Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
File:                     a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa (raw, json)
Hash identifier:          wegkbHOVzePsZDchGUjRPar9wGcIZcXC9/scywjcGLQ=
Subject key identifier:   C3:72:85:CB:A9:98:FE:D4:A8:92:0F:AD:02:B2:5F:3C:74:4F:FF:7E
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F4328584D9FB56C20DC3B8C6BB666D400
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     393529
IP address blocks:        160.129.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:6c:20:dc:3b:8c:6b:b6:66:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=c6e33063-8b7d-4079-a127-2e8aaf423317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:57:43:ca:ec:16:b7:87:77:13:bd:db:7d:
                    41:b2:bc:80:7c:78:60:ec:1f:26:b2:8b:fe:20:31:
                    1b:73:87:25:26:75:e2:59:9c:4b:d7:3a:59:41:2e:
                    7f:6c:48:cd:b6:74:ba:2c:8c:53:22:88:f4:66:b1:
                    1f:4a:0a:ba:93:7d:0b:f2:f9:d8:2f:fe:40:45:b7:
                    37:a5:13:8c:48:f6:b7:99:4d:52:7f:a1:ad:7c:53:
                    a5:b5:ab:75:bc:71:29:70:37:7c:27:59:9a:36:7d:
                    df:89:b5:a0:bc:1c:da:c2:51:ff:f5:50:fe:cc:9c:
                    12:c8:43:fd:54:e1:87:18:9f:79:13:a8:60:15:92:
                    88:98:7b:4e:d8:74:c7:a8:c7:ba:c6:c3:e3:a9:b9:
                    41:a0:08:54:13:b7:f9:eb:d7:f4:7f:ff:e6:2b:78:
                    4e:c8:b2:f0:7c:df:2c:38:55:60:0c:49:52:d1:33:
                    1c:7b:42:f8:49:69:04:dd:1f:73:7a:61:f3:13:a9:
                    33:50:5a:87:5f:03:d8:33:b8:7e:42:db:79:bb:64:
                    e7:bd:5b:d1:ba:40:a6:4d:1c:4e:e1:b1:a7:60:63:
                    7c:75:fb:21:fe:ad:0f:20:46:c5:8b:c8:37:52:f1:
                    5e:db:38:cd:53:25:78:30:27:f6:41:51:22:0c:62:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:72:85:CB:A9:98:FE:D4:A8:92:0F:AD:02:B2:5F:3C:74:4F:FF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:e2:67:cb:be:0f:8e:34:ec:26:34:64:6a:0e:35:ff:ae:
         dd:65:15:b3:01:18:34:5e:e9:2e:4a:f5:ce:49:27:d0:1d:d8:
         9e:fd:32:67:e9:d3:28:80:23:09:cb:c4:da:31:c6:5c:90:6a:
         29:67:40:2f:c7:9a:fb:5e:0a:ed:13:13:38:d2:7f:76:36:e6:
         d0:12:44:2d:1d:15:c9:76:93:a6:5c:34:a0:69:0b:0e:75:5a:
         a7:85:41:ef:6c:13:34:d7:5c:70:6b:ac:81:40:4a:a6:58:df:
         73:d8:e3:3a:09:59:aa:b1:90:d9:ce:3a:79:89:eb:7b:ea:c4:
         c9:16:a4:69:f6:27:9b:2d:d3:d9:28:1e:27:22:0e:8c:6c:c6:
         56:e9:e0:2f:a7:be:7d:ae:81:16:ca:e0:07:3b:16:22:f0:c5:
         2e:7c:95:49:48:71:21:b8:ed:62:a9:d4:bf:a4:64:2c:43:fd:
         74:c2:3c:9b:a9:f7:db:3f:6e:f1:83:67:b0:cd:a0:d0:2b:c5:
         48:76:48:5f:d7:7a:a0:9d:a8:cd:ad:85:3e:df:12:a9:5f:ee:
         99:3f:2d:b8:8d:f2:d2:23:9c:b3:5f:32:74:a1:09:77:cf:5b:
         99:30:e7:89:86:0d:fd:5a:ea:8a:46:b6:cb:e1:ad:c7:6c:9d:
         0a:30:e6:09
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2ftWwg3DuMa7Zm1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2Jh
MDFlMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
YzZlMzMwNjMtOGI3ZC00MDc5LWExMjctMmU4YWFmNDIzMzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvdXQ8rsFreHdxO9231BsryAfHhg7B8msov+
IDEbc4clJnXiWZxL1zpZQS5/bEjNtnS6LIxTIoj0ZrEfSgq6k30L8vnYL/5ARbc3
pROMSPa3mU1Sf6GtfFOltat1vHEpcDd8J1maNn3fibWgvBzawlH/9VD+zJwSyEP9
VOGHGJ95E6hgFZKImHtO2HTHqMe6xsPjqblBoAhUE7f569f0f//mK3hOyLLwfN8s
OFVgDElS0TMce0L4SWkE3R9zemHzE6kzUFqHXwPYM7h+Qtt5u2TnvVvRukCmTRxO
4bGnYGN8dfsh/q0PIEbFi8g3UvFe2zjNUyV4MCf2QVEiDGL0CwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMNyhcupmP7UqJIPrQKyXzx0T/9+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFm
Y2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvYTBhYzhjNWItNGJjNC0z
NDcwLTgyZWYtNjc5MmI0NGFiOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGQxZmNhNzgtOWQ5OC00NTU5LWJk
NTEtODBhNmM0N2JhMDFlLzBkMWZjYTc4LTlkOTgtNDU1OS1iZDUxLTgwYTZjNDdi
YTAxZS5jcmwwHwYDVR0jBBgwFoAUymGb6KykOgfQv2pfW6o/1CDpWtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2
YzQ3YmEwMWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoIEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQi/iZ8u+D4407CY0ZGoONf+u3WUVswEYNF7pLkr1zkkn0B3Ynv0yZ+nT
KIAjCcvE2jHGXJBqKWdAL8ea+14K7RMTONJ/djbm0BJELR0VyXaTplw0oGkLDnVa
p4VB72wTNNdccGusgUBKpljfc9jjOglZqrGQ2c46eYnre+rEyRakafYnmy3T2Sge
JyIOjGzGVungL6e+fa6BFsrgBzsWIvDFLnyVSUhxIbjtYqnUv6RkLEP9dMI8m6n3
2z9u8YNnsM2g0CvFSHZIX9d6oJ2oza2FPt8SqV/umT8tuI3y0iOcs18ydKEJd89b
mTDniYYN/Vrqika2y+Gtx2ydCjDmCQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:29:38 2026 by rpki-client