Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/cdcbcfb8-b7ac-3360-8cbc-5dfdae8c88bb.roa
File:                     cdcbcfb8-b7ac-3360-8cbc-5dfdae8c88bb.roa (raw, json)
Hash identifier:          fIyhnFbRzAYQosdXMN22ssuT7SBvvRzTKpRAQQ/zUtc=
Subject key identifier:   7D:4E:FD:94:17:25:37:93:BD:A0:7E:BD:9A:42:75:2D:5C:38:D3:FC
Certificate issuer:       /CN=5028ee72-1629-4552-a11f-947b5a925519
Certificate serial:       010D0C9F4328584D237A63BE31A31E86F88BBC00
Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/cdcbcfb8-b7ac-3360-8cbc-5dfdae8c88bb.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     399244
IP address blocks:        161.129.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:63:be:31:a3:1e:86:f8:8b:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=93e43f4b-fb98-4739-84d0-a6755d5fab75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:d1:c9:ff:06:c7:2d:28:54:f8:41:51:ea:
                    d6:9a:17:7a:8d:42:91:a1:84:84:d7:c6:b7:d8:74:
                    c3:69:8d:ca:31:a4:68:1c:ba:8e:06:ea:02:9e:1b:
                    89:ab:e3:bb:e4:fd:6a:ca:02:58:b1:5e:22:76:57:
                    4c:1f:3d:44:aa:f6:76:47:03:ee:7a:e2:71:fe:54:
                    e7:64:0f:7c:24:78:6e:78:ba:b8:01:4e:f0:f4:fd:
                    ad:7f:a4:89:2d:df:6f:22:6d:8d:78:71:ee:02:14:
                    b8:f9:2e:cf:e8:35:7a:33:11:0c:2a:f4:ba:19:a7:
                    e6:92:e1:b8:7e:63:5d:e4:c6:a8:26:48:85:be:79:
                    7b:a3:6e:6e:67:bc:bc:52:8b:31:ad:2f:c5:c2:21:
                    8a:f9:40:ce:98:4b:eb:10:2b:a5:2c:f3:7b:32:38:
                    09:4f:1a:a6:e5:b0:a9:8a:05:26:ba:4f:5a:a6:50:
                    92:f8:99:13:54:af:45:cf:9c:c1:2c:70:cd:ed:1a:
                    6e:87:5e:02:e4:5f:10:01:42:2d:b4:55:6b:03:6d:
                    33:79:97:f3:ed:73:28:a3:75:a7:ae:26:4b:7f:fe:
                    f3:40:fa:a8:41:8a:0a:2d:4c:94:04:40:91:55:11:
                    7b:80:0e:2a:3c:63:16:ce:5e:58:89:87:9d:e0:0c:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4E:FD:94:17:25:37:93:BD:A0:7E:BD:9A:42:75:2D:5C:38:D3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/cdcbcfb8-b7ac-3360-8cbc-5dfdae8c88bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl

            X509v3 Authority Key Identifier:
                keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:bb:41:03:43:bd:5c:bc:11:b1:1f:5f:24:3c:6a:7b:a0:e9:
         ad:7b:c4:f9:9b:1a:da:d7:05:2c:82:4c:60:94:df:d0:ed:fd:
         ef:95:6b:d3:9d:61:87:b3:21:c1:7d:0e:f3:48:19:71:d3:0d:
         cf:ad:28:a4:b0:b8:16:4b:65:08:05:90:32:49:36:b9:67:97:
         2b:ce:c7:a6:b4:4e:17:da:3e:c7:22:9f:61:3a:4d:1e:35:82:
         de:62:69:9e:2e:f2:5b:15:44:6f:e5:6b:e1:9d:58:ca:cb:20:
         87:b2:8e:a3:5d:3d:56:cf:44:4a:26:fd:96:29:2d:55:67:61:
         fa:9b:85:b7:ec:06:82:10:19:a6:b8:dd:0e:1a:89:dd:c5:ef:
         d9:ed:ce:29:a3:48:12:49:84:24:c6:63:78:29:9f:46:dc:7f:
         6f:6f:9e:1a:02:23:6c:03:35:74:70:35:4b:a4:8f:f8:cf:5a:
         e0:0c:2e:a2:2b:44:ba:0e:f4:2e:e4:b2:43:bc:99:0d:10:04:
         06:f9:28:e6:98:7c:3f:67:0a:1e:49:21:43:17:8b:92:0e:d1:
         2f:30:d3:64:14:27:44:d9:14:84:9b:ec:43:3e:f7:1a:43:45:
         7c:36:33:1e:69:9b:68:1e:9f:2e:14:da:9a:92:32:5c:f3:c5:
         6a:ef:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:41:51 2026 by rpki-client