Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa
File:                     02116e6d-8286-3367-ab7d-9693bb8dac50.roa (raw, json)
Hash identifier:          +lbxV8nFj6OCPPiNBdZfxn35ZB9y2q1xKG2RULzAPrw=
Subject key identifier:   78:DD:24:36:C7:74:87:FE:9D:2E:88:87:E5:88:82:F5:7F:02:F8:6D
Certificate issuer:       /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Certificate serial:       010D0C9F4328584DEB15E810A9EB8DA078709F80
Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     59
IP address blocks:        128.104.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:e8:10:a9:eb:8d:a0:78:70:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=53edc4fe-e194-4d38-81ae-d4f54cb543f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:96:8e:7c:c6:8a:45:32:71:4b:df:f4:1c:b8:
                    ca:33:ca:58:a1:7c:98:bc:7d:5f:5d:3f:fb:84:b4:
                    a3:54:ab:78:07:8c:e4:06:3c:42:0a:0e:ca:59:e4:
                    da:f8:b1:a5:5e:14:df:d4:fc:9a:ee:7a:de:4c:d4:
                    6f:f6:dc:06:a1:5f:d4:7a:40:82:cd:c5:6c:9a:c5:
                    cc:85:c5:61:c7:6f:88:c9:4d:e8:6b:01:87:c5:c5:
                    86:90:95:a6:a6:38:bf:88:97:19:5b:95:e7:a4:6b:
                    d2:ea:49:42:d6:d7:c1:8f:e2:0e:fa:3c:87:70:a6:
                    48:cc:c8:79:05:3f:6e:ab:14:c8:fe:9f:9a:6d:b2:
                    56:cf:5b:fc:e5:cc:ca:32:0a:12:3c:bf:69:e5:8c:
                    00:b8:0b:39:ab:08:20:b8:be:94:11:4c:1c:f8:77:
                    9f:4e:54:f4:b2:0a:5d:59:a5:33:3c:3a:b1:e0:39:
                    5f:39:e5:fe:07:a3:45:ed:61:b7:cf:e5:ad:fc:e0:
                    1b:a9:36:3d:d1:12:28:09:0c:6c:34:3e:ed:1e:b9:
                    91:25:b5:89:a5:eb:75:13:91:00:b9:4d:3e:ae:a8:
                    27:fb:bd:ce:af:c9:30:fb:a0:52:90:47:27:42:b7:
                    e3:00:04:40:77:91:bd:86:7e:17:f9:b8:50:af:5b:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:24:36:C7:74:87:FE:9D:2E:88:87:E5:88:82:F5:7F:02:F8:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:85:2a:7e:18:8c:50:11:32:f1:a3:bd:95:e7:99:bd:10:
         65:a8:6e:1d:56:8d:14:d9:ab:38:b6:b4:f3:cb:6a:b1:3b:c0:
         aa:fc:d8:be:d0:cd:50:dd:03:a1:78:c7:70:c0:3c:ae:27:31:
         db:64:65:af:68:4c:a4:cd:f0:eb:49:53:31:63:d7:1d:7d:38:
         08:09:4c:8a:18:8f:8b:3c:be:87:eb:f7:86:8e:10:c6:94:af:
         4b:8d:ff:d3:e9:e6:21:50:76:08:f1:8d:db:93:12:cd:d5:cf:
         be:57:e5:f8:f0:6d:6d:96:46:f6:ca:fc:b5:fe:a9:87:28:b7:
         29:b7:95:e6:bf:9a:c5:d5:f5:52:9c:af:a6:6e:03:ca:cf:25:
         33:4d:5e:0d:40:78:f1:f5:fb:45:b0:03:a8:57:04:f7:e8:8c:
         c7:69:a0:3e:1f:c0:38:05:bf:17:fa:ed:f2:36:63:13:2d:b0:
         4b:26:14:56:78:66:25:cb:75:49:a9:37:4b:2e:0a:12:97:2d:
         5d:25:64:36:a8:f9:f2:93:1b:72:a8:5b:ee:b5:a7:c4:5c:e6:
         a7:94:c5:e7:f8:81:91:45:d1:19:d2:87:70:25:eb:b7:f4:65:
         84:44:bf:91:32:db:35:21:e1:96:cd:0e:f5:4d:cd:3c:c2:8f:
         c6:7c:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:54 2026 by rpki-client