Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/af35e73a-a222-3c0e-a09b-88166bdb2cb1.roa
File:                     af35e73a-a222-3c0e-a09b-88166bdb2cb1.roa (raw, json)
Hash identifier:          FxeHc8VHjFzEk6jT9ylrO/l+k+JXUVAAkfQ0E3Q7goQ=
Subject key identifier:   FD:19:6B:F6:5E:32:5D:2A:73:5A:73:21:16:A1:1C:30:0F:3E:CF:68
Certificate issuer:       /CN=e05683cd-b877-4c11-9422-8ca23ab1b633
Certificate serial:       010D0C9F4328584E228A92867534B55BCBAFA100
Authority key identifier: C8:2A:60:B0:02:C4:04:AA:67:D3:7D:61:63:B7:FB:45:88:1C:5B:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/af35e73a-a222-3c0e-a09b-88166bdb2cb1.roa
Signing time:             Thu 11 Jun 2026 09:45:12 +0000
ROA not before:           Thu 11 Jun 2026 09:45:12 +0000
ROA not after:            Sun 23 Aug 2026 00:45:09 +0000
asID:                     53735
IP address blocks:        161.115.128.0/24 maxlen: 24
                          161.115.129.0/24 maxlen: 24
                          161.115.130.0/24 maxlen: 24
                          161.115.131.0/24 maxlen: 24
                          161.115.132.0/24 maxlen: 24
                          161.115.133.0/24 maxlen: 24
                          161.115.134.0/24 maxlen: 24
                          161.115.135.0/24 maxlen: 24
                          161.115.136.0/24 maxlen: 24
                          161.115.137.0/24 maxlen: 24
                          161.115.138.0/24 maxlen: 24
                          161.115.139.0/24 maxlen: 24
                          161.115.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:8a:92:86:75:34:b5:5b:cb:af:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05683cd-b877-4c11-9422-8ca23ab1b633
        Validity
            Not Before: Jun 11 09:45:12 2026 GMT
            Not After : Aug 23 00:45:09 2026 GMT
        Subject: CN=efc31195-c4a5-4950-8b62-2351b559e0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:d4:1f:f3:38:93:8a:b7:b1:c3:9a:6c:73:
                    6c:f8:99:34:f7:6f:14:53:ac:36:4e:93:9a:6c:21:
                    13:e8:6a:f5:20:85:42:ba:42:9f:29:82:a4:cd:fb:
                    06:8f:b6:cf:9b:89:71:e1:dc:fe:0f:e3:d2:72:49:
                    f9:0c:5e:98:91:2f:8f:ae:53:15:46:17:4f:32:b6:
                    ca:da:17:13:59:52:bd:e6:3b:0a:17:c1:ac:ab:fc:
                    ff:d9:62:50:13:df:9c:df:8e:cd:fc:cf:08:fb:60:
                    e0:25:23:c3:3f:39:c3:5f:f0:62:a5:b1:f8:d2:24:
                    d1:1b:50:20:80:cf:be:12:dd:c6:91:a4:63:11:e6:
                    42:94:43:dc:a0:d3:db:3e:eb:c0:97:ba:70:ba:45:
                    7e:7f:37:fe:03:b4:6d:68:e6:0f:e8:60:08:13:01:
                    0a:fd:88:e0:79:c3:54:7a:8e:5b:e4:ad:f2:d8:e6:
                    23:b6:56:ed:43:74:14:f1:8c:c2:13:35:ba:d8:d5:
                    ba:0d:4f:d9:72:bc:da:cb:ae:66:c2:25:08:5e:9f:
                    b0:f6:55:de:87:26:aa:fc:6a:1f:dd:57:67:e6:b6:
                    8a:df:df:c3:05:e8:41:45:4c:97:34:2d:02:62:fb:
                    a8:75:9b:1a:9c:67:01:d0:7f:36:fb:f5:cf:79:d3:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:6B:F6:5E:32:5D:2A:73:5A:73:21:16:A1:1C:30:0F:3E:CF:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/af35e73a-a222-3c0e-a09b-88166bdb2cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.crl

            X509v3 Authority Key Identifier:
                keyid:C8:2A:60:B0:02:C4:04:AA:67:D3:7D:61:63:B7:FB:45:88:1C:5B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.128.0-161.115.140.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:18:3c:16:a9:0e:65:cd:0b:64:5e:ff:20:59:62:4e:49:2a:
         1a:8e:61:a3:78:d4:da:dd:fe:e5:a5:78:44:39:f6:a2:42:24:
         04:8a:8f:6a:31:a5:1b:f4:64:f6:53:78:14:0f:de:c1:41:e1:
         ea:49:4f:b7:23:bf:eb:5f:72:52:0d:38:b0:b2:1a:ad:dd:66:
         f9:b9:4d:2a:40:8b:86:11:88:43:bd:63:60:10:ad:1d:5d:92:
         00:56:a9:01:a2:c6:72:d5:55:c8:0a:ba:04:8a:fc:f7:62:b2:
         ca:77:12:d5:cf:da:9c:99:e1:ed:4b:07:44:1f:9b:e4:72:c7:
         69:d3:fe:ad:70:9e:97:3a:f1:0c:59:cc:f7:ba:5b:78:7c:2d:
         87:ab:f0:6e:b4:eb:58:6a:6b:27:85:5f:39:d1:a5:c1:d1:51:
         d4:6c:45:32:09:b3:06:84:8e:03:b6:16:14:84:7e:14:ee:7c:
         53:af:99:3e:31:7b:a0:64:43:73:3e:d7:da:70:d9:23:7d:58:
         b3:b4:15:39:be:0b:86:14:6d:1a:68:8b:e5:8b:b3:f0:f3:98:
         47:09:c8:85:a0:bf:34:67:b6:c0:37:09:be:1b:66:96:bb:75:
         da:6d:d1:56:b8:22:67:a4:44:db:35:de:09:ec:d9:e5:40:9b:
         f7:aa:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:06:03 2026 by rpki-client