Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/b5fdcb10-bd22-3588-b2e2-fcb932bcc83d.roa
File:                     b5fdcb10-bd22-3588-b2e2-fcb932bcc83d.roa (raw, json)
Hash identifier:          Ap+0IGRI78bJZ0k/UweSATF/PjUgi9K6l4gudDqK124=
Subject key identifier:   85:E8:C7:0C:BA:D8:B9:B1:58:4B:1C:DF:68:6B:0A:3A:A0:44:87:13
Certificate issuer:       /CN=161143c9-c030-4270-91a4-41e54bbb2357
Certificate serial:       010D0C9F4328584E2D9F0B666F4AC657349CDB80
Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/b5fdcb10-bd22-3588-b2e2-fcb932bcc83d.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14630
IP address blocks:        198.245.245.0/24 maxlen: 24
                          198.245.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0b:66:6f:4a:c6:57:34:9c:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=a97c1a01-c722-4fcd-a76b-46fe176f8732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:61:98:65:b0:37:0f:1a:05:a2:ee:55:a5:
                    6d:e9:a3:ec:19:d2:23:43:09:5c:3e:80:84:68:dc:
                    6e:b0:0d:3c:70:cc:3e:a9:b8:3f:57:a0:93:d1:2c:
                    94:ce:42:f2:b1:cf:c9:51:2d:54:c0:fe:65:ac:7f:
                    4a:0d:6b:71:85:de:75:c2:b2:53:cd:78:a5:57:9c:
                    fd:50:e5:36:38:02:34:ad:55:3a:f7:61:68:52:e3:
                    97:f9:36:cd:0c:d1:61:c6:59:08:98:e1:47:9c:1f:
                    b7:d5:a3:19:93:d0:1c:ef:00:7a:44:fe:97:af:35:
                    87:1d:81:91:5f:72:ee:b1:ad:dc:f8:a1:ac:bf:f9:
                    5a:b9:7e:91:20:38:02:c2:9f:08:90:83:57:61:48:
                    59:bc:93:d9:14:36:e6:3e:5a:8e:4f:12:14:7b:cb:
                    61:3d:3e:47:6d:c2:a5:28:02:73:2b:fa:0c:79:a1:
                    10:3b:be:3f:42:b2:09:0f:3c:21:79:dc:27:93:21:
                    5e:1b:9c:a8:bb:77:11:84:39:15:93:1b:42:1a:65:
                    5f:d2:7e:f8:94:d1:ae:23:80:31:41:cb:e2:b7:15:
                    33:88:7e:0d:0e:63:5e:bb:71:1d:27:55:0d:d8:5c:
                    06:9d:b9:c9:01:43:84:17:0b:76:5e:bd:9f:33:3a:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:C7:0C:BA:D8:B9:B1:58:4B:1C:DF:68:6B:0A:3A:A0:44:87:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/b5fdcb10-bd22-3588-b2e2-fcb932bcc83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl

            X509v3 Authority Key Identifier:
                keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.245.0-198.245.246.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:83:71:19:54:ea:71:8d:a1:f2:94:ef:44:79:61:02:94:
         1e:d1:13:8b:27:d4:0f:8b:ed:ed:f1:d1:35:43:18:5c:06:6e:
         cf:f9:9b:5b:df:55:ef:0f:53:e8:fc:08:7c:b9:09:4e:2e:80:
         ca:b4:d1:ca:8f:0e:3c:64:58:f6:61:6a:93:e4:83:f0:a6:98:
         a2:13:7b:66:3f:86:75:7b:d6:58:e1:36:9a:52:66:ff:f8:88:
         0b:20:d4:4e:b6:4c:c3:90:ee:4d:48:96:58:71:e2:7f:d5:d7:
         39:35:99:fb:ff:f1:a3:bc:e5:d1:0c:fe:e2:de:59:45:c3:39:
         f8:4e:79:dd:67:c0:ec:4b:dd:be:80:d0:66:97:7e:59:c8:33:
         1b:1d:d8:7f:00:86:a6:f3:e4:22:9b:6b:95:f7:3e:e7:89:2c:
         45:af:80:9b:f6:28:47:cc:64:59:99:79:b2:01:69:a7:e3:df:
         55:62:36:b1:01:e5:7b:9c:c9:0f:fd:e5:c4:61:08:ad:a4:ce:
         61:df:13:5f:87:1d:9c:9d:99:fa:8e:09:dd:e6:ad:b6:f0:c9:
         8a:31:12:ac:da:32:70:03:5e:4a:e7:3e:7d:50:1e:af:09:70:
         32:13:8e:72:21:62:10:33:4b:88:16:8d:49:0b:1d:a0:f3:1a:
         3e:48:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:41:05 2026 by rpki-client