Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa
File:                     e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa (raw, json)
Hash identifier:          bv9SlWmLomaqfh3abCa52Rsx+/BstuZsVyQOkL2duZ8=
Subject key identifier:   CB:50:AC:75:80:04:02:54:9B:A4:B2:5D:AD:A2:FE:DF:9A:1C:8A:44
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584DBD059E6542B8F87551F7C400
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        161.221.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:9e:65:42:b8:f8:75:51:f7:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=26f8aaf5-638f-401d-9c9d-94410f2b4455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:2a:a4:fc:e8:8c:aa:57:dd:b6:66:11:98:
                    85:e5:04:4b:5d:7f:de:f7:bd:52:d7:18:ee:0c:e5:
                    04:77:19:c2:d4:60:96:6e:f9:f3:ab:11:de:59:cf:
                    ef:b5:26:86:bb:9c:a6:aa:9c:6c:cc:a2:5e:0c:f3:
                    ae:04:5e:dd:45:b7:07:7e:2c:ee:84:dd:31:27:11:
                    39:f9:10:d9:04:e5:83:41:b1:ab:41:15:74:ce:38:
                    dd:5e:4b:ff:0d:bb:bd:3b:72:6d:ed:e9:13:d7:d2:
                    36:37:43:f5:44:de:7d:80:6b:63:8a:47:5c:cc:09:
                    78:04:80:07:f7:70:0c:ec:5b:0f:57:1d:6d:99:87:
                    83:54:ad:b1:a9:98:c9:52:94:62:8a:a0:fc:e0:c3:
                    83:61:0b:36:6b:c1:91:35:aa:57:e4:23:f4:1b:57:
                    a4:27:d6:9b:d3:48:0f:a6:1c:84:9c:b9:1a:2f:0a:
                    a3:71:3f:c8:e4:26:26:76:b1:63:91:fb:1a:b5:a1:
                    ab:05:9a:42:46:ab:75:3c:d5:ba:79:e5:80:e8:f6:
                    77:68:fe:8b:7d:cb:9f:3b:0b:53:52:33:51:8b:50:
                    78:3e:1d:55:41:66:d7:94:7e:29:99:16:30:65:34:
                    e2:d5:52:25:ca:30:34:13:25:e9:16:c7:70:e1:77:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:AC:75:80:04:02:54:9B:A4:B2:5D:AD:A2:FE:DF:9A:1C:8A:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:62:17:2d:67:c3:d3:5b:6f:4e:3b:d1:22:4d:2b:a8:16:
         da:94:84:7d:20:5f:99:79:a1:ff:04:2f:93:a4:3b:ff:0c:0b:
         0e:b6:32:25:6e:69:b6:cb:ae:58:db:16:fc:be:ce:ae:65:2a:
         95:cb:9c:fe:99:8e:a8:cd:49:07:4e:af:76:62:58:27:2b:ba:
         76:42:db:ec:7f:cd:ed:7d:96:a3:0f:f3:c0:3a:c2:2d:59:6d:
         8f:db:b5:15:4c:3a:0f:67:0d:a8:91:f9:68:9a:41:61:38:b5:
         90:87:c8:ad:9f:3b:d3:6a:c9:18:a9:92:00:7c:38:a3:61:dd:
         80:13:f2:54:66:55:58:12:f7:7f:38:df:49:40:0e:6d:ca:7f:
         7b:a6:ed:b5:9f:ce:d5:3c:cf:85:50:59:38:b0:76:f4:2c:66:
         50:3e:fc:6c:3c:4e:f5:f9:ae:d4:21:19:76:03:cd:77:33:9b:
         27:a8:a2:6b:b2:34:eb:22:c5:e7:12:57:5e:70:b4:87:3c:52:
         30:3f:ea:5a:ad:6c:25:92:94:3c:5d:73:b8:a2:f6:77:8a:6a:
         0a:57:9a:fe:ba:90:57:61:0e:ac:cf:27:f7:80:3b:c4:cb:f6:
         c3:86:6e:cd:70:a2:ec:05:eb:3e:12:9f:4b:9f:15:7f:e7:b4:
         f5:82:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:15 2026 by rpki-client