Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/af35e73a-a222-3c0e-a09b-88166bdb2cb1.roa
File:                     af35e73a-a222-3c0e-a09b-88166bdb2cb1.roa (raw, json)
Hash identifier:          tmcvgKCZAR+vI9gZg/s66oHStJ7ZDY9MkeoSKPUTaeg=
Subject key identifier:   8D:15:4D:B8:1F:D0:C4:70:3D:10:49:F1:2D:C2:AC:8E:F6:EA:BC:FE
Certificate issuer:       /CN=e05683cd-b877-4c11-9422-8ca23ab1b633
Certificate serial:       010D0C9F4328584EA795127F8EFAA133A94A0100
Authority key identifier: C8:2A:60:B0:02:C4:04:AA:67:D3:7D:61:63:B7:FB:45:88:1C:5B:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/af35e73a-a222-3c0e-a09b-88166bdb2cb1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53735
IP address blocks:        161.115.128.0/24 maxlen: 24
                          161.115.129.0/24 maxlen: 24
                          161.115.130.0/24 maxlen: 24
                          161.115.131.0/24 maxlen: 24
                          161.115.132.0/24 maxlen: 24
                          161.115.133.0/24 maxlen: 24
                          161.115.134.0/24 maxlen: 24
                          161.115.135.0/24 maxlen: 24
                          161.115.136.0/24 maxlen: 24
                          161.115.137.0/24 maxlen: 24
                          161.115.138.0/24 maxlen: 24
                          161.115.139.0/24 maxlen: 24
                          161.115.140.0/24 maxlen: 24
                          161.115.141.0/24 maxlen: 24
                          161.115.142.0/24 maxlen: 24
                          161.115.143.0/24 maxlen: 24
                          161.115.144.0/24 maxlen: 24
                          161.115.145.0/24 maxlen: 24
                          161.115.146.0/24 maxlen: 24
                          161.115.147.0/24 maxlen: 24
                          161.115.148.0/24 maxlen: 24
                          161.115.149.0/24 maxlen: 24
                          161.115.150.0/24 maxlen: 24
                          161.115.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:12:7f:8e:fa:a1:33:a9:4a:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05683cd-b877-4c11-9422-8ca23ab1b633
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4f494dc2-555c-4d56-8611-56259518c76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:81:6a:a9:25:a3:88:95:51:fd:e9:a3:51:d8:
                    42:89:59:bc:ee:3a:b1:16:e2:1a:b8:b0:b0:1d:50:
                    d1:64:c5:01:23:ec:e4:ee:5c:ee:89:85:ed:2f:9f:
                    d0:e7:2a:bc:f0:8c:90:ee:fa:45:2e:3b:6c:c5:83:
                    ca:3e:3d:4d:a5:dc:50:4b:ba:3c:92:a6:de:b8:68:
                    e2:2f:a2:9f:1e:3a:a8:60:ab:a5:10:d3:2f:f9:f2:
                    5d:f2:d0:9e:cb:e0:76:b1:96:72:2b:5e:a2:7d:09:
                    52:5d:d3:35:d8:07:6d:fa:bd:f7:f8:78:e5:f5:2f:
                    2d:27:a1:5a:47:04:62:48:97:1e:43:f4:9d:2d:09:
                    46:7d:07:c1:bf:c7:04:d2:73:60:69:a3:4b:ce:88:
                    60:19:6a:6e:7f:44:2e:dc:d4:c2:02:64:a3:61:04:
                    49:e6:37:e6:62:7b:c6:09:d9:68:a5:2d:1b:3c:0d:
                    03:f6:95:31:3a:63:c1:c1:b9:f5:86:a8:9c:fe:2d:
                    06:45:49:6c:ad:96:2c:c7:1e:ad:59:fc:bb:d0:59:
                    77:1d:8a:5e:cb:72:e6:0a:35:e7:70:21:49:85:63:
                    75:b4:df:09:b3:6f:4e:24:36:f1:80:74:c5:fb:03:
                    9a:9a:8e:c8:f1:cb:e1:fd:53:79:c6:03:1e:59:3e:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:15:4D:B8:1F:D0:C4:70:3D:10:49:F1:2D:C2:AC:8E:F6:EA:BC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/af35e73a-a222-3c0e-a09b-88166bdb2cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.crl

            X509v3 Authority Key Identifier:
                keyid:C8:2A:60:B0:02:C4:04:AA:67:D3:7D:61:63:B7:FB:45:88:1C:5B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.128.0-161.115.150.255
                  161.115.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:75:66:b4:4a:1a:6e:55:6e:ba:cd:29:2a:c7:e0:5c:92:11:
         0c:c8:55:c9:e2:3d:39:ed:f2:08:d5:a9:58:ee:1c:9b:04:93:
         79:e9:35:37:97:ab:b2:18:b7:08:76:b4:e0:28:90:29:d8:a9:
         33:c5:87:fa:2a:cf:02:53:97:ac:44:a8:b7:e7:55:23:99:fd:
         1c:5d:cf:09:b0:68:86:24:6b:c0:2c:1c:43:53:c1:42:c4:9f:
         a4:36:05:7f:b8:ae:2e:90:1b:f6:97:68:40:ff:a6:88:cf:6f:
         5a:7e:44:a4:76:a5:11:e3:00:3e:a6:45:a6:5e:0e:44:d4:21:
         67:7f:02:cc:b6:fd:d5:d8:a6:1d:7f:d9:5b:04:e1:8f:06:36:
         bb:16:7d:18:6b:32:5a:9a:1c:ee:54:70:f1:47:c8:7d:49:38:
         d5:36:86:60:84:91:e8:67:e8:dc:b5:84:a5:bf:d9:fa:3c:da:
         21:ef:76:c0:a6:32:ec:4f:ec:d4:4a:5a:85:bc:36:fb:9b:fe:
         57:08:ed:a9:47:fe:a0:4b:e8:71:b3:21:69:15:4a:a8:3b:3a:
         1c:41:12:f6:04:8b:bb:03:27:90:62:85:02:06:0a:ec:e5:08:
         24:97:e2:45:4b:8d:7c:1c:d4:34:78:e7:bd:b2:02:ce:34:7c:
         ff:50:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:48 2026 by rpki-client