Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa
File:                     1123e5b1-5ec8-3464-89da-b623e37e2172.roa (raw, json)
Hash identifier:          sGmNDl462gNNfe29QYu6IQgIMcVKPwXWisQg1hPOLGI=
Subject key identifier:   E6:D5:5E:5A:4F:BA:75:9C:38:1D:00:96:FB:2C:85:EA:2F:3D:61:CC
Certificate issuer:       /CN=d7efbaef-2817-4a72-a1dd-cb7b66e942b1
Certificate serial:       010D0C9F4328584EE4F1E71ACC068A350C602B00
Authority key identifier: 09:EF:96:7B:66:80:2E:74:E9:12:F5:82:B1:4B:46:DB:38:78:55:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     401912
IP address blocks:        161.97.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:e7:1a:cc:06:8a:35:0c:60:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7efbaef-2817-4a72-a1dd-cb7b66e942b1
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=5103f4fb-76f4-44a0-abea-8d70a22f3b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:ea:b9:92:ac:6b:ee:22:36:0f:32:0e:7b:
                    9d:a7:4a:0a:0d:1f:f0:0d:03:9b:4e:b0:36:1a:53:
                    83:aa:b8:6f:5b:da:a9:fe:81:a2:57:ae:af:25:33:
                    45:65:b6:c7:16:9c:16:08:8b:0c:1a:80:69:af:e8:
                    a2:a7:cf:aa:ba:ac:ed:17:e5:d7:27:d1:ef:3c:23:
                    cd:02:40:16:d4:14:71:42:d5:4a:49:51:9e:3a:f6:
                    f6:51:2f:25:86:60:87:68:73:a9:79:e4:19:46:9b:
                    5b:b2:1e:0e:24:59:94:02:e0:4e:e3:04:f7:2c:c0:
                    42:d5:ae:76:3c:d5:62:95:fa:7c:4a:86:0f:f8:0e:
                    62:e1:e8:47:f5:d9:08:d9:ac:e5:ae:bb:cb:a7:b7:
                    fd:a0:71:7b:40:fc:32:3d:88:bc:2b:44:51:10:a8:
                    a3:b0:b8:94:14:b1:5d:68:c0:a0:44:b6:f5:de:b0:
                    88:79:52:ee:c7:ff:f0:6d:1b:3a:1d:b2:7e:38:d2:
                    0b:e9:cc:98:ac:cd:41:ca:48:97:f5:50:81:66:9f:
                    22:97:13:14:47:33:e9:8d:60:99:05:fa:e9:ee:72:
                    f4:07:e9:56:77:ee:c1:09:6d:9b:fb:41:de:9c:2e:
                    40:14:63:3c:e3:d1:02:9f:2a:cd:63:3e:28:f7:b9:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D5:5E:5A:4F:BA:75:9C:38:1D:00:96:FB:2C:85:EA:2F:3D:61:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.crl

            X509v3 Authority Key Identifier:
                keyid:09:EF:96:7B:66:80:2E:74:E9:12:F5:82:B1:4B:46:DB:38:78:55:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.97.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:96:08:31:81:4f:3b:55:d3:30:82:b5:a6:97:96:97:94:5e:
         69:31:48:bf:7f:ac:de:d7:9b:45:50:05:1f:ee:f0:0f:fa:1d:
         27:f3:29:dd:2b:10:02:b3:68:5b:1f:aa:14:6b:6f:df:e3:2e:
         d8:6b:bb:24:41:3d:7c:89:61:d2:3f:a8:9b:b4:87:65:ae:00:
         b7:a4:8c:b5:b4:c3:73:e4:45:5c:a1:4e:e5:9f:00:64:82:47:
         c6:20:b5:16:60:01:47:ba:c3:3f:3a:a8:da:41:80:01:87:ac:
         32:e0:f5:03:b4:eb:d3:19:bb:82:11:e3:bd:5a:01:1a:0a:46:
         80:b9:f5:e8:d2:3c:25:8a:75:09:b7:e5:aa:b1:ac:fc:04:b8:
         57:cd:d1:96:33:3c:e0:dd:db:65:66:a1:53:8f:8f:3e:a6:36:
         94:ba:39:52:1f:51:23:77:66:20:18:ed:e9:51:e4:a7:e2:93:
         67:60:a0:e9:eb:53:a1:ab:42:95:41:60:3c:9d:99:66:c3:08:
         ed:74:87:95:ce:17:63:14:6e:96:9c:d1:f4:78:ae:32:c3:e2:
         f2:9a:ec:9f:2b:72:3a:7a:1d:fd:89:a7:26:1b:a1:77:b2:71:
         c2:9c:c3:1f:d5:4f:45:96:a0:b3:5d:fa:b6:3b:ac:71:9a:33:
         d2:3a:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:45:41 2026 by rpki-client