Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa
File:                     4ccd42f4-0724-3487-8445-a44356895c00.roa (raw, json)
Hash identifier:          j0k/DTJj4zermX4+7GTDv3yVEn5BLsEZc1IQAl0L7rQ=
Subject key identifier:   79:6D:A0:90:07:91:EB:9A:26:F0:5C:B6:E5:5B:BE:05:70:2B:60:93
Certificate issuer:       /CN=5781a71d-d5ec-4601-8f43-5902a97ba6ef
Certificate serial:       010D0C9F4328584F4973F030FCF5724C9AED3D40
Authority key identifier: 1E:3B:B3:A4:84:98:0E:80:05:FC:5E:3D:42:65:B9:71:1C:79:6A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14936
IP address blocks:        161.129.62.0/24 maxlen: 24
                          2620:30:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f0:30:fc:f5:72:4c:9a:ed:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5781a71d-d5ec-4601-8f43-5902a97ba6ef
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=be38d580-da54-44f1-b690-cf6d800b104b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:b8:9d:28:ba:86:87:c7:57:f0:a0:1a:9b:
                    e1:ec:71:67:ab:82:57:cb:50:0f:c0:63:9b:27:61:
                    59:21:fd:a8:cb:9a:73:84:0d:25:b3:2f:0c:66:4e:
                    b4:d3:01:56:50:cb:2a:86:28:ef:54:0f:60:2b:35:
                    56:3b:90:9d:8c:11:ff:23:3f:7a:cc:1e:aa:ba:0c:
                    8d:e1:12:fb:a5:a4:9d:cd:5d:c1:66:02:ac:07:e2:
                    10:2d:ac:22:fd:a0:42:6b:38:53:56:ba:8b:f7:15:
                    a7:1e:17:a4:6e:34:bc:a3:cd:2c:ac:5c:62:e3:cf:
                    41:0f:88:3e:9c:32:68:31:55:50:1e:f9:6d:d2:b9:
                    21:3a:28:4b:14:b4:06:53:25:d7:53:a9:b7:9c:7f:
                    60:c9:95:a1:bd:a8:2d:05:e0:38:8c:ac:ae:2b:67:
                    2a:19:44:fb:50:74:19:44:08:25:94:b4:26:dd:2e:
                    f1:6e:32:75:43:47:35:ef:b8:cb:9a:8c:e8:da:4b:
                    3e:0c:3b:47:3d:64:f1:11:c7:70:9c:e8:e1:71:1a:
                    df:16:de:df:09:6a:30:7b:d5:d8:de:f8:14:89:c6:
                    b8:5c:18:69:24:bc:5d:34:dd:30:30:f3:21:0b:6d:
                    a2:2c:f0:9c:1d:87:9c:7e:78:cc:72:66:c5:a8:7a:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:A0:90:07:91:EB:9A:26:F0:5C:B6:E5:5B:BE:05:70:2B:60:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.crl

            X509v3 Authority Key Identifier:
                keyid:1E:3B:B3:A4:84:98:0E:80:05:FC:5E:3D:42:65:B9:71:1C:79:6A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.62.0/24
                IPv6:
                  2620:30:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:e2:2a:1c:fe:fe:87:82:8b:6d:52:bd:c3:b5:04:28:b4:
         5b:0c:d1:36:0b:4a:aa:e4:62:de:01:b8:0b:a4:2c:ea:e8:29:
         a1:dd:93:a5:fd:2e:19:b2:67:8d:57:07:e9:fd:ff:81:1e:3b:
         8b:b6:a3:17:e8:05:6c:f5:4c:01:0f:dd:e5:ec:e4:6b:0c:43:
         da:c0:61:20:da:a8:23:41:d6:6c:e5:13:b5:db:98:97:54:d4:
         be:c4:d3:0e:40:99:61:3b:1e:a4:db:42:09:92:f8:61:2a:47:
         59:a7:44:57:75:f9:c7:27:8e:82:7f:44:88:bf:71:37:78:13:
         15:70:a8:ab:d0:80:fd:6d:87:f9:b5:e3:6c:7f:85:e4:0d:f3:
         a8:92:4c:f2:a4:9f:04:27:08:dd:a7:21:09:68:b4:93:86:6f:
         33:58:2a:8f:4b:bf:7c:dd:54:2d:f0:32:a9:7e:85:bf:c9:04:
         f5:49:7f:5c:1b:f0:76:d4:48:df:86:3b:2a:9a:ea:e8:f2:8d:
         94:57:73:b7:ec:c1:59:d7:6c:13:fd:85:28:84:bb:bc:a3:93:
         26:43:42:a9:a3:ac:30:7d:64:cf:b4:dd:ca:d6:63:ef:fe:b4:
         57:01:27:a5:b0:7a:43:c9:68:fa:d6:76:b5:f3:10:d7:71:44:
         b6:eb:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:51:42 2026 by rpki-client