Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/c1529af3-d853-3116-ab55-0d4e1c919408.roa
File:                     c1529af3-d853-3116-ab55-0d4e1c919408.roa (raw, json)
Hash identifier:          UnwVeukG8e7Br5/zvGDYjczojs7KlNqXaIw19TmesKc=
Subject key identifier:   E4:46:E7:52:83:A6:7F:7A:58:9A:C4:0E:B3:02:13:41:83:47:C0:E4
Certificate issuer:       /CN=61ad7677-7d67-434f-9051-821a223997ce
Certificate serial:       010D0C9F4328584EE6573ED2E18F6904DC0A1188
Authority key identifier: FB:C9:AB:63:01:42:08:0C:F1:F0:7E:CA:61:F4:9E:35:E6:82:42:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/c1529af3-d853-3116-ab55-0d4e1c919408.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        216.177.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:3e:d2:e1:8f:69:04:dc:0a:11:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ad7677-7d67-434f-9051-821a223997ce
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=540d71c2-236b-4374-b3b0-c38a6a0d5675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4a:89:43:e0:e5:61:6a:2e:a5:f6:8e:6e:d0:
                    f8:6b:ab:c9:50:73:df:32:de:03:47:86:e5:aa:e4:
                    8d:75:29:e0:a0:4d:f3:32:a8:80:c7:f4:09:e9:09:
                    2c:08:2b:4c:9c:59:33:9c:f9:ba:08:f5:9b:69:39:
                    d4:42:66:64:6d:85:34:d8:bf:53:91:9c:5a:2d:38:
                    b2:36:e5:e1:40:b7:8d:08:e9:87:cd:10:0f:fc:13:
                    0a:01:e2:c1:22:7e:69:51:26:db:58:cb:bc:f8:5c:
                    df:62:20:80:9e:a1:8e:df:a3:63:db:a7:f1:6d:84:
                    83:76:0a:2e:f7:38:34:86:f7:dd:75:f2:90:52:d0:
                    fe:48:71:f6:2a:4e:49:6a:99:15:aa:3b:3a:6f:25:
                    93:f0:56:93:5e:3c:48:2b:1e:9c:b9:c0:d7:ba:38:
                    dc:76:da:b7:68:46:cf:e8:bd:56:9a:33:bf:e8:b2:
                    e7:eb:7f:78:dd:39:0d:a2:eb:38:19:b1:0d:a3:c0:
                    6e:1c:40:2b:01:cc:8c:aa:39:c7:29:90:48:2c:01:
                    03:2a:bf:ae:b6:4a:d8:bc:9b:ac:af:a8:23:d5:9f:
                    64:99:c0:bf:8e:5b:eb:6d:2c:0c:b6:c0:0a:a1:6d:
                    48:22:94:3e:5d:ab:16:d0:53:a3:15:3d:57:f4:2a:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:46:E7:52:83:A6:7F:7A:58:9A:C4:0E:B3:02:13:41:83:47:C0:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/c1529af3-d853-3116-ab55-0d4e1c919408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.crl

            X509v3 Authority Key Identifier:
                keyid:FB:C9:AB:63:01:42:08:0C:F1:F0:7E:CA:61:F4:9E:35:E6:82:42:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:96:61:77:5e:d8:2a:b8:b5:22:04:87:6e:5e:78:b4:24:87:
         62:35:22:f5:20:15:90:1b:f7:f5:c6:f2:29:3a:d8:7c:e7:60:
         c4:11:0c:3c:e1:b1:5c:bd:46:3d:b8:7e:d1:a9:17:96:4e:7f:
         f0:74:06:a2:e2:a0:e9:33:11:d3:ac:16:e3:4a:ce:c9:77:7e:
         1d:2e:cc:1f:44:ab:be:c9:c0:a0:f1:ae:9e:cf:e5:cf:41:9e:
         ec:98:1c:b7:69:84:84:1c:15:74:23:a5:61:50:0f:95:78:11:
         dc:44:36:e3:60:5e:e0:00:11:07:c4:97:73:36:e2:a7:41:28:
         2c:10:df:94:7a:ac:ee:3f:53:f3:6e:44:04:ea:14:cc:dc:27:
         e7:50:a2:1b:f8:ed:ec:0c:c5:0b:dc:5b:8e:2a:0f:50:a5:d7:
         92:69:e6:34:eb:84:c4:c2:b7:ae:76:f6:99:fd:1e:d1:3c:92:
         5d:1d:85:e2:b2:85:f7:8f:47:6f:06:e9:e0:14:5c:4e:36:21:
         40:6f:15:a2:f1:b8:23:12:71:69:e9:ac:ff:04:d0:1d:dc:6e:
         4c:7a:9c:f3:af:55:ca:15:22:26:2e:a0:fa:ed:5f:18:f6:be:
         15:2b:5c:b6:77:c4:78:dc:ea:46:c6:ca:41:70:ea:b2:0b:b0:
         b2:0d:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:40:18 2026 by rpki-client