Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5ef0a992-a485-3af1-beba-8f97c63f47f3.roa
File:                     5ef0a992-a485-3af1-beba-8f97c63f47f3.roa (raw, json)
Hash identifier:          TaTFxg9olNdDbt5yODxgN9vzwIlDMUPeBJajk/+g00w=
Subject key identifier:   F1:04:8D:7B:84:09:53:C8:02:6C:2B:12:54:03:67:37:E7:95:C8:A9
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D20AF4F8050207DF3B1976D00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5ef0a992-a485-3af1-beba-8f97c63f47f3.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     10794
IP address blocks:        171.161.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:4f:80:50:20:7d:f3:b1:97:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=99006028-763a-4db0-b6e4-c32b8bbb08a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f4:41:3f:3c:8f:35:35:56:ec:10:56:9c:6c:
                    c2:02:16:12:a0:f4:03:d4:eb:7e:4b:1b:f7:60:7f:
                    b1:75:4b:e0:94:7b:e3:52:05:27:bb:d5:f1:b3:d2:
                    d4:4e:f7:ea:49:b3:19:00:a4:cc:a5:46:a8:99:9f:
                    e9:5e:a8:2b:25:c2:73:e0:47:d6:f7:41:ca:33:e5:
                    24:0c:58:0c:3b:b2:87:c8:ad:b9:3f:40:4d:1b:d3:
                    9d:6c:22:5c:db:ba:c8:cf:75:46:36:c6:72:74:2a:
                    1a:4b:b4:3f:0a:47:4e:34:08:a0:fd:80:88:00:fd:
                    22:42:8d:cd:1b:82:0c:aa:1d:12:08:da:d3:d2:29:
                    3f:39:37:ac:12:38:89:a9:8f:f6:d0:fc:3a:60:cf:
                    e0:18:c1:57:25:cd:7b:99:da:42:03:fd:38:10:97:
                    b9:36:29:76:40:2d:89:2b:a8:9d:54:2e:a4:cc:4f:
                    db:3e:08:57:c9:92:5e:44:f4:99:d2:ac:53:17:72:
                    9e:5c:85:28:c0:90:ab:69:d1:61:00:e4:79:ec:a8:
                    8e:6e:81:19:fe:30:95:69:37:62:95:f5:fc:71:fd:
                    b8:27:73:96:91:0c:5b:26:f6:08:69:3c:ed:5d:05:
                    fb:cc:d8:54:bf:ed:8f:59:0f:af:eb:1b:cb:ec:df:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:04:8D:7B:84:09:53:C8:02:6C:2B:12:54:03:67:37:E7:95:C8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5ef0a992-a485-3af1-beba-8f97c63f47f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:67:2e:07:22:56:f5:c5:28:8d:7a:70:6b:d3:20:98:56:f4:
         7d:c1:71:aa:10:d1:14:b6:53:fc:3c:a4:f1:98:d0:f1:55:6e:
         c2:6a:d1:83:66:44:73:7e:45:f9:e4:a3:13:09:9d:fa:d1:dd:
         a8:6e:88:57:8e:29:af:ad:9f:7f:2c:2e:88:ef:ff:ab:69:1d:
         05:de:b3:ef:5a:38:47:d6:16:39:7a:d4:c8:7e:29:03:1d:85:
         c7:26:c3:73:4f:41:a4:06:d2:22:b1:bf:87:c5:55:d4:8d:2c:
         6a:d6:36:46:0e:ee:67:17:b0:17:1d:1b:7a:26:5b:43:22:1f:
         c1:c1:88:7f:d4:c4:79:df:6d:ee:53:22:4f:ca:aa:ed:65:1c:
         df:c8:70:c8:3c:2f:d5:4d:6c:41:a0:c9:21:b0:2f:7d:63:5b:
         8f:56:50:50:fd:d4:ab:5e:da:01:dc:ef:46:9c:0d:89:d1:df:
         63:ea:41:3f:dd:c3:ad:17:6a:90:c9:88:84:e4:43:d0:69:ef:
         46:bc:92:90:81:29:e6:f7:b1:8c:14:44:03:04:5b:39:bf:12:
         e5:56:06:91:ce:88:49:4c:ea:66:fa:77:a7:bf:ce:84:36:e7:
         d6:89:77:39:df:04:26:fd:92:48:a3:16:44:0d:f8:89:d5:83:
         c1:83:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:53 2026 by rpki-client