Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa
File:                     819d3888-df8a-3d32-a202-01632835d491.roa (raw, json)
Hash identifier:          IjOJyYULqtxtRVlmH1bIb7obMfmx9ODg2lv4XHOx3aI=
Subject key identifier:   77:C4:1E:2F:ED:48:C4:04:07:BB:46:07:94:79:58:19:1D:41:AC:0A
Certificate issuer:       /CN=1c066aa7-c91c-4752-a554-3ac416a79e4f
Certificate serial:       010D0C9F4328584E07008D2D8A73DDE405D7E580
Authority key identifier: 46:8F:65:72:6A:D4:5D:EF:C0:7F:4E:90:8E:93:2C:F9:07:DB:05:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     14618
IP address blocks:        161.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:8d:2d:8a:73:dd:e4:05:d7:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c066aa7-c91c-4752-a554-3ac416a79e4f
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=38e76bc9-ea96-4e00-afcc-bb66cd835127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c9:03:81:10:bb:06:69:51:d2:63:c2:94:ce:
                    8e:a7:a8:75:29:89:29:f2:69:3d:33:54:d0:22:99:
                    a6:66:1f:0b:c5:b5:e3:16:a5:7c:94:9b:06:33:7f:
                    03:68:76:79:7a:d2:5b:ec:bc:fe:19:0c:a0:d8:5c:
                    fd:3e:28:67:ee:98:58:8f:39:43:4b:55:4c:30:82:
                    ae:b0:a1:03:46:33:52:bb:1b:0b:a0:8f:31:2d:85:
                    ec:e9:8c:15:ac:76:ec:d4:49:38:2b:f2:1b:79:2a:
                    f2:28:d9:79:9c:17:55:72:45:6a:0f:4b:48:d4:96:
                    b5:0e:de:0c:44:55:40:3a:ef:b2:6e:61:68:2a:fd:
                    08:c8:3c:e0:e8:02:7f:27:b6:f2:59:2f:b5:43:43:
                    31:4b:0e:67:6b:a1:2e:cf:b3:b6:e5:c7:57:16:26:
                    36:f6:25:c1:c6:34:29:7a:00:35:26:90:16:4c:2f:
                    11:27:ce:1a:c1:f5:3a:c8:6b:68:4e:30:75:45:22:
                    c8:21:71:b1:55:01:fe:20:4b:c0:10:1b:98:33:72:
                    7f:4a:49:7e:28:19:84:c0:e9:2d:88:fc:b9:39:d7:
                    43:10:f9:97:3b:11:59:c4:99:cf:e1:67:45:8f:5f:
                    d0:66:d4:23:28:4e:59:68:6b:d3:7f:fc:72:fc:7e:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C4:1E:2F:ED:48:C4:04:07:BB:46:07:94:79:58:19:1D:41:AC:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.crl

            X509v3 Authority Key Identifier:
                keyid:46:8F:65:72:6A:D4:5D:EF:C0:7F:4E:90:8E:93:2C:F9:07:DB:05:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.51.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:32:7f:77:a8:18:ca:e1:e6:ce:53:59:dd:5d:72:a3:c7:db:
         c8:77:39:67:07:90:7b:9c:6f:bd:9c:c9:e6:fe:ae:c1:5c:9e:
         af:ed:39:7a:1e:80:1a:e9:cd:e8:06:6b:33:4b:8b:d1:1b:6f:
         65:10:f6:14:a9:df:6e:8f:31:5d:86:aa:09:27:48:29:8d:a7:
         44:68:07:42:66:db:c2:b1:ba:5e:dd:9e:a8:7a:56:12:12:99:
         8f:df:1f:7f:94:04:37:df:ed:06:b0:d8:20:de:70:fa:21:7a:
         6c:37:93:08:a9:d3:2a:6d:aa:5b:a9:f5:58:2f:c3:b4:2c:91:
         f3:5d:c2:eb:f6:a4:11:07:bd:6f:4e:97:8d:0c:0c:97:b3:ff:
         32:fc:12:34:6e:f1:cf:cb:f2:c7:60:f1:eb:a0:bd:68:ff:5a:
         d3:ca:8f:c0:d3:de:7e:82:54:77:a6:69:99:29:64:c8:13:86:
         db:59:7b:4c:35:97:20:7e:60:61:4c:e6:79:fb:a5:5a:c9:57:
         4e:4e:39:e5:a2:bf:88:63:7a:15:1e:23:52:27:6b:c2:fa:36:
         3a:f8:93:72:3b:0a:d3:bd:88:90:80:46:e8:a8:ba:2a:9b:e3:
         97:12:1e:03:d5:6a:be:51:c8:6c:30:e2:82:09:c5:cb:42:b2:
         66:68:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:49:14 2026 by rpki-client