Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
File:                     2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa (raw, json)
Hash identifier:          8EGgQHUnJ5tuk4OtE8Srxou86qqTTlrAuvCZWtl1Lvc=
Subject key identifier:   40:A1:77:E9:0D:BC:89:EE:51:29:39:0D:DE:79:8C:99:19:B2:B7:46
Certificate issuer:       /CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa
Certificate serial:       010D0C9F4328584F20F7BB872D7CFD7BA66438F0
Authority key identifier: 38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     14503
IP address blocks:        161.129.22.0/24 maxlen: 24
                          2620:13f:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bb:87:2d:7c:fd:7b:a6:64:38:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=6fc8ccdd-582f-4a62-8c1f-cf9e78412923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:fd:ff:ae:fc:4f:a3:24:9d:cc:21:f3:b5:
                    76:46:63:24:ff:e0:fe:46:24:89:f9:3f:0c:4c:59:
                    f8:32:e4:5b:1c:12:32:ea:a1:aa:0a:3e:6d:13:d5:
                    d2:7d:ad:16:a9:67:e4:d8:8a:ed:83:45:ed:04:d3:
                    8f:cd:15:83:1b:78:5e:d0:3a:a3:36:b8:c8:d5:d1:
                    fe:b8:7d:13:8f:b1:de:59:c0:3f:4b:54:08:c3:47:
                    09:22:55:73:95:61:ff:1f:22:c0:02:97:0b:dc:bc:
                    8e:d7:2b:e5:48:04:1e:fe:81:42:5c:72:26:df:33:
                    41:3c:28:80:d5:79:87:e4:22:49:99:d7:57:33:16:
                    09:07:f9:85:f3:2f:89:fe:00:5e:4e:c4:33:94:9b:
                    01:b6:46:fa:86:fb:05:98:b8:e2:99:98:68:a7:43:
                    ff:fa:15:ca:18:ad:76:fc:49:df:07:da:e3:e8:d6:
                    09:5f:50:0e:f4:3c:cc:d9:9e:b1:69:d0:f7:29:02:
                    b1:05:5c:4a:e2:ff:28:2c:39:06:bc:27:f9:e8:14:
                    6e:64:f3:d6:ac:cb:ec:c7:cb:78:34:ef:a8:73:ee:
                    1a:b8:6e:05:29:89:87:93:6f:15:2a:22:12:f7:7a:
                    96:3b:4c:49:e4:24:f8:92:1f:eb:8e:5d:96:d9:82:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A1:77:E9:0D:BC:89:EE:51:29:39:0D:DE:79:8C:99:19:B2:B7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.22.0/24
                IPv6:
                  2620:13f:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:a1:9f:66:bb:ff:c6:ca:78:81:47:4e:e6:5d:c5:fa:3e:
         75:20:96:6d:26:51:05:dc:7a:03:b7:8f:86:4d:ca:d1:d5:cd:
         76:bb:6b:71:a9:1b:10:e8:5d:c8:86:9b:a9:e4:ff:ef:b8:29:
         77:39:21:dc:f2:fc:17:5e:1f:e5:cf:2f:b6:9c:ed:03:21:40:
         aa:57:d2:fe:70:fd:38:80:68:47:b2:99:f6:c7:26:4a:4f:9c:
         e7:b1:5d:dc:f5:03:4d:4e:ed:97:44:c9:9f:50:e9:88:b6:34:
         7d:b0:3d:a2:a4:26:04:b0:60:34:1c:21:fa:e7:69:5e:7b:28:
         61:da:6d:d0:80:14:7e:4e:73:3a:83:84:48:ff:c9:b0:ea:fb:
         e1:6c:78:da:d0:64:ca:2c:3c:60:a6:b3:a9:93:fb:e1:5c:4f:
         c7:5d:36:08:ea:4d:7a:42:f6:1e:6e:86:67:fa:e6:ee:43:cc:
         8c:00:a2:92:20:60:62:e3:87:76:95:09:ce:22:fa:a4:1b:b8:
         45:78:82:04:b9:1f:7d:41:37:1d:89:7a:5c:da:ca:fa:70:bf:
         c3:1b:03:c4:6b:3b:b4:ae:03:fb:d0:14:a4:25:a8:01:80:50:
         2a:20:8e:98:92:31:13:8f:fe:e9:93:19:85:44:ee:b9:1a:f5:
         d2:4d:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:34:29 2026 by rpki-client