Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
File:                     a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa (raw, json)
Hash identifier:          s3QYvCaV3kczCEon8DNIWqoTJBi4Sxa2AvUoP6nOX0E=
Subject key identifier:   E3:86:9F:81:F6:09:BB:47:73:E3:5B:12:A7:C8:82:60:14:25:DF:E5
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F4328584F225D021030EBBFF0127BE580
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     393529
IP address blocks:        160.129.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:02:10:30:eb:bf:f0:12:7b:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=b18252dd-8b51-4211-87c1-f61df2b35784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:16:d9:1e:36:b7:85:fd:6a:2b:81:07:a4:
                    b7:b7:84:d3:c8:c2:58:cf:6e:c4:a1:4f:b1:28:5d:
                    78:1f:79:8e:16:20:ec:c4:5d:0a:7f:cc:70:41:f4:
                    9a:c1:ed:5e:8f:48:d6:5b:99:d3:e8:eb:59:08:c9:
                    8d:8c:db:38:f7:7a:4d:a2:dd:cd:9e:1a:4a:82:a5:
                    d3:50:9d:33:b1:93:cd:10:7f:a9:e0:f1:35:11:0a:
                    ce:7e:3c:0d:24:9f:f8:51:bc:d8:eb:90:46:2e:3d:
                    48:b2:66:28:8d:a1:4e:94:df:30:a8:b4:ba:de:f9:
                    2c:3e:74:89:46:12:a8:e6:d7:00:2b:95:79:9f:a0:
                    95:3a:de:12:a5:d0:4c:61:73:bf:16:32:71:87:d5:
                    c7:bc:a9:06:9c:e2:99:e7:03:d0:23:f3:ac:40:08:
                    bb:92:87:cc:55:13:c1:42:c1:54:59:69:2e:4a:aa:
                    56:aa:8b:72:6d:32:a8:8c:be:8c:64:9d:82:01:e7:
                    4e:c9:f6:1c:57:ac:81:3d:61:23:55:b0:04:86:1f:
                    c7:48:42:30:ec:08:93:07:09:03:10:6b:f4:1f:5c:
                    34:7b:ed:7c:f3:81:ac:5d:a1:cd:15:77:fd:c1:30:
                    c7:2a:93:00:11:aa:d5:51:94:9b:96:23:93:76:ea:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:9F:81:F6:09:BB:47:73:E3:5B:12:A7:C8:82:60:14:25:DF:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:59:a8:ce:5d:f5:4a:80:db:b8:f4:4f:b2:08:88:48:fd:75:
         1a:fa:7b:f7:4b:11:41:af:9c:17:06:23:e7:85:7c:2d:32:68:
         6e:13:eb:b7:e6:e1:c3:39:4d:02:ed:a8:5b:01:70:e9:59:2a:
         a1:ce:69:a2:98:a1:23:05:92:50:c4:bd:06:1c:5c:a0:b7:4b:
         bb:b1:32:2a:6d:41:19:8d:bc:fc:00:15:a2:7d:2f:8b:e0:dc:
         99:d1:06:f3:4e:39:50:54:23:ba:96:78:d4:e1:7b:84:76:b2:
         4c:f6:e8:bb:4e:2b:5c:8f:6b:1f:e8:78:83:76:10:d0:46:ff:
         bb:3a:a8:04:b5:6a:f0:62:73:e2:0e:77:88:a6:46:de:00:51:
         d8:4c:4e:4b:3c:6e:bd:b3:b5:a6:74:1c:de:82:2e:f7:49:0c:
         36:2a:e0:1f:4e:06:c0:57:45:94:54:7b:01:4f:40:f1:60:ce:
         56:c8:32:7a:21:ad:02:15:27:99:80:83:bb:6e:be:6a:6a:7b:
         f2:79:a4:40:2a:00:5e:3d:b5:4a:d0:93:5c:96:08:9d:59:09:
         6f:c5:18:0d:0d:54:57:ad:18:cf:06:ba:40:c5:ae:2d:8c:34:
         c7:96:fa:f5:bc:6b:28:46:4f:f2:02:17:ad:76:27:4b:84:1d:
         93:df:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:17:28 2026 by rpki-client