Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/c16fa5a0-822a-3d10-8287-ed9ee557819c.roa
File:                     c16fa5a0-822a-3d10-8287-ed9ee557819c.roa (raw, json)
Hash identifier:          w1FMJ90BYT8vUsaF5j4pZSV5JvCaw6aZM5nvNmdxQP8=
Subject key identifier:   36:69:C6:90:4C:31:3B:6E:11:84:F6:4E:B8:87:32:84:D5:D4:45:CA
Certificate issuer:       /CN=5028ee72-1629-4552-a11f-947b5a925519
Certificate serial:       010D0C9F4328584F498B874471CDA14CCA651660
Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/c16fa5a0-822a-3d10-8287-ed9ee557819c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399244
IP address blocks:        161.129.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:87:44:71:cd:a1:4c:ca:65:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2ad4bbec-bc8a-4af8-a74d-2401c4491d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:07:3a:5f:98:a8:f0:ce:4f:a3:da:4b:f6:
                    5b:ba:a4:af:05:ca:1e:8e:db:10:09:6c:07:ed:7e:
                    1a:ce:c2:31:5c:2e:e5:1c:f5:f3:82:ed:61:3c:da:
                    15:4f:c4:e2:51:84:84:af:94:cf:6c:6c:d7:ec:02:
                    ca:ad:07:72:48:19:51:53:6d:1c:a0:72:1c:7d:a3:
                    20:4b:7d:0f:51:6b:f9:a5:42:19:70:4c:e9:e0:63:
                    43:f9:0d:ce:15:64:3d:83:1d:fe:1a:f1:38:7f:48:
                    20:54:bd:84:3c:2c:fc:a4:a2:31:2b:91:a3:74:6c:
                    4c:ef:a6:4c:cf:85:2b:31:91:25:c3:68:ab:4a:80:
                    0b:cd:ad:a2:a9:a1:b5:a7:2f:45:d5:5c:bf:e4:39:
                    15:83:72:df:90:f8:10:ab:43:0e:c6:cf:48:40:2b:
                    a1:e6:9c:da:cb:61:3f:1c:ac:c9:b7:cf:e4:4d:2a:
                    32:61:d7:55:90:06:7c:34:71:d8:d3:d5:af:40:2f:
                    cd:f1:80:ff:58:ba:d9:f1:60:c6:f3:88:dc:a9:08:
                    d8:27:ed:45:55:08:7c:be:b2:3b:d5:2f:d7:e6:23:
                    a8:1a:3e:6a:c5:a0:b3:f9:33:57:ee:9a:1f:61:8e:
                    06:5f:ad:1b:e7:0d:c8:37:b7:07:be:dd:ba:44:f1:
                    94:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:69:C6:90:4C:31:3B:6E:11:84:F6:4E:B8:87:32:84:D5:D4:45:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/c16fa5a0-822a-3d10-8287-ed9ee557819c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl

            X509v3 Authority Key Identifier:
                keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9b:c1:6b:07:e5:81:b0:03:67:f9:0c:5c:50:21:65:8b:75:
         c9:e0:d3:ed:37:4c:65:68:2e:6f:33:27:1b:4d:0e:34:eb:9d:
         aa:0a:35:f2:fa:de:49:82:88:a6:7b:47:50:d8:0d:05:09:da:
         04:d6:b3:10:50:26:41:7b:30:8f:a8:c1:dd:7b:a4:37:fd:98:
         64:44:88:47:0c:98:09:dd:a3:37:e3:9f:54:41:71:e3:da:47:
         20:63:26:1a:2d:68:63:63:4a:6d:bb:c3:17:e2:85:b4:f1:f2:
         4c:c6:b1:ec:2a:f4:b5:69:f0:a4:ee:b7:ee:62:fe:0b:78:68:
         7b:24:97:c7:a5:3e:67:46:80:6f:de:ba:d0:7f:b9:41:d8:ae:
         d1:dd:68:3a:5f:ed:77:6e:fc:df:51:0e:e4:8f:3f:ee:62:d2:
         6d:02:5d:d8:b4:15:09:3e:46:fa:74:19:bb:5c:df:b0:44:0c:
         cb:72:c7:97:a6:f9:46:66:82:f2:4d:f8:b0:1f:69:f0:71:fc:
         16:f2:fb:69:91:36:7c:5d:28:ce:02:ec:d1:d3:96:54:f0:a9:
         51:59:25:a3:e6:9c:0a:f3:10:2c:6e:8b:75:33:d6:bc:fe:f7:
         97:1d:21:ff:9a:d0:7a:db:8e:92:a6:bb:36:29:c3:13:c6:e1:
         ad:1f:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:54:50 2026 by rpki-client