:29:a4:77:61:bd:8b:89:24:e1:8d:2d:92:
                    12:72:58:26:7c:6d:03:71:6b:ac:04:1f:9c:d5:48:
                    3b:81:34:0a:3a:f1:69:e2:e9:15:e5:a1:51:89:a4:
                    fa:b3:f3:d0:11:97:f7:5c:4f:38:93:36:99:f9:fa:
                    cb:a9:c0:ae:10:d3:56:10:82:8c:cf:43:71:ec:b8:
                    76:14:14:2d:2a:27:cb:35:fd:f4:d4:62:8b:f3:1c:
                    ac:d9:fb:92:5f:bf:1c:5d:54:11:75:fc:e5:ff:27:
                    de:21:a7:cd:b4:7f:99:12:67:f2:6b:20:0a:ef:0e:
                    07:32:d6:77:9b:7b:67:0a:44:54:e5:88:c4:9e:f3:
                    a1:6a:3d:34:6a:a1:3b:53:b6:05:96:92:de:15:36:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:1A:82:5B:2A:3E:D6:D0:BB:1E:29:0D:59:0F:FC:5C:85:2C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:73:52:ba:b3:c8:52:cd:9e:86:c2:43:a4:07:fc:ec:12:7c:
         cb:c5:6a:bd:47:07:f5:41:ae:48:6c:52:fc:bd:9e:96:27:6c:
         fd:d3:67:a2:b5:fe:eb:bf:7c:7c:22:1e:f2:47:20:97:40:6a:
         c9:7e:18:ac:fe:b3:b8:ed:45:a4:50:dd:02:ec:d8:e8:d1:60:
         e8:07:f9:25:4e:36:bb:01:23:d9:d9:2b:af:c0:38:01:81:0a:
         6b:fc:f4:ab:f4:e9:f2:33:c5:eb:16:5b:82:d1:87:67:a5:cd:
         3e:d8:99:25:59:51:2c:2c:1f:0e:d8:d2:27:8a:46:dd:7d:15:
         90:a5:ce:e3:eb:39:a4:31:cb:32:cd:dd:66:c3:28:c5:75:46:
         35:50:2b:95:87:18:c4:4f:79:17:3b:bc:31:b7:91:f7:96:e9:
         c3:82:5f:24:2f:05:45:1e:24:e5:57:56:af:56:15:95:ce:ba:
         88:18:55:af:54:93:43:4a:14:f6:c6:f4:67:e2:92:10:57:af:
         00:a9:af:8e:1b:cf:68:8f:77:7d:35:f7:64:27:60:7e:1a:fd:
         bd:95:36:9e:ba:2b:86:cb:18:40:40:b5:96:f1:50:ae:f4:3a:
         2d:3b:ce:e7:4e:3f:f8:73:d7:7c:05:0c:bf:9b:a9:39:c6:45:
         27:eb:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:39:38 2026 by rpki-client