Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa
File:                     48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa (raw, json)
Hash identifier:          cObHGu6l/qeHyTE+ud3aJ61+/lGTYUd++lY28ZNr7Q8=
Subject key identifier:   83:0D:C9:F1:5C:BE:BF:F0:D6:DF:5A:9C:F7:C0:F2:25:56:69:1B:6E
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F4328584ED861DCF67352DDD3ABE98580
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        147.124.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:dc:f6:73:52:dd:d3:ab:e9:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=67c79dab-ff03-4064-9b34-fbe725ee4422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:23:50:03:55:4d:a8:29:c9:94:da:aa:4c:d4:
                    fb:9e:56:47:9e:05:ac:01:45:c4:88:b5:e7:67:be:
                    a2:af:21:77:26:76:45:6f:14:2d:05:41:20:fc:f2:
                    7a:43:9e:6b:7c:0d:b1:cd:d3:ab:82:73:5b:32:b4:
                    58:b4:3a:3f:2f:b1:db:47:65:5a:19:75:d0:df:2b:
                    7d:19:48:99:09:76:65:bf:6d:f9:2c:e8:ea:0d:71:
                    0c:e0:7e:43:15:60:88:c0:e9:73:83:85:10:33:35:
                    54:4c:6b:14:2e:7a:17:80:21:c0:d7:7c:de:5b:bd:
                    02:ce:9c:14:68:e3:13:33:a5:4d:41:c3:7a:c0:f4:
                    f5:51:45:a6:ae:28:16:e8:a7:61:af:f7:cd:fc:1f:
                    1e:f3:69:a9:36:f1:cb:98:a0:26:16:fa:b1:c3:15:
                    54:8c:37:49:8c:37:6f:dc:ef:dd:e5:b6:e2:1d:51:
                    fb:eb:7b:2a:21:e0:85:35:4b:f2:f8:32:93:a0:81:
                    2f:30:77:a0:72:38:e2:32:b3:f4:29:1a:60:77:94:
                    1f:f4:62:05:17:df:59:27:87:d7:08:1a:4a:09:1f:
                    ff:c9:e4:04:71:8a:df:8c:9e:10:23:4f:1a:a2:e5:
                    17:4d:49:98:a9:5f:41:ad:da:5a:26:84:05:3f:20:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0D:C9:F1:5C:BE:BF:F0:D6:DF:5A:9C:F7:C0:F2:25:56:69:1B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:35:8d:27:fc:f3:1a:81:9c:9b:7e:34:bb:cb:44:c8:9e:
         5e:f9:bc:21:8e:ae:57:42:0e:bb:b6:2d:80:a2:7c:8f:56:a5:
         56:b9:e9:3a:7f:72:5f:fe:b2:1c:e1:5c:17:27:c1:94:9a:91:
         b6:14:91:ea:30:52:4b:23:8e:0b:77:3b:08:8b:dd:62:4d:ec:
         48:f3:94:8a:09:90:34:df:3a:99:28:86:43:22:81:91:81:5f:
         fe:98:55:1f:ac:55:cd:1d:bb:b6:fc:ae:00:f8:0f:d4:a9:de:
         cc:93:43:91:ad:96:5c:a0:81:8f:b6:fa:1c:67:9e:cd:1a:7e:
         a2:e9:bb:4c:75:04:dc:3d:24:eb:ed:db:d8:25:d7:a3:50:a5:
         c2:64:f5:b4:75:e7:e7:1d:92:ad:19:4e:75:24:c7:98:a8:8b:
         10:b9:14:53:f6:60:e4:cd:ad:ac:30:83:3a:bb:26:49:7c:ac:
         c5:4f:e7:3d:0d:d2:c6:93:47:e0:23:0e:c4:77:93:c8:60:ba:
         a6:6b:a3:a3:ab:eb:4a:b9:ca:4f:83:78:34:57:e6:4e:0c:79:
         3d:e7:bd:9b:71:1f:3e:f9:6f:a5:16:d5:69:0d:33:8e:ae:0c:
         3b:f1:90:ae:3d:b2:1d:e2:bd:31:e3:62:3d:93:93:78:bd:8a:
         ed:fb:9a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:40 2026 by rpki-client