Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa
File:                     eeec2a0b-d077-3139-8182-9ef3d7ace134.roa (raw, json)
Hash identifier:          Z9TezF4Q6BfxIV747IJ3TknzGZzWOo02bLVepq9y33k=
Subject key identifier:   80:59:8D:5C:77:04:25:82:52:BC:1B:FF:0B:84:D3:C5:17:F1:B8:0A
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584D300A3C0751EF6ACF4FEE2D40
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     17275
IP address blocks:        161.107.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:3c:07:51:ef:6a:cf:4f:ee:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=9bd6b6b4-1186-4354-9b8b-9d0d690b7873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:63:85:9e:2b:6e:9d:c9:09:06:85:4f:84:
                    5f:6e:79:7e:99:d3:a5:38:d8:4b:54:a5:fe:6c:6b:
                    f9:f5:49:53:e5:af:3c:7d:66:0c:10:34:5f:53:8d:
                    99:64:d4:6b:d2:f2:d7:16:3f:6f:84:e0:91:26:ee:
                    27:01:ac:47:0c:0b:1f:3b:aa:45:83:3d:00:fc:8f:
                    da:01:d0:13:83:74:34:fc:7e:e2:04:f6:14:66:31:
                    0b:72:16:a6:0a:eb:e8:d4:cf:3c:f6:d9:1c:1b:c3:
                    d0:9b:66:72:9a:c0:e6:c9:d1:f6:e0:bc:ed:f5:38:
                    5d:e3:fa:1b:6f:22:89:49:cb:76:0d:42:fd:f5:11:
                    a9:5b:48:ac:dc:56:d9:ab:bf:ef:d3:fb:48:72:00:
                    12:e4:e6:53:0a:d5:4a:05:f9:7f:9f:7e:59:f8:76:
                    e6:d3:81:fc:d3:7d:ee:b3:76:a8:96:0f:2e:e7:2e:
                    47:23:0d:e1:e5:6f:a3:28:94:1e:22:5b:68:5f:dc:
                    40:21:2a:c9:c4:74:e8:0b:b7:29:04:8c:d0:b3:88:
                    65:0d:48:fa:d1:69:6c:83:75:41:c6:7f:04:5b:e4:
                    ce:b8:e7:6a:7a:ff:f3:8f:72:2b:6c:c6:57:68:e8:
                    5c:24:28:d7:cf:36:84:bf:30:57:0d:c2:0f:d4:57:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:59:8D:5C:77:04:25:82:52:BC:1B:FF:0B:84:D3:C5:17:F1:B8:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:22:c9:e1:b2:14:95:b6:6a:f2:0d:d5:af:6d:a4:f9:d5:
         f5:0c:d6:31:97:9c:42:a0:5f:f8:b3:46:10:8e:91:33:11:8a:
         99:97:9b:5d:f6:3f:ac:5c:60:62:08:71:68:c7:27:c1:be:9c:
         61:31:31:59:5c:5a:aa:ad:f5:2a:7c:04:eb:16:df:59:a4:a1:
         b9:12:42:75:88:36:69:a0:51:3c:ad:60:c0:b1:33:bf:f3:25:
         c4:5c:82:e6:65:96:82:e9:15:57:77:54:73:a3:11:3a:fa:df:
         18:2d:9d:0d:59:59:06:c4:dd:d8:fa:b2:4c:a8:aa:43:37:55:
         36:be:e5:05:be:66:0e:4f:26:45:31:3f:25:e7:ae:d1:40:f5:
         80:29:51:d3:a6:62:f9:d6:89:62:47:ea:81:64:ff:61:6a:cd:
         cf:fa:d1:39:04:30:4f:c5:22:74:f6:9f:09:a2:1c:03:ee:0a:
         60:23:ac:b6:e7:7c:16:49:62:7e:64:65:00:1b:c3:40:3f:6b:
         20:ef:06:a0:96:d4:72:3f:b4:de:a6:0a:ce:d7:d8:f9:53:ee:
         e2:09:11:01:28:ec:83:96:3d:01:12:2b:e9:c2:36:6b:c4:2e:
         1a:9c:7f:f5:6a:25:67:e5:bf:de:7b:84:6e:06:ed:65:bc:42:
         26:e5:c5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:28 2026 by rpki-client