Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/98f26e3b-e22b-39e7-a5c8-73d06c99c414.roa
File:                     98f26e3b-e22b-39e7-a5c8-73d06c99c414.roa (raw, json)
Hash identifier:          mbDUDr1qv3Gb58L2UevrWIKwm6rJ4BTLUsWD9q6vUB0=
Subject key identifier:   49:BE:A8:BB:9D:F6:03:31:72:A2:41:6D:81:87:EF:21:2F:FC:5E:1C
Certificate issuer:       /CN=1c066aa7-c91c-4752-a554-3ac416a79e4f
Certificate serial:       010D0C9F4328584A814642DAFB07BA46D6122700
Authority key identifier: 46:8F:65:72:6A:D4:5D:EF:C0:7F:4E:90:8E:93:2C:F9:07:DB:05:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/98f26e3b-e22b-39e7-a5c8-73d06c99c414.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        161.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:42:da:fb:07:ba:46:d6:12:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c066aa7-c91c-4752-a554-3ac416a79e4f
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=955f3276-53e7-49a7-8efc-50e10a58a120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:88:c8:2f:77:78:af:66:8a:6a:08:59:bf:
                    a9:67:01:a0:53:f0:af:3c:3a:62:5a:0a:bb:3b:7a:
                    15:63:8f:50:22:b0:fe:e5:fc:3e:66:89:b7:a5:65:
                    5e:29:fd:82:11:84:7c:64:66:db:e1:f3:e4:d3:7d:
                    c6:a8:58:da:33:27:06:67:68:69:a9:a9:b1:9d:bf:
                    9b:bb:7c:e5:85:5c:88:61:47:ef:ad:6d:54:91:59:
                    70:a7:8b:d9:42:91:e5:ad:a3:d5:00:16:c8:93:58:
                    89:8a:68:d8:f0:e1:67:3e:47:8c:04:c1:b1:c4:aa:
                    5a:3b:5d:34:76:ea:7f:f4:ac:53:ba:4d:47:bd:c1:
                    03:92:de:10:d5:a1:ec:9e:8d:09:3f:cc:65:09:a7:
                    67:0f:59:c4:c7:10:77:08:9a:32:8f:25:45:9a:76:
                    bb:8c:8d:89:0f:cf:8b:b2:eb:6a:f3:70:ca:76:5e:
                    c5:47:bf:3f:ae:34:d5:71:38:7e:c9:1f:a0:cb:7e:
                    e8:70:20:55:e5:e5:07:1f:f0:d9:2e:c7:60:29:3c:
                    40:f3:e0:db:b2:2e:ec:f5:78:b1:e2:5a:d7:b6:cb:
                    a1:7f:23:1a:cb:fc:eb:c2:90:65:06:30:53:83:74:
                    70:17:63:78:35:fb:f7:9b:25:98:ce:c6:02:90:13:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BE:A8:BB:9D:F6:03:31:72:A2:41:6D:81:87:EF:21:2F:FC:5E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/98f26e3b-e22b-39e7-a5c8-73d06c99c414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.crl

            X509v3 Authority Key Identifier:
                keyid:46:8F:65:72:6A:D4:5D:EF:C0:7F:4E:90:8E:93:2C:F9:07:DB:05:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.51.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:26:91:71:46:36:60:ec:0a:a9:36:90:04:29:0e:27:3a:42:
         88:72:a7:6c:0b:cf:fd:44:1a:61:29:3e:74:7e:5f:0d:e2:95:
         8c:ce:b9:a2:94:12:c1:cf:1d:aa:b0:36:6f:88:e5:b1:70:91:
         2f:54:bc:00:d4:88:ca:30:d5:c4:fc:60:3e:93:81:66:21:2d:
         1e:db:d0:dc:57:54:7f:f0:59:c7:b6:63:1c:be:3a:9a:bf:43:
         22:3e:05:f9:9f:e6:5a:41:49:e3:da:77:9f:bf:e2:a0:76:af:
         87:df:ef:cd:dd:7c:08:1b:22:52:c9:fd:02:a8:8d:31:a0:a1:
         ce:6e:5c:7e:e6:98:f9:71:97:63:80:ab:1d:a6:b3:26:14:ac:
         d2:96:9b:b8:07:0d:df:94:e9:3f:a5:92:e7:1e:cd:df:15:7d:
         b1:90:d1:13:24:cd:51:1d:c9:6d:1c:0b:e6:68:39:1c:89:bb:
         c2:a6:af:31:86:01:81:39:62:8a:cc:54:39:e2:e5:69:02:1f:
         b3:ae:06:55:90:ff:53:c7:1c:ff:43:fe:79:ef:d4:a1:77:70:
         e5:2a:80:2f:23:9f:9b:70:16:29:fd:88:55:ea:ca:ec:36:97:
         d4:1e:d9:99:3e:63:81:f1:59:ac:ef:3a:38:2a:36:e2:2e:51:
         f6:3f:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:05:56 2025 by rpki-client