Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/d8b59a5f-57c3-3ab5-b823-e840a4c41834.roa
File:                     d8b59a5f-57c3-3ab5-b823-e840a4c41834.roa (raw, json)
Hash identifier:          fUTB8u1yFAh0pYtgHYpjH70J0SYt9nu+ULh/yUzzbb8=
Subject key identifier:   E1:E0:2C:DF:62:C1:FA:72:5C:9C:9B:B9:B4:FF:42:7C:A9:F4:56:8B
Certificate issuer:       /CN=e05683cd-b877-4c11-9422-8ca23ab1b633
Certificate serial:       010D0C9F4328584E228A6CC9AA6050475562D200
Authority key identifier: C8:2A:60:B0:02:C4:04:AA:67:D3:7D:61:63:B7:FB:45:88:1C:5B:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/d8b59a5f-57c3-3ab5-b823-e840a4c41834.roa
Signing time:             Thu 11 Jun 2026 09:44:54 +0000
ROA not before:           Thu 11 Jun 2026 09:44:54 +0000
ROA not after:            Wed 09 Sep 2026 09:41:27 +0000
asID:                     852
IP address blocks:        161.115.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:8a:6c:c9:aa:60:50:47:55:62:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05683cd-b877-4c11-9422-8ca23ab1b633
        Validity
            Not Before: Jun 11 09:44:54 2026 GMT
            Not After : Sep  9 09:41:27 2026 GMT
        Subject: CN=7bcf04fb-a46c-4fde-a737-df4a4744a267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:36:49:ef:e5:61:05:1d:23:9d:24:5c:cf:
                    1a:da:46:9e:0d:90:6b:c4:2d:90:95:c1:ea:80:a6:
                    09:f6:42:33:9f:3f:54:ad:68:b0:01:9a:f7:dd:f7:
                    bc:bd:3b:2a:82:dc:99:cd:d7:cd:e4:aa:a8:b9:a9:
                    7d:9d:b0:60:95:22:af:a6:19:4a:ac:be:ec:72:0a:
                    4e:99:50:34:c0:5e:fe:40:f9:21:35:51:fa:ff:1a:
                    dd:99:9b:8f:de:15:0c:50:3e:5e:65:3e:5a:ba:68:
                    c3:83:6e:4d:54:bd:6d:77:03:80:b1:73:e0:b3:0c:
                    3b:51:b8:40:dc:64:9d:03:ed:ac:17:f4:b7:b1:31:
                    88:e1:06:9f:10:53:02:9e:6b:03:fa:36:e0:24:e5:
                    b5:6d:c2:c1:bb:09:5d:4d:c5:4c:cd:cd:81:7f:1a:
                    bf:94:fe:91:da:51:41:d6:8a:bc:70:48:a8:83:ea:
                    af:45:38:69:5a:b6:4c:84:07:79:e2:49:fe:ec:f7:
                    63:1b:2c:25:f4:01:70:33:86:2a:3a:ec:01:55:08:
                    6a:3e:ef:d1:bb:10:f5:2e:11:d3:b9:22:52:ca:7a:
                    62:0a:f7:2e:9c:7f:a0:f5:2f:32:75:a2:c1:18:5f:
                    6e:a2:75:60:26:82:7d:cb:41:7d:fe:26:73:75:f6:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:2C:DF:62:C1:FA:72:5C:9C:9B:B9:B4:FF:42:7C:A9:F4:56:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/d8b59a5f-57c3-3ab5-b823-e840a4c41834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633/e05683cd-b877-4c11-9422-8ca23ab1b633.crl

            X509v3 Authority Key Identifier:
                keyid:C8:2A:60:B0:02:C4:04:AA:67:D3:7D:61:63:B7:FB:45:88:1C:5B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e05683cd-b877-4c11-9422-8ca23ab1b633.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:a9:28:48:12:af:64:59:e5:2f:4b:5d:17:43:db:fd:a4:
         8a:5e:83:d6:8b:2e:f0:0e:2b:02:87:c2:5c:1f:c6:bc:9b:f3:
         4e:4d:d1:76:4c:07:68:e8:72:c1:66:ef:b8:27:1a:c6:3e:23:
         35:46:d7:21:a6:33:ea:65:3b:f9:e1:9f:57:c5:41:66:d4:f9:
         29:56:ea:4d:de:19:30:bd:64:62:97:f7:c1:4e:22:58:0c:dc:
         61:03:4e:be:04:aa:a0:63:f9:a3:57:39:74:06:01:f7:f2:1e:
         23:25:3a:9d:50:d2:21:45:c8:9f:61:14:29:25:1e:f3:d5:34:
         81:83:4c:ec:c9:25:5d:89:de:fd:82:e7:96:66:3e:03:cc:67:
         4b:3e:e6:e9:fa:1e:11:24:5e:47:a4:f9:3a:13:07:75:f1:06:
         a7:cd:72:f7:e2:0d:fb:83:de:f2:45:49:64:5a:b9:70:98:1d:
         42:25:02:63:07:e2:2c:58:ea:e2:72:3d:25:fc:6d:c9:79:4c:
         e6:f3:c7:d5:78:9b:e8:90:12:11:6a:dc:65:40:8c:d9:6c:09:
         c8:5a:ad:cd:4d:01:c4:18:f1:b2:5b:f6:db:60:7e:eb:41:d1:
         66:23:57:35:e6:00:2d:07:de:04:40:3b:6f:d5:3e:95:ca:0c:
         b4:49:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:45:11 2026 by rpki-client