Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64161.roa
File:                     AS64161.roa (raw, json)
Hash identifier:          2I+Zq7jl5M/sEg4XY7MXCrcCmBXTDy1+MC4md+VH+KQ=
Subject key identifier:   FD:60:CA:7C:CF:E0:57:F5:23:46:94:B7:86:B3:C7:CB:AD:B6:AE:24
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       160F2EDFBA1F0C4B7946CF330B6985CF7EFC74E3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64161.roa
Signing time:             Sat 11 Jul 2026 15:17:52 +0000
ROA not before:           Sat 11 Jul 2026 15:12:52 +0000
ROA not after:            Sat 10 Jul 2027 15:17:52 +0000
asID:                     64161
IP address blocks:        72.11.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 23:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0f:2e:df:ba:1f:0c:4b:79:46:cf:33:0b:69:85:cf:7e:fc:74:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 11 15:12:52 2026 GMT
            Not After : Jul 10 15:17:52 2027 GMT
        Subject: CN=FD60CA7CCFE057F5234694B786B3C7CBADB6AE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:ee:a2:39:3b:58:c5:48:cf:26:bd:0e:58:
                    b5:a3:2b:d5:5b:5c:e2:72:dd:1c:10:7e:2b:fb:12:
                    d0:d4:dc:4b:16:ad:c2:97:e2:81:0b:17:82:2a:b3:
                    ca:e9:f2:de:4f:ad:03:95:ee:84:d2:f6:76:10:a0:
                    c4:59:8e:53:6a:c6:2b:04:bc:40:44:3d:4b:fe:90:
                    20:34:2d:60:04:ab:d7:6a:03:74:3d:94:4b:e3:e5:
                    dc:0c:a8:1f:17:2d:d1:80:63:2f:e8:7f:f7:8c:7d:
                    14:a0:f0:52:99:15:27:80:99:60:7c:a9:ec:ce:3a:
                    df:ac:8c:6e:0f:4d:eb:0a:95:7b:d0:62:42:77:95:
                    31:f9:ca:27:8b:c8:7c:ba:e9:5e:0a:ed:65:f2:e1:
                    20:2e:96:a7:6c:5d:f4:3b:f6:14:0e:d7:bb:07:7d:
                    25:47:1b:36:46:da:47:70:47:52:de:be:31:50:b6:
                    d3:47:c8:89:6b:35:2b:c8:7c:9e:ba:2b:32:1b:93:
                    0b:86:c4:8f:51:e4:bc:07:b8:8d:81:bf:59:d4:9d:
                    84:b9:74:6d:90:e4:e3:77:0f:a6:3d:ac:22:7d:1f:
                    38:08:50:27:48:3b:db:81:c4:38:26:99:a2:5c:ec:
                    8d:0f:7f:48:45:a4:46:35:49:56:ca:2d:ec:26:f6:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:60:CA:7C:CF:E0:57:F5:23:46:94:B7:86:B3:C7:CB:AD:B6:AE:24
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64161.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:1c:f2:62:44:8a:48:49:41:58:58:ff:06:dd:03:49:98:4e:
         fe:06:54:03:e1:80:6b:a9:ac:92:6d:be:1a:49:75:78:d3:b1:
         ea:58:29:06:70:f6:d5:8e:af:af:e5:14:85:34:4f:32:76:b4:
         71:20:aa:ad:1c:50:0f:85:89:69:94:6e:de:66:09:7f:7e:37:
         2d:63:f9:8e:b1:ea:bb:5f:d0:f0:49:e0:bc:2e:e8:ee:5d:51:
         3a:90:b4:84:4f:8c:f8:bd:f3:0f:ce:b2:8a:59:0d:0d:8a:60:
         0e:22:a3:47:02:16:57:3b:7b:7c:54:a2:05:3b:42:76:e4:56:
         d3:a1:f5:5a:82:ee:56:da:ab:f4:a2:06:86:d6:d2:43:cc:95:
         b9:fe:c1:6f:29:b6:72:c2:6b:79:da:68:5b:6e:cd:ee:dc:f7:
         d9:8b:e7:9d:e4:ef:98:16:b1:29:b7:38:5b:b5:ec:42:e4:68:
         f9:53:5c:10:74:99:6b:cf:a4:56:53:16:44:24:37:5a:af:30:
         7f:de:f3:90:3e:90:19:be:94:1f:a9:db:74:7e:50:da:25:d6:
         96:84:28:61:db:f2:35:06:da:fc:bb:c7:5e:35:7a:8f:76:cb:
         94:7c:15:d8:d9:16:a1:1f:ce:0c:27:f4:85:46:cd:48:3e:6d:
         d9:16:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 12:26:09 2026 by rpki-client