Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa
File:                     1123e5b1-5ec8-3464-89da-b623e37e2172.roa (raw, json)
Hash identifier:          olcrveY8FMeyla5kNKEyk5kahN38kUGaENdEVIpgjSg=
Subject key identifier:   3D:16:51:04:F7:AF:D2:57:7F:41:05:49:84:59:A9:D6:0D:BA:73:70
Certificate issuer:       /CN=d7efbaef-2817-4a72-a1dd-cb7b66e942b1
Certificate serial:       010D0C9F4328584E41ED2539DEC43743327EF000
Authority key identifier: 09:EF:96:7B:66:80:2E:74:E9:12:F5:82:B1:4B:46:DB:38:78:55:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa
Signing time:             Mon 22 Jun 2026 15:33:52 +0000
ROA not before:           Mon 22 Jun 2026 15:33:52 +0000
ROA not after:            Sun 20 Sep 2026 15:33:52 +0000
asID:                     401912
IP address blocks:        161.97.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:ed:25:39:de:c4:37:43:32:7e:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7efbaef-2817-4a72-a1dd-cb7b66e942b1
        Validity
            Not Before: Jun 22 15:33:52 2026 GMT
            Not After : Sep 20 15:33:52 2026 GMT
        Subject: CN=7a4d0e43-eaa6-48da-ba44-b0b7fce00eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:f6:6a:ae:2b:ee:0f:92:56:76:74:42:fe:
                    12:ad:88:ad:85:b0:e0:33:ba:c9:07:c3:ec:dd:c3:
                    05:78:60:38:9b:b7:25:1c:a7:77:a9:c3:9f:0f:77:
                    5c:69:f1:15:de:da:4e:f1:44:4a:c3:c1:ec:e1:c9:
                    2f:30:72:0f:30:2a:d6:58:1d:64:19:2c:02:44:f0:
                    14:5a:dc:73:58:d0:bb:69:0e:e0:cd:b8:73:af:53:
                    76:79:74:47:52:3a:cd:bb:c7:76:94:3c:9a:fc:41:
                    35:26:32:ef:f4:c7:54:81:44:d0:d6:18:70:e5:dd:
                    81:4c:d0:40:20:88:c0:a9:a5:3e:dc:85:f6:c6:c4:
                    aa:6f:d3:db:99:af:5b:fc:a4:ea:98:80:81:b3:06:
                    f4:2f:67:f8:1a:49:ff:b2:26:01:22:17:3c:76:83:
                    11:c2:64:ef:9f:48:52:f7:f2:e4:19:eb:37:9c:22:
                    9c:2c:45:d0:68:d9:62:e5:51:6b:d2:3f:3f:e8:d9:
                    a1:a9:1c:85:0d:07:45:f2:e8:ec:0c:1d:fd:f6:39:
                    80:58:a2:8d:83:97:ea:23:2b:4b:41:0b:32:f1:8a:
                    a7:b7:c6:f4:10:68:df:e8:9d:24:9b:4a:56:ab:f1:
                    d4:37:4f:de:a0:a3:3d:78:50:7d:e4:3e:21:66:51:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:16:51:04:F7:AF:D2:57:7F:41:05:49:84:59:A9:D6:0D:BA:73:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.crl

            X509v3 Authority Key Identifier:
                keyid:09:EF:96:7B:66:80:2E:74:E9:12:F5:82:B1:4B:46:DB:38:78:55:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.97.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:28:d5:01:1c:f4:d7:f8:7a:cb:92:9f:22:94:a0:b3:a8:a0:
         36:5d:ea:2f:98:97:ae:c1:46:a8:cd:6c:0d:03:9e:86:cc:fc:
         36:58:4e:34:a3:e9:3c:82:00:1c:1f:af:34:09:e9:da:b0:7f:
         21:1a:cf:06:24:73:f8:c2:a1:c8:ca:cd:89:15:db:27:77:01:
         b3:65:54:f2:85:03:d8:95:dc:75:b7:54:f9:a3:28:7b:53:0a:
         82:df:2d:48:d8:6d:82:62:fa:22:ff:45:a5:2e:c3:b0:ea:a5:
         92:b3:e1:05:9a:65:ae:9b:3d:75:8f:ab:27:e0:8d:44:d3:53:
         67:e6:3a:99:c2:dd:f0:de:61:e5:d5:48:55:7f:78:96:b7:24:
         e4:ad:00:b4:74:c9:a9:06:b3:8b:4b:9d:06:f0:61:29:dd:03:
         36:52:86:70:a3:82:e7:45:5c:32:02:51:ca:be:db:98:46:9f:
         b3:15:02:89:33:ee:bc:6e:cc:c1:ad:f4:09:2e:05:17:03:38:
         7a:00:e4:c6:d4:94:a6:f7:a7:87:31:f9:f7:42:39:9b:d3:d1:
         c0:11:d9:7b:3c:92:15:4a:eb:ee:70:f2:84:a5:c9:34:08:95:
         8a:65:56:1e:a8:48:16:79:e1:22:2e:ae:20:ec:b7:88:07:b5:
         61:e0:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:58 2026 by rpki-client