Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa
File:                     368a512c-e23e-3f44-82ee-4544cde2afd8.roa (raw, json)
Hash identifier:          sh7h5povkfCIUP5hC85h0xRctOibGEGBJCKs7AthbyE=
Subject key identifier:   E5:70:7B:D9:47:4A:20:B2:F4:92:EC:95:78:35:26:51:69:76:E3:19
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F4328584F9BCE0023176162137B801180
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        161.151.200.0/24 maxlen: 24
                          161.151.201.0/24 maxlen: 24
                          161.151.202.0/24 maxlen: 24
                          161.151.203.0/24 maxlen: 24
                          161.151.236.0/24 maxlen: 24
                          161.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:ce:00:23:17:61:62:13:7b:80:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=9fabf2ef-94b3-4e25-8163-39f2725e72cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1d:f9:c3:a0:70:8c:6a:17:da:23:c3:6f:6f:
                    1e:24:f9:b8:ad:2a:8c:d0:cd:14:5f:51:28:3f:67:
                    37:f9:89:f8:6a:92:c2:f2:c7:f8:b6:bc:ff:93:71:
                    11:ae:bd:15:c1:16:ef:c0:89:96:7e:02:e0:f9:55:
                    c8:1e:03:94:0f:4d:9b:a8:3c:b5:72:69:65:ef:78:
                    56:59:92:09:0d:5e:22:4f:0d:62:86:7f:c0:33:73:
                    ef:fa:c2:28:67:c8:0b:2d:02:83:96:3d:48:59:4f:
                    f4:f3:af:51:90:2b:88:69:fa:00:c4:85:83:e4:2d:
                    5b:62:a9:8e:62:27:61:c2:27:94:1d:9e:70:b7:3a:
                    0f:5d:4f:23:5d:90:08:06:01:81:33:cf:82:47:3b:
                    1b:b1:df:2d:52:eb:80:1b:67:6f:da:7c:2a:71:fb:
                    c5:b9:f6:99:15:97:b3:21:00:c3:b3:3f:4d:12:5e:
                    3f:bc:58:e3:e9:27:3b:5e:97:61:e9:41:70:fc:3d:
                    f9:c7:44:32:8b:75:57:df:7f:b8:9d:7b:54:3b:49:
                    31:b8:59:64:24:8f:c7:d6:66:04:24:ff:3a:18:15:
                    c9:c5:cf:f0:66:d3:37:7d:9b:64:21:af:3f:96:17:
                    75:33:45:28:a0:ed:fe:56:83:c1:9b:43:61:d1:d5:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:7B:D9:47:4A:20:B2:F4:92:EC:95:78:35:26:51:69:76:E3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.200.0/22
                  161.151.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:eb:06:8b:ea:47:95:f8:e9:c5:a0:81:1b:30:e9:86:c1:
         5c:02:77:12:cf:55:6f:1f:05:43:c5:cd:23:5d:63:e9:5a:85:
         e3:c7:c8:f1:17:23:27:b8:f2:09:42:12:e4:af:85:e5:6c:77:
         5f:d9:62:2c:21:ad:f6:f5:1c:9f:c4:c0:43:d3:f0:38:33:cf:
         c6:7b:e9:20:bc:b1:34:e1:66:8b:cc:18:05:69:37:53:23:d2:
         dd:30:5d:5a:b4:c4:5b:b4:17:2f:64:86:dd:42:b2:59:1e:6c:
         fe:c0:92:f9:58:d5:45:3b:01:60:c5:b4:84:bd:d2:f3:aa:b5:
         b7:71:96:77:3e:c3:70:a9:d4:dd:31:90:58:42:56:39:2b:64:
         74:dc:bd:e4:63:75:c7:00:a7:05:19:06:97:08:d7:54:41:8c:
         28:87:f7:c9:47:8f:41:1d:0e:68:64:d7:22:5e:68:19:ae:9a:
         7f:5e:9d:d0:b4:f2:fd:b0:83:c1:74:22:bd:ee:af:61:e3:f0:
         de:4a:8b:df:80:a1:d6:91:b6:85:be:62:42:cd:e4:cb:8e:21:
         1e:c1:27:7d:1f:92:c1:38:f6:85:56:63:81:8a:d6:93:d1:7f:
         ef:de:b1:74:16:7c:61:f7:6a:ba:22:a0:1b:ca:7b:5c:9a:a5:
         49:ae:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:53 2026 by rpki-client