Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/522ee799-00c1-3c81-9a66-32d095f18a7d.roa
File:                     522ee799-00c1-3c81-9a66-32d095f18a7d.roa (raw, json)
Hash identifier:          wveeuu8Fu0BRIyz3McxUxcQ7CKCWzis+OyyLFShhcCA=
Subject key identifier:   DA:09:14:46:82:C5:34:32:2A:CA:FF:8A:F4:A3:38:59:18:2F:99:96
Certificate issuer:       /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial:       010D0C9F4328584DD1F5C303A01DEF0A74709540
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/522ee799-00c1-3c81-9a66-32d095f18a7d.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        161.223.187.0/24 maxlen: 24
                          161.223.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:c3:03:a0:1d:ef:0a:74:70:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=b4fca88e-4a30-4da4-937f-99a15409a70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:b1:84:8d:9c:0f:1e:b3:16:d5:cc:76:b5:
                    80:3e:3e:c4:dd:b9:bf:b2:9e:57:61:4a:2c:58:23:
                    34:77:43:6b:9b:c3:2d:6c:cc:46:51:5c:76:fd:1b:
                    33:92:e7:7f:52:14:90:c6:77:49:92:d0:ff:34:36:
                    41:ce:e9:7e:7e:7e:f7:dd:70:52:32:3a:57:5b:5a:
                    6d:05:2c:91:4a:4c:23:d7:ed:17:81:58:07:d0:72:
                    88:b5:4f:d9:89:fe:be:6d:b1:3d:42:c8:4c:b9:f6:
                    62:41:78:86:1d:7d:7d:94:32:21:d9:8b:19:c9:00:
                    1b:58:3e:76:65:21:ce:4b:e9:b9:bb:e1:e8:d2:a9:
                    34:98:9f:3a:cb:72:f2:ab:94:59:a5:9e:1c:f0:f1:
                    38:1e:9f:09:1d:7a:e0:f4:b2:fb:c1:86:fe:21:a5:
                    84:d3:31:07:1e:6c:a8:b8:9b:23:a7:9e:6a:fb:d9:
                    39:f9:a1:d1:4d:bf:ef:61:45:23:78:83:db:c4:43:
                    b0:27:96:9d:cb:32:dd:8d:91:c9:eb:f5:63:a4:fa:
                    9d:b4:8b:3a:95:c7:31:0d:59:99:b8:ec:60:3c:55:
                    93:65:9c:ff:e6:a8:59:11:ea:c8:71:bb:17:35:8f:
                    28:3a:c3:90:92:53:52:e8:29:01:a1:07:58:29:0d:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:09:14:46:82:C5:34:32:2A:CA:FF:8A:F4:A3:38:59:18:2F:99:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/522ee799-00c1-3c81-9a66-32d095f18a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.223.187.0-161.223.188.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f1:6b:19:62:f7:df:d8:fb:d9:84:a0:74:b5:02:98:dd:7b:
         34:e3:ac:18:08:4d:69:ff:5d:f9:3e:54:a3:ea:54:ed:89:22:
         2b:45:66:ef:83:98:d7:b0:aa:ab:7e:67:94:0a:1b:04:7b:6e:
         d3:4a:1b:72:98:7d:01:cc:c1:0e:d6:72:a1:f4:88:3a:b1:e9:
         2e:10:77:34:8a:76:58:fb:60:9a:74:38:2b:81:b7:ca:58:08:
         b1:4e:01:4d:d6:3d:90:6c:e7:a3:b4:f6:a7:e5:32:49:11:fb:
         3a:6a:c7:55:13:3f:02:79:ff:dd:7a:ac:01:d7:c8:72:bb:96:
         f5:42:83:29:70:3c:3d:08:e2:61:9d:81:24:42:b4:4f:f6:28:
         c8:8f:bc:01:44:36:2a:f9:29:16:1b:59:d2:cb:af:78:8f:6e:
         1f:21:27:8f:12:0a:71:45:31:3c:4b:9f:20:6d:21:17:1c:30:
         70:72:ed:c7:f3:85:0b:67:29:5e:07:1b:22:e2:ae:c1:00:7b:
         a8:ff:ed:27:97:07:40:b4:e8:e8:c3:d6:7d:f3:d1:04:73:61:
         f0:86:28:08:14:b2:d2:3e:89:21:77:8c:2d:7d:19:4a:00:b4:
         32:1e:76:99:39:c1:af:99:5f:91:40:a5:f4:a0:d9:59:52:ff:
         7f:ee:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 23:22:16 2026 by rpki-client