Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa
File:                     819d3888-df8a-3d32-a202-01632835d491.roa (raw, json)
Hash identifier:          Dy4P2V2JFzvR/djR7fw0jh/8wUimmFkKr5SKyqDCB5U=
Subject key identifier:   90:73:DC:77:9B:BF:56:14:B3:1B:3A:39:DF:8F:22:1B:F0:96:23:AC
Certificate issuer:       /CN=1c066aa7-c91c-4752-a554-3ac416a79e4f
Certificate serial:       010D0C9F4328584B6631F40C887C9FE1C3703D80
Authority key identifier: 46:8F:65:72:6A:D4:5D:EF:C0:7F:4E:90:8E:93:2C:F9:07:DB:05:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     14618
IP address blocks:        161.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f4:0c:88:7c:9f:e1:c3:70:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c066aa7-c91c-4752-a554-3ac416a79e4f
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=1fa9f01b-59a0-4dad-be95-550215339349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:c8:32:ec:89:93:da:f3:af:d2:c7:95:d5:
                    b7:e7:5f:1e:3f:83:c8:eb:d2:6e:65:97:8a:46:82:
                    ee:f2:ad:de:83:ec:7a:a4:c4:42:26:a4:e8:eb:a3:
                    22:c5:96:a8:98:32:86:4c:f2:af:fa:26:66:ef:96:
                    1f:42:b0:f1:36:68:e5:9b:c0:f8:97:ea:1f:14:c5:
                    2f:09:55:02:6b:80:7f:81:bd:14:ec:65:e2:3b:ba:
                    00:19:59:b1:a3:65:09:d2:15:b4:7f:1f:05:63:2c:
                    cf:e0:7b:b3:a5:0f:7b:a5:de:98:08:25:46:5f:0c:
                    f2:ca:ed:f5:d0:b9:67:aa:47:e3:48:68:c7:73:26:
                    be:d0:36:e3:25:27:10:de:d5:55:06:c1:69:ba:d8:
                    c7:8f:25:ec:14:a0:da:19:c7:bb:bc:db:b5:01:88:
                    2d:ae:c3:74:05:15:51:af:b5:87:13:04:a0:51:c6:
                    b8:67:b3:d3:77:24:ca:23:76:55:4e:1e:f6:18:79:
                    d6:28:1c:84:d3:9e:95:1d:f8:3a:9b:1b:da:2e:27:
                    fd:6d:9f:f6:1c:5f:be:4b:93:a7:a9:e4:a0:90:84:
                    42:0b:28:19:cc:f0:43:d6:d9:69:c3:70:79:28:d5:
                    76:5f:32:32:5c:88:3b:13:62:8d:8d:36:1e:b5:d3:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:DC:77:9B:BF:56:14:B3:1B:3A:39:DF:8F:22:1B:F0:96:23:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.crl

            X509v3 Authority Key Identifier:
                keyid:46:8F:65:72:6A:D4:5D:EF:C0:7F:4E:90:8E:93:2C:F9:07:DB:05:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.51.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cb:99:73:c7:e3:57:0a:72:fb:f2:72:3f:4e:31:67:1a:26:
         ab:62:dc:75:13:3e:8b:bb:af:ae:86:57:52:85:07:49:02:82:
         a6:46:21:ec:d9:50:e7:ec:b1:25:1c:a3:66:84:fd:19:00:d1:
         25:a3:08:c8:0e:6a:af:b1:d0:f9:a4:86:64:ff:6e:a7:25:16:
         ef:f3:45:b6:ce:53:e4:e8:d6:cd:a9:e4:85:ed:19:86:09:ee:
         54:f0:b1:1f:3f:b1:8b:46:17:da:e4:10:04:9a:72:74:27:8b:
         92:10:2a:66:0c:0c:bd:71:02:d3:bb:de:ea:f1:08:74:8d:d6:
         46:90:89:e3:69:d9:70:12:4a:0c:e4:b8:d1:2f:a2:94:de:89:
         29:04:42:45:82:9e:7c:fc:b7:60:c3:5a:6b:ac:be:86:4b:48:
         b5:a7:2c:ca:e5:70:36:d7:83:f6:4e:47:18:88:d3:1c:d3:22:
         21:6d:84:40:b9:5e:1a:72:4b:76:bd:6c:5e:ee:7a:30:e7:3b:
         73:ba:f9:26:84:1a:32:f2:ab:49:94:59:a8:1e:9c:30:de:97:
         13:0f:b0:13:7f:e6:24:31:10:2b:36:51:6c:30:7d:48:40:80:
         fe:80:67:9d:04:91:5a:8f:4c:23:df:83:2c:bd:ea:01:ca:19:
         e1:63:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:38 2025 by rpki-client