Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/28e0c103-7eba-397b-b96f-5ab3c885fd44.roa
File:                     28e0c103-7eba-397b-b96f-5ab3c885fd44.roa (raw, json)
Hash identifier:          oB1Q5vE0Z38sBgc8BPX4DJqtPVnj8/o08RaiOcz4vFs=
Subject key identifier:   74:7D:8F:19:39:F7:EB:EB:40:09:2F:0B:22:D4:0A:C8:49:62:ED:20
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584EA790B17FAB56730601A46AC0
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/28e0c103-7eba-397b-b96f-5ab3c885fd44.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209
IP address blocks:        161.195.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:b1:7f:ab:56:73:06:01:a4:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=af8b4add-3bdf-4e28-98f0-bc09015fd4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:82:f0:83:cc:78:23:d5:e8:35:aa:91:df:
                    29:4c:71:b2:41:14:57:22:41:9b:12:ef:21:f6:5e:
                    c4:c1:52:39:3d:9f:9c:6e:18:fb:28:2a:e7:84:00:
                    90:6c:1e:39:17:00:79:1d:6c:6c:f4:21:d8:c8:f2:
                    45:0b:7c:22:ff:c4:cc:9f:ae:cc:d2:e8:bc:6d:f4:
                    72:d4:7b:93:bc:9a:4f:c0:66:2a:1b:c6:24:5c:86:
                    d3:ad:5b:94:93:4a:94:82:e7:68:9d:f2:1c:07:b8:
                    dd:1c:11:d0:b3:11:e2:09:bc:42:74:ea:91:ff:45:
                    18:1f:0c:7c:a6:c3:86:01:92:59:1f:d0:cb:74:d4:
                    c4:42:d6:88:8c:b8:4c:2e:48:3e:58:1c:f9:05:be:
                    2e:cc:f6:4d:09:0f:79:36:63:61:39:7c:99:85:2c:
                    e5:50:5d:c8:08:48:38:56:44:63:1c:f3:96:2f:a9:
                    ac:c6:75:7d:f0:dc:0d:42:24:bf:8a:f4:62:95:ca:
                    a9:43:b3:df:da:3c:0e:ce:34:28:8d:29:84:f4:b6:
                    0b:46:28:71:c3:25:41:ed:06:52:d5:96:65:cf:f3:
                    81:48:50:38:14:37:48:84:ae:c2:ca:d2:93:e7:e9:
                    57:91:f0:8c:61:bf:68:89:36:51:70:c2:35:04:de:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:8F:19:39:F7:EB:EB:40:09:2F:0B:22:D4:0A:C8:49:62:ED:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/28e0c103-7eba-397b-b96f-5ab3c885fd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:22:1b:e6:29:21:d3:06:aa:4f:a9:61:60:9e:06:1c:c8:0a:
         83:29:ae:58:f4:28:e8:dc:55:11:32:b6:73:d6:df:f0:2d:48:
         28:eb:a6:f3:21:a7:00:77:93:b3:58:50:e5:69:1b:2d:57:e5:
         be:f4:dd:56:95:3f:d5:46:46:8d:56:93:5c:43:64:cf:cf:a8:
         e0:d6:4c:9e:62:ad:53:bd:82:10:d9:86:0c:93:cc:23:33:f5:
         97:d7:a2:7a:74:34:1b:95:c2:5c:69:66:f6:50:8f:ea:37:03:
         bb:d8:84:df:99:9d:e0:8e:7c:b9:54:ab:b4:3d:88:a1:e5:9a:
         7c:8a:6f:26:70:fc:f7:b6:3b:8f:4d:3b:73:a3:82:a0:1e:27:
         5e:00:7f:6b:71:73:c9:8a:80:6d:98:39:12:79:3b:80:dd:4a:
         48:a2:8e:49:90:db:59:45:11:99:27:82:0a:28:72:c8:3f:2a:
         28:3f:7e:f8:74:fe:2c:8e:0b:88:f6:8d:0b:98:a4:d9:a9:1d:
         06:dd:bb:67:05:a1:c0:6c:68:90:18:a4:4d:77:58:2e:ca:e1:
         3e:70:ad:11:3a:a4:9d:d5:e3:5b:c8:ba:e2:29:6b:05:e8:d8:
         59:4e:f1:9c:eb:5c:2e:17:de:0a:15:aa:f2:0f:b4:46:9f:0b:
         cc:e9:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 04:32:31 2026 by rpki-client