Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
File:                     536a1a59-e74e-326e-909f-14a772e3d7fe.roa (raw, json)
Hash identifier:          Z1eNFSsLT27GDfvPh+gzfLoD45ShQJ9XIREZGMEe3XM=
Subject key identifier:   68:31:6F:8E:FC:AB:29:D1:18:06:64:41:6D:2D:BA:06:37:DA:ED:58
Certificate issuer:       /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial:       010D0C9F4328584D60E4F3F1DCC00F2620EB08D0
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        161.199.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f3:f1:dc:c0:0f:26:20:eb:08:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=9c3e25b2-0819-4e45-abc0-5a27cf720844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4d:bc:d3:68:63:31:be:cc:0c:af:07:ad:c7:
                    b0:bf:ef:74:6b:44:41:2a:ab:ce:d1:d9:cd:36:6e:
                    02:9c:0a:ea:a4:6b:fa:a0:b6:4e:6e:95:ae:69:11:
                    50:72:20:d5:01:af:3d:d8:5a:32:c6:ff:b5:34:f2:
                    7b:02:bc:af:08:f3:a4:24:6a:d2:ab:02:1b:23:f8:
                    ce:7e:66:8d:1b:b9:67:93:ea:ed:2b:58:3c:1b:79:
                    88:52:4b:91:e3:bd:1c:e5:0d:63:47:78:46:97:04:
                    65:09:57:96:d0:30:45:88:02:28:1b:7a:3d:03:2c:
                    f7:f0:48:1f:04:04:46:dc:e0:77:71:10:a5:62:28:
                    2b:0d:88:da:05:9d:92:77:74:f9:84:de:06:9f:58:
                    bd:d0:da:2c:a3:ec:7e:b6:68:86:52:49:56:42:49:
                    bf:82:c1:53:01:8d:8d:80:10:e6:da:6d:3d:05:40:
                    d0:4c:36:88:d3:ed:fd:60:13:1e:41:4f:4f:6b:16:
                    5f:00:51:bb:35:e6:c6:e8:23:bd:ea:b5:93:e4:05:
                    26:b5:84:40:f7:b6:0e:b1:aa:1b:f5:39:2e:05:0d:
                    01:cc:5b:fc:3f:1a:6b:1d:31:48:af:e2:90:3f:db:
                    61:b0:78:f6:40:af:36:a6:3f:73:19:f3:c8:85:e8:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:31:6F:8E:FC:AB:29:D1:18:06:64:41:6D:2D:BA:06:37:DA:ED:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl

            X509v3 Authority Key Identifier:
                keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:63:f2:59:43:a5:b8:5c:99:f6:3b:45:e9:ad:0f:e4:eb:
         5a:87:04:b7:83:69:de:5a:61:58:e6:be:34:7e:85:77:a9:3f:
         c7:4d:7a:3b:c8:69:ce:85:4f:1b:55:eb:c8:ae:6b:8f:7e:df:
         c5:01:7d:1f:ba:06:ca:6e:ef:df:b6:d5:0d:4b:21:8f:60:dc:
         19:ba:bc:4f:e1:47:be:80:fc:2e:16:3d:51:91:7d:ed:c8:5c:
         43:b5:0e:00:87:e5:66:e7:ad:d4:31:3b:56:e4:43:1f:7e:ff:
         cf:f1:f3:4e:32:f0:b2:e7:53:96:ce:a6:88:12:97:31:ac:c3:
         58:fc:cd:8c:0a:02:08:8b:9e:7e:2b:58:e7:0b:46:7e:e4:c7:
         38:dd:94:65:ae:47:0c:d3:12:a4:1d:2f:75:56:f1:d6:42:5a:
         fc:d6:ba:c8:ce:b7:73:22:10:fe:90:b9:50:5a:fb:2b:6d:7a:
         2e:6e:dc:61:38:b3:03:7c:b4:69:4f:db:f4:9f:4d:ef:a4:5b:
         ef:5c:58:15:4e:b6:c3:2e:16:7d:17:e0:ca:14:18:3a:ea:a8:
         1f:c7:67:a4:98:8c:3c:06:a1:89:25:68:60:1d:90:a0:45:e9:
         f0:3f:25:98:38:de:42:cc:9c:23:86:2d:32:b0:ac:19:fa:ae:
         f3:4b:69:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:50 2026 by rpki-client