Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa
File:                     19c7d435-0191-3d18-9f33-8c7a4026904c.roa (raw, json)
Hash identifier:          jJV6KoBAGwPMJL8EEN6jVCT+VxUaHFGtE6hutCVwB1I=
Subject key identifier:   E1:27:64:FA:CD:DC:E9:DB:A3:29:48:3B:99:DE:70:28:04:69:70:DD
Certificate issuer:       /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
Certificate serial:       010D0C9F4328584EB847199D617324741CDF5380
Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        161.199.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:19:9d:61:73:24:74:1c:df:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=c9188c8c-7d1c-4a11-9658-d7885d9d7872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:78:4a:d4:e2:44:1e:59:c0:3c:0a:8d:68:
                    3e:41:9d:66:a1:f5:71:b6:21:6b:29:34:27:ab:01:
                    a4:cf:37:33:72:26:a0:0f:8f:35:02:8a:24:71:1e:
                    55:f4:7b:2c:52:ca:53:6a:26:e0:7b:23:4c:cb:e3:
                    a2:6a:29:2b:59:34:6a:34:8a:be:10:c1:e2:c2:6a:
                    62:05:97:3d:09:ae:b8:db:3b:31:fd:24:f4:cd:27:
                    f0:da:7b:18:ae:1b:79:a7:94:40:18:db:a7:9e:8b:
                    53:99:77:82:73:32:60:b4:b3:ec:c0:9e:90:18:9d:
                    03:5e:62:1e:be:23:31:1b:aa:38:91:57:66:74:05:
                    4d:cb:53:ba:12:25:17:c5:7e:90:ad:bd:9e:6a:19:
                    9b:22:b4:8c:ff:08:76:3d:fd:a3:49:ca:16:ea:df:
                    98:1b:27:16:53:22:2f:af:d1:0c:98:43:b0:b1:b4:
                    6b:b9:90:28:88:ba:dc:e4:d4:00:8a:70:ed:28:e8:
                    09:6d:e4:e5:34:0a:82:89:b9:77:92:3b:e6:95:c6:
                    fd:25:01:09:f0:db:39:ab:05:58:8c:ff:dd:f4:10:
                    3f:ae:84:1a:b1:5b:b6:65:05:a5:5d:bb:f4:cd:7a:
                    96:72:79:40:dc:15:89:94:c0:28:f7:38:63:71:6a:
                    cf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:27:64:FA:CD:DC:E9:DB:A3:29:48:3B:99:DE:70:28:04:69:70:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:99:d7:7a:00:f9:9a:31:c1:0c:69:b6:75:4f:fc:d6:a5:
         8e:3c:d8:4e:22:b2:b9:db:c6:fc:73:c6:7d:8c:74:71:a4:cc:
         1a:80:5f:5b:89:97:ad:bc:3f:01:34:09:09:01:7b:d4:dc:a3:
         02:bb:43:22:16:50:a1:88:a7:81:3a:9b:30:09:77:1e:fc:01:
         f7:bb:5b:50:1e:a4:9d:51:6d:84:b0:ad:bb:ef:ac:bb:bf:33:
         c8:9f:17:c7:eb:39:da:b4:d2:ea:5b:8e:a8:37:7a:a8:af:1f:
         64:a6:ce:8d:83:b0:a7:88:87:39:01:32:3d:fb:5b:ba:da:cf:
         15:47:aa:e6:6d:2d:60:88:21:75:49:af:36:ae:00:f0:6d:d8:
         32:05:1e:95:ce:da:73:3e:2a:4b:ee:59:d9:2c:59:29:c2:c7:
         18:05:c3:c4:58:09:36:af:84:f6:04:78:a2:3f:db:6e:ab:c0:
         fd:c3:3f:97:5d:de:e2:5a:03:c6:df:36:85:27:45:82:8e:17:
         e2:8a:37:a2:ca:ea:e6:37:86:f2:f2:4a:b1:78:03:2e:b6:03:
         e7:57:a9:b8:dc:76:2b:2f:5f:6c:f9:21:c5:50:1d:a6:5d:7f:
         22:92:da:b8:b8:77:41:1f:a2:95:68:09:f4:e7:6b:47:bc:a1:
         4d:a2:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:19 2026 by rpki-client