Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa
File:                     eaff245a-576b-320b-a418-9d77a00b9661.roa (raw, json)
Hash identifier:          /KlqaCJV7Sj21HDNsgEllA2JcOxlKN9AcCf/z6Ls31M=
Subject key identifier:   A3:D9:5A:43:5F:E7:A9:86:4D:1E:F6:E1:04:45:96:24:33:F3:02:15
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584F480D3637B07F50CB8D0E2720
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     931
IP address blocks:        161.129.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:36:37:b0:7f:50:cb:8d:0e:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=7ea1df5d-af33-444d-b37c-2405d0c235ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:30:16:ed:3b:f1:9a:4f:48:42:f4:52:77:
                    c3:ba:0d:d6:a3:0a:69:74:67:d3:60:98:31:76:a0:
                    76:3d:cc:26:18:84:55:83:e9:25:a8:61:b6:af:78:
                    2b:9a:f9:5d:a5:43:e8:83:e7:c0:fe:2d:4d:19:8f:
                    1e:97:c4:86:19:7d:d6:8f:3e:ba:cb:a1:6d:4d:af:
                    68:d8:da:97:77:5c:4f:8c:b5:55:29:00:81:c4:48:
                    8a:25:ea:26:0d:77:a5:9a:dc:db:69:c2:89:09:58:
                    4b:4b:b8:0a:a5:82:03:50:4e:e1:34:2c:c5:35:de:
                    41:a3:63:74:dc:95:20:6b:f0:d0:76:cc:e1:e6:b3:
                    14:94:6e:37:e9:83:41:64:cc:86:4b:b9:21:81:a9:
                    7a:c1:3d:99:d0:bb:62:90:9e:e7:cb:47:18:7e:eb:
                    03:d2:72:9c:9e:07:40:0f:7c:42:fc:92:5d:1f:2a:
                    0c:5b:93:7b:14:c1:96:6c:28:aa:d5:33:56:72:13:
                    cd:6d:2e:da:f3:35:a4:1b:e3:01:1f:35:b9:94:bc:
                    97:8c:f9:67:dc:a7:13:60:5a:c4:05:78:86:44:7f:
                    90:c9:4c:09:d2:dc:50:24:29:05:a8:0b:b1:f3:90:
                    cb:b6:22:b7:13:4e:b6:20:55:3a:14:e7:67:83:42:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:5A:43:5F:E7:A9:86:4D:1E:F6:E1:04:45:96:24:33:F3:02:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:94:d9:3e:13:cc:9f:97:26:45:47:af:b5:90:28:df:ad:24:
         de:e4:29:1c:b4:35:43:2b:2d:fc:77:af:d3:dd:b1:17:88:24:
         a4:3e:4a:bf:45:d0:7f:8f:69:30:bb:17:b9:86:de:65:b8:6a:
         e4:ae:ab:c6:03:82:4f:f2:cf:1a:3b:cf:d4:93:e0:94:4f:ca:
         3d:57:60:4b:c2:ec:40:9b:c2:f8:ba:cf:d9:39:cc:51:e2:01:
         c3:96:f3:20:43:84:04:2c:85:f4:84:09:4b:6e:d4:b7:f3:84:
         f0:4f:b5:12:f2:b3:af:00:1a:b0:c0:8f:e3:f4:99:f4:62:b6:
         c9:17:6b:6f:29:4b:ea:9b:44:84:78:4a:02:bd:b3:22:75:e8:
         3c:68:85:1b:4b:23:8d:9e:f9:9e:ba:8c:c3:8d:f3:1d:2f:ec:
         7e:d6:f1:91:e3:77:17:b6:8b:5c:13:7c:bd:6b:33:39:8d:2a:
         b6:1d:95:94:f6:c3:56:ed:c2:3f:a2:06:99:e2:fe:eb:6e:92:
         21:18:ea:e9:91:e8:33:37:f7:f3:a5:78:77:9b:27:8e:34:d7:
         26:48:2f:bc:e4:c0:de:6a:71:20:4e:65:38:e1:eb:25:53:e6:
         38:37:94:83:a4:3b:43:59:22:f6:12:5d:cc:a7:e4:34:8e:eb:
         48:d7:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:23:55 2026 by rpki-client