Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/161a8341-c6c7-3037-a24c-b853ccda9d98.roa
File:                     161a8341-c6c7-3037-a24c-b853ccda9d98.roa (raw, json)
Hash identifier:          cOsBNbVJVjY9ecqOiUmmw6N8stA6N1UZHNHUXTlQLv0=
Subject key identifier:   6D:EA:91:46:96:63:3F:03:23:E9:E6:10:8E:9F:02:2D:D3:E5:97:46
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584F31B7C34CFE40BFB6CBF82740
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/161a8341-c6c7-3037-a24c-b853ccda9d98.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     15169
IP address blocks:        57.140.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c3:4c:fe:40:bf:b6:cb:f8:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=d428d381-1bf8-473e-9181-76ef19194e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:03:4a:2d:27:7d:6d:84:ef:aa:1e:05:61:
                    88:8e:40:f5:f2:3c:b8:88:48:2c:eb:ff:75:78:11:
                    11:53:a8:44:05:ce:3d:b2:84:15:22:07:24:55:c0:
                    3c:78:c1:a0:91:3a:b3:e3:1f:62:8c:c1:82:6a:e3:
                    da:61:84:f5:07:bf:2a:c5:17:df:9f:2f:91:d7:d5:
                    45:e5:d4:ef:31:6e:5d:0b:76:e8:9b:a9:e5:68:2a:
                    a9:50:17:f7:13:4c:07:b9:ba:64:13:4b:d3:34:9d:
                    0e:47:ea:44:c5:06:e8:c9:8d:6c:c8:b2:46:83:2d:
                    29:7a:79:03:93:96:02:3c:41:98:9f:d4:22:2e:e6:
                    45:4c:fa:65:b3:51:5e:64:3e:d6:05:fc:ab:9b:3b:
                    c7:1c:cd:c8:b7:64:c5:60:dc:a1:76:de:84:be:1e:
                    6a:27:5d:93:5c:c7:6c:ae:bf:7c:e2:5c:b7:a8:02:
                    3a:23:9a:d8:5f:c9:22:33:fe:18:c4:f5:32:86:04:
                    cc:08:73:10:07:1b:eb:30:0e:bd:42:3d:d2:37:ff:
                    fe:83:6d:65:15:57:51:b1:67:b5:8c:04:15:da:6b:
                    82:4a:3d:d3:8b:4b:4b:b0:5d:b3:da:38:1f:fd:16:
                    a5:b9:c5:b3:ce:ff:27:0f:91:08:e0:03:03:13:07:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EA:91:46:96:63:3F:03:23:E9:E6:10:8E:9F:02:2D:D3:E5:97:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/161a8341-c6c7-3037-a24c-b853ccda9d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:67:35:28:10:53:53:c6:95:01:8b:53:fa:68:c1:80:1a:
         70:bb:b1:bb:97:ca:d2:63:36:b0:9c:64:27:53:a6:73:87:07:
         04:9d:ae:95:e5:50:c3:45:5e:0d:1c:bf:23:d8:3e:69:7d:c9:
         12:59:fb:0f:94:e0:bb:dc:df:47:a2:4d:51:24:e8:f9:f2:c5:
         e8:8a:5c:03:e5:cf:e4:c5:2f:85:09:f8:44:df:0e:9f:10:84:
         28:54:f6:21:db:1c:af:0a:0e:1e:d5:59:d3:2c:f3:04:c1:99:
         7a:b5:13:bd:88:4e:4f:7c:0f:a5:0b:fe:ac:ab:d3:7d:32:69:
         0e:7a:3c:9e:d5:fc:64:14:ed:60:bc:0a:c0:03:60:e0:27:7c:
         84:19:21:5c:9d:df:7f:ef:54:a2:57:73:dd:1f:34:d4:90:78:
         49:39:f3:99:79:92:9c:4f:5f:5b:56:2a:e6:d8:57:b8:2f:bf:
         bc:2b:e8:8c:52:5b:87:a4:26:6e:c9:10:50:56:55:89:dc:35:
         d0:23:5e:e3:7e:65:bb:dc:28:32:5c:9a:eb:db:62:94:f0:3f:
         32:33:27:e2:1a:9a:df:2e:c3:46:a2:5a:5b:ae:27:59:f4:a9:
         02:44:35:9f:68:fe:58:f6:8a:9b:5d:f3:bd:0b:1f:57:3c:2e:
         4c:64:ba:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:19:55 2026 by rpki-client