Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
File:                     c57102d8-3cbd-3865-8113-05facb712676.roa (raw, json)
Hash identifier:          mDU6rg6D+MeU8j0PnLzk4/LJYS1zLdjsnkn8E5YRRFY=
Subject key identifier:   C0:14:DE:17:AF:6A:0D:E5:DC:08:61:C2:19:A5:CB:0D:D2:85:D3:1D
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584DC565989CEC24518089878A80
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     7922
IP address blocks:        161.129.33.0/24 maxlen: 24
                          161.129.36.0/24 maxlen: 24
                          161.129.37.0/24 maxlen: 24
                          161.129.38.0/24 maxlen: 24
                          161.129.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:98:9c:ec:24:51:80:89:87:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=bd0e5e9c-3a06-483a-a2b1-b91f2279677e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:9d:20:4e:06:23:ca:89:01:84:fe:c0:e5:
                    bc:07:cc:d7:8a:a7:5d:6b:2f:78:91:1d:88:fd:6c:
                    90:9d:d3:ea:37:74:5c:c7:25:c7:a9:64:bf:6c:40:
                    f3:4b:e1:21:a5:57:d7:e1:7a:3e:2d:f5:54:ad:81:
                    f6:86:3e:d8:a9:e3:3d:31:9a:b8:e6:2a:7e:f6:11:
                    28:b5:21:9f:6c:3c:51:62:04:63:ae:e9:27:64:61:
                    36:37:69:3f:93:cc:96:43:ee:ee:e0:be:c5:92:ec:
                    8b:3b:f0:9c:ad:25:fb:61:2b:42:28:8b:ef:3e:76:
                    77:06:8d:28:55:38:a2:48:91:2b:f5:45:42:7d:51:
                    55:5e:ff:f7:0c:a0:c9:75:2c:45:a5:8b:02:79:2c:
                    8f:e3:3c:d6:57:ff:27:06:78:ac:30:de:95:85:d1:
                    9d:bb:a2:03:6b:87:46:ca:a3:2e:d4:f7:66:e1:d5:
                    a2:55:55:83:7b:27:95:f8:58:fd:40:1d:5d:4f:7d:
                    09:3b:1b:74:d1:16:e6:04:1c:33:3f:31:2a:59:6b:
                    89:03:48:da:cd:05:d8:cc:36:11:a7:33:d7:a3:ea:
                    a5:3e:e7:bf:2c:f5:5c:22:b7:24:99:70:85:fa:ab:
                    5a:37:df:6b:77:d3:e3:14:9e:83:98:13:cd:cc:5a:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:DE:17:AF:6A:0D:E5:DC:08:61:C2:19:A5:CB:0D:D2:85:D3:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.33.0/24
                  161.129.36.0-161.129.38.255
                  161.129.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:29:af:e4:75:75:bc:a9:d5:f3:27:e9:83:01:e2:07:5d:02:
         08:77:49:fd:6d:89:57:9d:80:76:e9:dc:94:8e:f0:f9:50:d0:
         a1:50:ea:2a:dc:d3:f9:c5:d7:3c:63:04:3a:ad:40:f5:d5:32:
         a8:a4:cb:94:ea:99:0c:ea:6d:8b:9a:71:82:68:e5:df:0d:dc:
         c6:b0:a9:fe:d2:e9:64:ad:7c:fe:02:e6:eb:d5:3b:c6:c4:e8:
         1f:e7:27:77:45:54:93:01:ae:b8:fd:c6:7f:89:4e:a4:9f:d7:
         46:34:80:43:fe:12:f4:d1:f0:ef:0f:ea:38:a4:ce:f2:17:ca:
         5d:6b:28:11:cc:ea:92:c9:24:de:ec:c0:f9:d2:29:3d:c4:b4:
         da:e7:b4:1f:a9:07:ee:18:f0:33:46:17:8e:86:05:6c:93:0d:
         de:48:9a:3f:8d:f3:af:0f:2d:09:44:8a:58:3b:f2:49:1b:a8:
         1f:9a:b7:ae:ea:ce:3f:38:1d:14:ce:89:d3:51:68:bb:38:2e:
         ef:43:2f:d7:2e:40:02:1f:6b:d2:f8:32:b8:f2:a9:38:ff:78:
         3f:05:34:71:79:ae:e2:9e:e8:b7:e9:0c:01:40:f2:55:cf:0b:
         3e:1c:d9:e6:cd:82:f5:42:ad:d5:3f:f7:7c:3f:5d:75:7a:11:
         b7:b9:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:30:36 2026 by rpki-client