Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa
File:                     bab99bc5-d663-3ba0-b545-5274edb63cfa.roa (raw, json)
Hash identifier:          oEhlwfA+AGy/OdMT7Dw1Cu11FdliDo5+/74VPTwmpyA=
Subject key identifier:   8D:EA:37:F1:9D:2F:41:AA:89:E8:C4:10:65:BD:0B:9C:EE:28:60:36
Certificate issuer:       /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial:       010D0C9F4328584DD1F5B3555ED989DE0762E100
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     394089
IP address blocks:        161.223.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:b3:55:5e:d9:89:de:07:62:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=2409f632-0fa9-4b75-b6e0-1d943b92b63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:65:26:52:89:cd:c7:46:c7:a1:7b:ec:4d:
                    c6:99:31:15:23:be:00:ed:a4:e6:67:71:af:17:38:
                    54:40:e7:6e:dd:85:4c:11:74:1e:e8:2d:13:85:e4:
                    3e:84:bd:35:df:d9:18:29:36:3c:d1:83:f8:12:14:
                    da:1f:77:eb:2a:f2:16:16:80:cb:f9:6a:1c:6c:76:
                    51:99:94:e4:da:fc:3d:68:3d:22:89:b1:e7:e0:0e:
                    eb:8b:fc:b4:78:16:78:01:4b:07:12:4b:28:e4:c6:
                    63:dd:b8:6a:cb:90:04:6f:45:2e:ff:93:04:44:8f:
                    34:68:5e:81:62:3a:b9:29:02:cb:1d:47:7b:9b:64:
                    7b:f5:10:93:04:8d:4e:49:84:b5:a3:03:2b:b2:2f:
                    f8:76:ac:55:24:21:ce:38:b2:53:ff:71:fd:1a:48:
                    25:52:81:c8:02:1f:29:e3:f4:b1:4f:96:d0:f6:33:
                    b2:d7:40:62:1f:36:2b:be:28:55:a0:97:df:0f:12:
                    aa:94:40:80:a0:df:a0:d8:33:74:a1:03:36:f5:f3:
                    82:22:aa:34:b8:1e:a2:6f:b5:1d:66:a6:3f:a6:91:
                    0c:53:65:cc:53:40:05:28:18:38:c8:54:50:3e:8b:
                    87:e8:55:88:34:5a:80:3e:38:02:cc:79:6d:57:5f:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EA:37:F1:9D:2F:41:AA:89:E8:C4:10:65:BD:0B:9C:EE:28:60:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.223.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:e2:87:d6:5d:57:33:8c:8d:57:26:34:a7:52:b9:a7:a6:
         49:66:c1:78:73:cd:5b:2e:9b:73:3d:25:9c:f3:5b:81:46:87:
         44:79:03:b3:75:7e:8a:1d:32:c2:4a:67:7e:f1:0f:d0:e8:e0:
         f8:ff:61:00:a5:86:cf:73:fc:8b:76:d6:0d:38:8f:99:d6:9b:
         45:db:33:55:45:6e:be:31:9e:39:48:ac:67:5a:3b:51:0e:64:
         6e:d6:0f:b8:77:0a:72:31:2b:c3:03:ce:da:9a:2e:d4:a7:a6:
         1e:fc:ac:9c:09:89:78:1b:d3:ef:4c:a6:0f:90:0f:49:06:34:
         27:41:a1:f5:7c:a7:d6:bb:7a:a1:6d:2e:53:34:2d:b8:2b:dc:
         03:d6:50:92:60:10:f4:6d:20:aa:87:10:29:66:ac:a2:e0:7b:
         c6:fe:a0:ea:e4:6b:e8:98:a2:9d:d3:6f:77:12:5d:4a:c9:3c:
         61:86:82:2c:64:cf:33:da:06:e7:83:bf:f1:ef:ce:d3:3c:3f:
         52:ad:eb:de:47:b1:ec:1e:52:6b:44:0f:95:64:c8:f4:61:94:
         33:db:e1:26:b2:2a:3f:38:cf:ba:81:e9:ad:4a:03:b8:e6:cf:
         70:72:14:f0:3b:d1:f2:59:88:1b:14:fa:33:a7:0f:b9:23:f9:
         3a:5d:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:51:07 2026 by rpki-client