Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e0fe8c80-89ab-3b6a-857f-f63bb32d5817.roa
File:                     e0fe8c80-89ab-3b6a-857f-f63bb32d5817.roa (raw, json)
Hash identifier:          svsTtLEU83qvYwTFztGrz6IkCe03fcJGpHOSZW0sR/M=
Subject key identifier:   9A:D0:8A:52:33:80:36:C7:DF:69:2F:6F:D4:B6:94:69:46:BE:E4:0C
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584D9A203069F48B472C6629D900
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e0fe8c80-89ab-3b6a-857f-f63bb32d5817.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     139358
IP address blocks:        161.129.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:30:69:f4:8b:47:2c:66:29:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=3068f579-dab2-43ae-a478-57d2776fc4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1e:00:33:59:3f:a4:0e:ad:e6:4d:11:57:67:
                    0a:c7:d6:90:1c:25:4c:bc:ef:84:f1:1c:f3:2b:a9:
                    ac:d4:d7:c8:07:d3:ba:8f:cb:75:87:88:20:5b:c2:
                    66:6a:ee:7e:d6:b8:d0:ed:30:97:03:78:05:a7:d8:
                    60:97:23:e4:df:ba:42:a2:e7:4f:50:d9:40:b7:3f:
                    9d:c3:41:b9:c3:55:22:3a:83:4c:21:1a:fe:17:f7:
                    47:49:84:91:0e:e6:db:1e:da:c4:59:bf:e5:f6:54:
                    e7:0d:7f:cf:c1:3a:e3:1f:12:d0:3b:7f:35:fd:c6:
                    d6:66:9a:1c:9d:b1:d6:e9:0c:fb:9d:4f:22:68:78:
                    22:8c:18:14:12:8f:89:92:6a:22:a0:4b:5b:80:5a:
                    83:f3:fb:df:98:a1:90:34:10:be:90:a6:24:e2:5a:
                    fc:bf:5b:c7:6c:eb:a1:14:c9:c3:73:7a:93:62:7f:
                    eb:51:4e:a6:e4:b1:a5:ae:4e:38:40:40:ca:5d:73:
                    76:bb:92:38:05:89:85:c2:be:58:51:79:28:4a:23:
                    7d:6a:27:45:63:38:b8:b4:db:35:9a:5f:9b:78:49:
                    78:26:2f:f7:c8:7e:c4:6f:c2:d4:fe:c9:b6:3e:70:
                    7a:00:55:20:60:d3:73:f6:ae:0f:4f:75:e8:06:08:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D0:8A:52:33:80:36:C7:DF:69:2F:6F:D4:B6:94:69:46:BE:E4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e0fe8c80-89ab-3b6a-857f-f63bb32d5817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d9:9c:52:a8:57:fe:31:95:37:47:64:eb:47:1c:a8:e9:9e:
         e8:b9:20:12:00:92:0b:98:f1:74:71:02:86:32:ac:2b:c8:9c:
         f4:29:d6:46:a4:4f:83:f3:c7:8a:f2:a1:de:31:42:61:e8:c8:
         f3:75:c3:b3:a3:a0:28:e8:47:5f:49:38:d4:6d:10:e7:fc:df:
         33:0f:a0:a2:3f:ce:27:a3:ad:ad:07:ba:ff:c4:7b:e4:46:3b:
         00:fc:ad:27:ad:72:ce:13:5b:91:e9:54:6a:b9:55:30:0f:a0:
         0a:c9:68:cd:b5:45:3a:c9:67:0d:b4:9d:e9:67:fa:d5:45:42:
         74:a0:81:06:7f:14:a7:4c:c1:39:0f:fc:6a:8c:fd:53:57:81:
         08:67:66:9a:49:51:68:c7:47:75:b9:75:17:30:32:3b:be:58:
         12:2e:ac:1a:f6:09:ed:81:1b:c8:c5:9f:7d:0a:91:e8:69:dc:
         26:5c:7a:b6:a5:23:96:59:2a:52:5c:98:0b:19:74:50:81:0a:
         7b:ca:05:61:fd:95:91:4d:86:b8:6e:49:4d:9d:79:0e:a3:c0:
         42:9e:47:21:e0:a9:24:db:49:64:6b:de:80:91:21:e9:13:28:
         f7:a6:b1:35:02:af:1f:66:9a:86:58:15:d7:ab:61:cb:f1:91:
         f8:30:c5:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDBp9ItHLGYp2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
MzA2OGY1NzktZGFiMi00M2FlLWE0NzgtNTdkMjc3NmZjNGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh4AM1k/pA6t5k0RV2cKx9aQHCVMvO+E8Rzz
K6ms1NfIB9O6j8t1h4ggW8Jmau5+1rjQ7TCXA3gFp9hglyPk37pCoudPUNlAtz+d
w0G5w1UiOoNMIRr+F/dHSYSRDubbHtrEWb/l9lTnDX/PwTrjHxLQO381/cbWZpoc
nbHW6Qz7nU8iaHgijBgUEo+JkmoioEtbgFqD8/vfmKGQNBC+kKYk4lr8v1vHbOuh
FMnDc3qTYn/rUU6m5LGlrk44QEDKXXN2u5I4BYmFwr5YUXkoSiN9aidFYzi4tNs1
ml+beEl4Ji/3yH7Eb8LU/sm2PnB6AFUgYNNz9q4PT3XoBgj5oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrQilIzgDbH32kvb9S2lGlGvuQMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZTBmZThjODAtODlhYi0z
YjZhLTg1N2YtZjYzYmIzMmQ1ODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErZnFKoV/4xlTdHZOtHHKjpnui5IBIAkguY8XRxAoYyrCvInPQp1kak
T4Pzx4ryod4xQmHoyPN1w7OjoCjoR19JONRtEOf83zMPoKI/ziejra0Huv/Ee+RG
OwD8rSetcs4TW5HpVGq5VTAPoArJaM21RTrJZw20neln+tVFQnSggQZ/FKdMwTkP
/GqM/VNXgQhnZppJUWjHR3W5dRcwMju+WBIurBr2Ce2BG8jFn30Kkehp3CZceral
I5ZZKlJcmAsZdFCBCnvKBWH9lZFNhrhuSU2deQ6jwEKeRyHgqSTbSWRr3oCRIekT
KPemsTUCrx9mmoZYFderYcvxkfgwxdw=
-----END CERTIFICATE-----
Generated at Wed May 13 12:53:36 2026 by rpki-client