Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/2116b086-e1da-3bfc-89d5-1d25bf0fa618.roa
File:                     2116b086-e1da-3bfc-89d5-1d25bf0fa618.roa (raw, json)
Hash identifier:          e8O7m5fvp9F5Kznu0D5X7sunOTppEbRZJFRmRynpZ9w=
Subject key identifier:   43:61:10:63:2A:AA:23:06:50:55:6A:1D:82:8D:E6:D9:1E:FE:49:EB
Certificate issuer:       /CN=c526094a-5a20-4075-b740-9275828115d5
Certificate serial:       010D0C9F4328584D7E3534561542824DFF403900
Authority key identifier: 4B:2E:CB:61:67:71:1D:EC:4F:26:1B:44:BC:CE:DC:9C:68:62:D1:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/2116b086-e1da-3bfc-89d5-1d25bf0fa618.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        161.145.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/c526094a-5a20-4075-b740-9275828115d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/c526094a-5a20-4075-b740-9275828115d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:34:56:15:42:82:4d:ff:40:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c526094a-5a20-4075-b740-9275828115d5
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=04f2f65f-3814-4e44-ac1c-e19e7d19bfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:18:28:d0:0d:d1:ae:df:cd:5a:c0:93:ba:
                    3e:0b:a7:5c:7b:34:dd:0e:1e:cf:7e:7c:d5:0d:6b:
                    73:c0:3d:ae:7a:0d:1e:0a:dd:a9:9a:ce:12:69:a0:
                    a6:be:ea:aa:09:5a:c5:82:d9:9b:e8:39:65:1a:b0:
                    90:f3:29:cb:80:97:f0:8c:6d:e7:23:48:ee:a3:53:
                    74:c8:a7:01:40:ae:3e:77:b9:03:cd:fc:d0:2f:80:
                    1b:58:65:ad:84:88:86:db:36:33:2f:0b:28:32:1c:
                    79:95:da:a4:d1:1b:5c:cc:18:1d:0d:14:1a:d9:e0:
                    3e:df:f6:51:56:6d:6f:c9:cb:69:6b:ca:31:8e:a8:
                    9c:9e:80:3c:82:b8:07:aa:48:22:e6:5d:13:1f:20:
                    0a:30:ed:e3:15:10:79:5e:76:25:2e:5c:37:28:7b:
                    06:83:66:e6:1b:dd:ca:b2:f5:58:03:48:84:32:00:
                    a5:b2:71:e8:25:84:6c:1d:ec:6a:5d:a7:f2:f0:fc:
                    03:2f:9d:98:b5:fe:a3:72:e3:ef:0b:ae:4d:af:ac:
                    ed:54:6c:7a:5b:e8:88:ac:ef:ae:c9:5b:41:3c:0e:
                    18:f6:cf:23:4f:f1:90:02:c8:84:44:9e:dc:bb:63:
                    55:63:6c:f8:d3:44:50:25:6b:08:29:1f:30:2f:39:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:10:63:2A:AA:23:06:50:55:6A:1D:82:8D:E6:D9:1E:FE:49:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/2116b086-e1da-3bfc-89d5-1d25bf0fa618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/c526094a-5a20-4075-b740-9275828115d5.crl

            X509v3 Authority Key Identifier:
                keyid:4B:2E:CB:61:67:71:1D:EC:4F:26:1B:44:BC:CE:DC:9C:68:62:D1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.145.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:93:57:be:5c:0c:7d:b6:ee:1e:2a:ae:c8:1a:77:20:b2:d1:
         13:b0:c9:11:84:1e:48:5a:c4:5c:3d:28:77:2f:6b:37:5d:79:
         fe:6c:7c:2b:ac:6c:e6:59:7c:ed:c2:c3:a3:c8:3c:2f:04:80:
         be:25:31:45:ad:b7:28:d0:02:e8:40:ef:92:4b:5a:71:cd:0b:
         d2:1e:a8:09:9d:ce:1a:1a:d9:b1:63:eb:c7:be:79:fe:7f:b8:
         75:49:41:d6:b1:5e:02:50:1d:96:62:37:0b:64:12:ff:87:8e:
         ab:ee:a2:14:37:06:23:c1:47:75:2b:53:74:22:bb:cc:90:5d:
         28:95:d3:19:fa:72:bf:91:71:89:81:9b:61:19:86:48:a7:f6:
         16:fc:b7:97:a8:62:06:2d:b8:4c:e0:d3:f4:01:2c:c4:05:ed:
         43:73:e9:3e:5a:48:94:ef:75:aa:91:7c:a6:96:e4:44:5b:6c:
         85:08:c2:43:2f:47:15:44:6c:08:42:1f:16:e6:66:22:7b:e6:
         78:2e:c7:e5:d8:79:19:27:ef:d9:1e:f6:33:0e:a9:b6:f1:1f:
         86:69:08:bb:07:94:2d:53:90:18:58:db:14:71:0f:2e:1d:c4:
         b2:80:65:58:35:03:66:45:26:d5:67:1e:c8:87:56:26:47:77:
         69:0b:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:54 2026 by rpki-client