Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/2116b086-e1da-3bfc-89d5-1d25bf0fa618.roa
File:                     2116b086-e1da-3bfc-89d5-1d25bf0fa618.roa (raw, json)
Hash identifier:          xE1cIDt1IN9haSeB2RYl9rWapezEI97OTXdutgmJXS4=
Subject key identifier:   CC:51:37:96:0C:91:4F:A1:BB:99:3C:DA:5F:A8:A6:57:CB:E1:2C:6B
Certificate issuer:       /CN=c526094a-5a20-4075-b740-9275828115d5
Certificate serial:       010D0C9F4328584BBD20C49F5541129E51A6BF00
Authority key identifier: 4B:2E:CB:61:67:71:1D:EC:4F:26:1B:44:BC:CE:DC:9C:68:62:D1:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/2116b086-e1da-3bfc-89d5-1d25bf0fa618.roa
Signing time:             Mon 03 Nov 2025 16:21:30 +0000
ROA not before:           Mon 03 Nov 2025 16:21:30 +0000
ROA not after:            Sun 01 Feb 2026 16:21:30 +0000
asID:                     16509
IP address blocks:        161.145.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/c526094a-5a20-4075-b740-9275828115d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/c526094a-5a20-4075-b740-9275828115d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bd:20:c4:9f:55:41:12:9e:51:a6:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c526094a-5a20-4075-b740-9275828115d5
        Validity
            Not Before: Nov  3 16:21:30 2025 GMT
            Not After : Feb  1 16:21:30 2026 GMT
        Subject: CN=02e8b83c-2259-4ac4-9f56-6dcf8c271371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:4b:64:fa:41:3e:14:5a:71:8f:58:2c:70:
                    a3:92:99:7c:c3:98:48:c5:b1:82:6a:68:15:93:57:
                    63:38:96:19:38:6b:c5:6e:fd:ef:0d:80:b7:92:ee:
                    30:ef:2d:0d:32:32:e0:c5:44:2d:d1:33:69:cc:f0:
                    d0:ec:5e:d2:ed:b0:98:51:5f:24:06:ae:f7:03:e9:
                    65:72:fa:fc:92:ce:4d:10:24:a1:7d:62:a1:ea:7f:
                    d9:83:5e:41:31:a1:85:42:b6:75:3f:e4:9e:df:18:
                    ff:0a:32:65:f4:04:d6:b3:d8:4b:45:cf:68:fa:0a:
                    ac:77:df:f3:47:30:c6:32:7d:15:01:08:53:d7:66:
                    93:0c:ae:43:c3:40:f9:3b:f0:80:d9:f7:b4:ae:ff:
                    c4:a1:4a:a7:32:60:4e:11:ad:f9:5d:5e:37:e9:42:
                    8f:6d:fe:43:25:e0:2f:37:01:1e:b4:35:f7:72:87:
                    22:07:63:87:7a:1a:0a:04:22:1f:ba:1d:fe:e1:dc:
                    32:58:5b:ae:81:e5:ce:9d:a6:b8:6c:a8:fc:02:80:
                    ab:7e:81:d8:b3:a5:af:ef:d9:2d:dd:da:f2:47:37:
                    dc:fe:f2:16:25:4a:e1:86:86:06:1c:1a:96:ff:61:
                    8a:1b:18:d9:80:6c:42:b0:70:f8:ab:47:fd:10:93:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:51:37:96:0C:91:4F:A1:BB:99:3C:DA:5F:A8:A6:57:CB:E1:2C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/2116b086-e1da-3bfc-89d5-1d25bf0fa618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5/c526094a-5a20-4075-b740-9275828115d5.crl

            X509v3 Authority Key Identifier:
                keyid:4B:2E:CB:61:67:71:1D:EC:4F:26:1B:44:BC:CE:DC:9C:68:62:D1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c526094a-5a20-4075-b740-9275828115d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.145.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:09:7d:2e:98:7d:93:a9:89:d9:83:65:d2:4f:48:5c:c3:04:
         1d:e3:69:c1:a2:e8:63:c9:e7:39:d9:fb:f5:c3:fe:58:3f:a4:
         94:19:e4:e7:93:6d:3d:76:43:84:f8:72:dc:23:f4:0f:b2:d2:
         59:b1:f8:ae:18:bb:1e:a0:16:33:d5:6b:c9:c3:d1:f9:ef:74:
         d5:07:5b:16:64:46:57:c4:6f:68:2e:a0:be:71:4e:39:fe:bf:
         ab:97:18:ad:79:65:4d:d9:be:f9:26:fb:9a:4c:e6:8e:63:6b:
         73:3a:3c:03:0e:eb:cb:ea:fc:15:3b:ae:31:ff:db:f1:29:7f:
         8d:ad:26:d2:38:a8:e6:40:76:f1:89:23:0a:c8:1b:c8:7d:e2:
         ca:c1:2c:a0:c3:5e:27:38:b1:da:21:7f:b1:5b:5f:7c:29:b9:
         9b:f3:53:a8:7b:c8:91:54:0e:42:d9:ac:18:7a:19:7c:fe:a6:
         bc:1e:5d:62:03:c9:3a:0b:94:41:e2:5c:e9:8f:32:4f:76:1f:
         5f:22:c8:7b:79:58:85:9a:43:bf:c9:86:b7:43:ec:95:a3:74:
         5d:f0:49:8d:2d:b7:39:11:37:fa:88:c3:9a:8b:cf:ab:5a:95:
         0a:79:fc:95:73:8e:c8:fd:e4:eb:0e:1b:81:fe:85:82:4e:fa:
         79:b2:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:41 2025 by rpki-client