Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
File:                     e1e365e0-1156-39fe-8e92-6f88f7279acd.roa (raw, json)
Hash identifier:          yO3J37y6XHlfZj7DJax7KhlGtuOwSmyYe17yBBj9Ijk=
Subject key identifier:   33:1B:B7:A8:53:30:9F:0A:C5:52:20:7B:7F:94:AF:E1:79:15:56:9C
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584EEA8751BEADDDB7602E69D300
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     394625
IP address blocks:        161.129.136.0/24 maxlen: 24
                          161.129.137.0/24 maxlen: 24
                          161.129.138.0/24 maxlen: 24
                          161.129.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:51:be:ad:dd:b7:60:2e:69:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=71c02fb3-01e4-40d4-aac1-31d64de8b2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:88:ed:eb:2a:87:6d:01:97:2e:8b:71:b0:
                    a8:27:0c:fe:76:8a:68:79:09:5d:2f:61:57:4c:33:
                    eb:fb:53:8f:57:56:7e:54:43:7c:62:60:60:8b:45:
                    26:c7:b2:39:a7:62:59:fe:97:21:aa:97:ee:0b:95:
                    ae:22:c9:f1:e2:56:8d:73:bd:63:ae:d9:3d:33:a0:
                    9d:26:8d:94:5f:d2:17:e4:a8:d6:79:82:87:ed:3e:
                    7c:71:9c:82:56:63:d0:9b:53:51:45:c3:38:f4:70:
                    61:37:c1:db:1e:bf:e9:e0:48:7b:1e:88:b9:f1:48:
                    ff:7f:69:bd:39:94:be:9f:8d:7f:d8:4e:b1:27:aa:
                    53:d5:81:76:ac:79:44:38:81:e2:1d:0d:c0:68:e3:
                    bb:dd:cf:65:2e:ad:4a:60:8d:f5:56:4f:a9:47:7f:
                    5a:a6:3d:88:ad:42:39:65:d7:cc:ad:40:f4:af:53:
                    10:b3:ab:50:82:f0:c7:15:e9:f1:ee:ec:12:fa:f0:
                    3f:c5:b4:34:f5:73:0f:0f:3d:fa:16:67:28:40:fe:
                    1b:60:46:bd:a2:ca:e7:79:ce:30:5d:05:95:69:b3:
                    e7:f4:a6:76:42:6d:4b:7a:3c:9b:77:8c:5c:b9:e6:
                    3e:b1:8d:0e:ae:90:bc:9e:a3:10:b8:42:25:a3:bf:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1B:B7:A8:53:30:9F:0A:C5:52:20:7B:7F:94:AF:E1:79:15:56:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:75:5d:25:4d:5e:c8:0e:ce:26:40:a0:2e:63:bf:32:9a:d0:
         bb:67:33:e9:fa:93:67:c8:71:c6:55:a5:f6:6a:cb:9a:57:78:
         e1:66:77:db:d9:1d:88:65:1e:ea:01:19:ca:9b:18:5d:51:70:
         1a:50:f1:13:3e:33:31:0e:97:3a:63:9c:6b:8d:a9:76:9d:52:
         9b:3d:0a:97:48:8a:18:a8:3a:6f:0a:c1:01:89:4d:d6:3a:21:
         d2:d4:90:2e:40:a3:a7:3b:dd:2b:13:c6:ac:03:2f:9c:53:45:
         af:c1:b1:31:fb:cf:64:aa:39:fc:0b:ef:10:9f:3e:7d:5f:c3:
         5d:18:81:83:a9:eb:d1:9f:94:e3:8a:ea:66:d9:6d:44:4b:94:
         16:fe:2a:12:ca:b1:16:bd:cd:a5:a9:a7:e0:4b:94:c7:a9:94:
         65:5e:01:da:66:f3:bf:db:37:26:56:ea:57:32:79:b4:04:40:
         bd:2f:7b:c7:97:60:06:ac:9e:0d:49:a2:ba:c6:dc:70:3a:dc:
         3c:b5:af:10:75:67:9e:aa:ee:11:e3:c3:be:84:cf:b3:1e:9d:
         07:2a:d6:5c:dc:34:60:d8:81:dd:d8:7c:95:a4:c0:b0:a3:78:
         ee:8b:53:75:57:c9:90:c9:02:b0:a5:22:af:8a:a2:83:fe:54:
         5a:fd:3e:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1G+rd23YC5p0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4
NmQ3MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
NzFjMDJmYjMtMDFlNC00MGQ0LWFhYzEtMzFkNjRkZThiMmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloqI7esqh20Bly6LcbCoJwz+dopoeQldL2FX
TDPr+1OPV1Z+VEN8YmBgi0Umx7I5p2JZ/pchqpfuC5WuIsnx4laNc71jrtk9M6Cd
Jo2UX9IX5KjWeYKH7T58cZyCVmPQm1NRRcM49HBhN8HbHr/p4Eh7Hoi58Uj/f2m9
OZS+n41/2E6xJ6pT1YF2rHlEOIHiHQ3AaOO73c9lLq1KYI31Vk+pR39apj2IrUI5
ZdfMrUD0r1MQs6tQgvDHFenx7uwS+vA/xbQ09XMPDz36FmcoQP4bYEa9osrnec4w
XQWVabPn9KZ2Qm1Lejybd4xcueY+sY0OrpC8nqMQuEIlo7/C7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMbt6hTMJ8KxVIge3+Ur+F5FVacMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj
NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZTFlMzY1ZTAtMTE1Ni0z
OWZlLThlOTItNmY4OGY3Mjc5YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx
MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl
ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy
ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoYGIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACV1XSVNXsgOziZAoC5jvzKa0LtnM+n6k2fIccZVpfZqy5pXeOFmd9vZ
HYhlHuoBGcqbGF1RcBpQ8RM+MzEOlzpjnGuNqXadUps9CpdIihioOm8KwQGJTdY6
IdLUkC5Ao6c73SsTxqwDL5xTRa/BsTH7z2SqOfwL7xCfPn1fw10YgYOp69GflOOK
6mbZbURLlBb+KhLKsRa9zaWpp+BLlMeplGVeAdpm87/bNyZW6lcyebQEQL0ve8eX
YAasng1JorrG3HA63Dy1rxB1Z56q7hHjw76Ez7MenQcq1lzcNGDYgd3YfJWkwLCj
eO6LU3VXyZDJArClIq+KooP+VFr9Pmo=
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:45:04 2026 by rpki-client