Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/3cbf8699-96e9-34d2-92c1-50ee8c27be25.roa
File:                     3cbf8699-96e9-34d2-92c1-50ee8c27be25.roa (raw, json)
Hash identifier:          dvoHA1rfl7w91aeGEKXfPSdVEkxnjOH3QV15iFweWGw=
Subject key identifier:   F1:C0:58:24:AD:9B:41:62:A2:91:87:DA:98:90:BF:D5:46:53:45:00
Certificate issuer:       /CN=c83fa88a-ebc2-4a18-a5e5-fc14978afe7f
Certificate serial:       010D0C9F4328584DBFDB934CEB7F4594647AF200
Authority key identifier: 07:5A:D8:07:87:A4:AA:7C:25:C2:25:A2:C7:03:E8:BE:18:2D:7D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/3cbf8699-96e9-34d2-92c1-50ee8c27be25.roa
Signing time:             Thu 07 May 2026 01:23:23 +0000
ROA not before:           Thu 07 May 2026 01:23:23 +0000
ROA not after:            Wed 05 Aug 2026 01:23:23 +0000
asID:                     63027
IP address blocks:        161.129.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:db:93:4c:eb:7f:45:94:64:7a:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83fa88a-ebc2-4a18-a5e5-fc14978afe7f
        Validity
            Not Before: May  7 01:23:23 2026 GMT
            Not After : Aug  5 01:23:23 2026 GMT
        Subject: CN=e32ca2d5-0323-4fd7-8f70-823d3329a0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:55:9c:8e:93:5f:74:76:ee:2c:a8:65:b6:
                    9b:0d:7f:37:7c:eb:f1:83:3a:7e:94:3a:3f:fa:82:
                    99:5c:f2:c1:d5:5a:90:27:09:cd:ce:9f:76:c2:e5:
                    91:d9:50:3d:b1:83:cc:d1:af:e6:3a:74:a6:59:0b:
                    be:48:ec:b0:3c:11:5f:09:5a:4a:68:37:60:7c:dc:
                    74:c9:91:44:70:9b:9c:3e:40:e2:3a:80:76:ee:79:
                    8a:b1:42:be:3d:c8:18:fa:c3:34:d0:da:50:7a:ac:
                    96:1a:ca:ea:fb:e9:33:31:f5:e8:e7:79:04:53:7c:
                    b4:ac:23:33:4a:df:b3:cc:f8:1a:48:d2:cb:ed:4e:
                    78:ad:93:6c:fc:91:42:86:17:60:a4:2f:39:e1:a8:
                    ad:4b:3c:ad:88:a3:0e:c9:a8:5d:ca:78:18:1f:f4:
                    f3:c5:b7:e9:4e:0c:43:3e:ce:3f:45:4d:31:b0:51:
                    eb:11:5f:2d:b1:d1:48:5d:31:d3:50:27:80:d9:5e:
                    3f:76:4e:97:c4:fe:e7:ab:89:a3:bd:1d:61:72:53:
                    3b:1b:28:39:14:fd:25:f4:c4:d7:eb:73:c9:7b:19:
                    3e:4d:0b:d0:8a:d1:04:70:43:55:6f:12:30:0b:b7:
                    6a:a1:9b:e9:56:91:74:5f:c6:64:58:b2:a0:f7:96:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C0:58:24:AD:9B:41:62:A2:91:87:DA:98:90:BF:D5:46:53:45:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/3cbf8699-96e9-34d2-92c1-50ee8c27be25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.crl

            X509v3 Authority Key Identifier:
                keyid:07:5A:D8:07:87:A4:AA:7C:25:C2:25:A2:C7:03:E8:BE:18:2D:7D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c83fa88a-ebc2-4a18-a5e5-fc14978afe7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3a:c7:3b:08:d0:d3:ca:3d:4f:90:f6:ba:aa:9e:b0:65:be:
         cb:83:ba:a1:b8:45:ec:20:23:7c:d3:0b:04:a5:b7:2a:c4:72:
         78:54:67:71:c7:dd:c7:e0:7f:9e:b2:48:6d:40:ce:fc:eb:2f:
         fd:1a:60:43:e8:af:0f:61:8d:4f:75:96:3e:0d:0f:a9:0a:a8:
         03:e6:c5:7e:35:d2:a0:39:c5:28:21:ae:86:28:86:b7:19:0d:
         7e:39:11:fc:3b:ee:64:27:ac:69:98:42:e1:e6:ad:cc:6d:b9:
         8d:b5:62:93:6a:51:55:17:c2:db:72:45:5d:ef:5b:4d:6d:23:
         57:52:8a:ce:8e:77:50:ef:64:c4:ab:ac:33:6c:b9:7f:ab:59:
         4f:38:83:b5:a9:0c:7c:89:b0:22:98:dc:f3:4f:33:71:ae:9b:
         9e:d9:92:0d:92:5d:6e:17:30:3d:fa:4a:b8:35:d5:2e:d7:09:
         a4:e0:2b:e6:5d:69:78:62:f0:39:00:b4:e3:f2:fc:30:83:fb:
         b0:84:6e:28:25:27:02:55:90:29:78:9b:5c:04:64:19:46:dc:
         bf:4f:78:f8:10:a0:3c:fe:f2:11:e4:47:58:b9:d0:de:6f:f2:
         07:02:f0:25:5b:fc:8b:f2:e3:95:93:dc:0b:75:16:09:9c:f9:
         ab:54:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 16:38:27 2026 by rpki-client