Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/5bcda2ee-fe45-388b-a365-6b9ab7497ca0.roa
File:                     5bcda2ee-fe45-388b-a365-6b9ab7497ca0.roa (raw, json)
Hash identifier:          8elDK7u6UM4t5/vJq2L3IRU13bD4dX8FK+r2ZS20vaI=
Subject key identifier:   F7:11:E1:57:EE:64:4A:45:FB:BC:81:9B:3D:C5:60:D8:97:9B:41:1A
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584D9994B8BEA961F4A9C4E1CF20
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/5bcda2ee-fe45-388b-a365-6b9ab7497ca0.roa
Signing time:             Thu 23 Apr 2026 08:19:54 +0000
ROA not before:           Thu 23 Apr 2026 08:19:54 +0000
ROA not after:            Wed 22 Jul 2026 08:19:54 +0000
asID:                     31898
IP address blocks:        161.115.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:99:94:b8:be:a9:61:f4:a9:c4:e1:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Apr 23 08:19:54 2026 GMT
            Not After : Jul 22 08:19:54 2026 GMT
        Subject: CN=fb02e1a6-7433-4392-93d6-edb9fdcb5dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:f2:58:63:90:4a:3b:63:ee:dd:62:2f:c1:
                    00:4d:5e:8a:01:fd:90:69:47:b5:ee:b1:91:05:4f:
                    73:bc:6f:81:89:70:ff:93:a5:c4:ef:fe:ee:ec:53:
                    d4:26:05:92:8a:1e:11:c1:b4:d2:63:5a:06:2d:d1:
                    bc:2b:b2:46:9a:f8:db:7c:d2:2e:bd:b9:79:39:75:
                    e6:ea:08:a1:7e:5e:5a:c3:5f:3d:e4:04:62:21:38:
                    fb:bd:43:5b:b6:9a:64:0f:25:70:1b:7d:f6:69:c0:
                    9d:f0:e0:d6:0a:59:40:81:64:b5:f3:fb:d0:0c:49:
                    75:6c:d3:ad:d1:e9:a7:26:ce:f1:20:00:1d:1e:dc:
                    ff:c4:09:b8:e6:16:0d:fc:b6:e9:68:2d:4c:cd:69:
                    e3:46:4c:31:8a:da:95:b0:e9:8b:63:3f:e5:75:0e:
                    e7:d1:46:df:f0:84:5e:55:6f:6f:6b:29:44:6f:f2:
                    5b:b0:b8:ad:1e:78:93:c2:cc:e7:13:da:42:1a:6a:
                    ec:e5:60:c9:2e:ef:b7:03:90:3a:2a:50:70:1a:a8:
                    af:f3:69:3c:50:11:b5:73:56:65:52:6d:26:70:ba:
                    16:1d:a9:30:ba:26:30:15:13:4d:d2:9c:b6:ee:3f:
                    55:1d:01:01:4d:18:ee:53:a1:05:5f:62:17:d1:93:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:11:E1:57:EE:64:4A:45:FB:BC:81:9B:3D:C5:60:D8:97:9B:41:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/5bcda2ee-fe45-388b-a365-6b9ab7497ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:40:2a:2a:ac:0c:e4:db:50:8a:d4:c6:83:13:87:a9:17:f3:
         99:32:4d:f6:e8:0a:f6:0d:96:c7:3d:52:31:eb:79:5d:a9:7b:
         26:d6:97:c7:5d:cf:fe:71:fa:10:28:de:62:24:18:23:0b:0b:
         ba:14:2b:38:a6:12:e3:a0:c1:4b:69:d9:99:b3:26:40:5a:38:
         bb:f4:76:de:ac:00:3c:fa:ca:f8:05:a4:7e:33:88:f7:f2:25:
         2e:ee:b1:d5:97:77:dd:fe:a6:18:ea:a2:5f:55:56:7d:9c:1d:
         ce:2d:26:7c:d1:4b:96:f9:b8:fd:b0:80:96:af:2d:2d:2a:9b:
         d0:08:a1:2a:9e:d1:b8:ce:7c:cd:7f:fa:eb:a6:36:31:57:de:
         e2:70:d7:a3:62:16:c9:f5:5a:28:80:17:85:0e:c3:7d:7c:b5:
         ec:11:ed:5d:c5:a5:1b:d0:a1:a4:cc:d3:bb:f0:a3:02:fd:4a:
         76:61:2d:f4:9b:7b:1a:a4:38:b4:e5:c6:0c:21:76:d0:b3:c9:
         f9:c2:b7:b2:db:b8:f6:78:49:b6:56:92:8a:d6:47:99:b9:d4:
         2c:68:55:55:52:22:44:9e:63:a1:96:fd:37:c3:0e:6c:8b:bb:
         48:8e:ad:5c:03:9e:54:78:9c:7c:45:d1:45:96:32:71:81:98:
         77:38:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:25 2026 by rpki-client