Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa
File:                     161f850d-cb53-3750-9d41-e3214c40e3ba.roa (raw, json)
Hash identifier:          4AWaQqj/zgGH5wtrleG9v4reV+fEV8m4zDS0fBANXs0=
Subject key identifier:   50:41:4D:98:8A:DA:78:9C:C9:79:C4:8F:C8:08:43:0E:9E:1A:C0:3B
Certificate issuer:       /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
Certificate serial:       010D0C9F4328584E1E4450F983DF94994C6B6900
Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        216.153.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:50:f9:83:df:94:99:4c:6b:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=dc53b1d7-281f-4b15-bad0-75204a7539a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:6e:ad:2c:f0:90:2b:2a:6c:2b:38:f7:ce:
                    96:b7:d1:28:c7:2c:12:17:77:86:41:5a:ec:e6:24:
                    82:08:c2:10:08:85:39:5c:3c:fc:9e:c8:7a:9d:af:
                    d2:56:56:9a:43:d7:5d:e6:b8:43:dd:a6:49:76:06:
                    7c:23:11:1d:a1:e2:2d:8d:e7:ec:0b:94:0a:ee:c2:
                    8f:4e:74:69:1b:2d:bb:b5:7b:15:07:3f:94:21:36:
                    a9:30:2d:5f:cd:39:7c:89:ed:fc:a8:34:f2:9c:22:
                    12:8b:9f:ae:a4:41:bb:cb:b2:8e:24:2b:d6:57:c3:
                    37:6a:06:95:2a:8d:c7:bb:8e:2e:99:19:1c:46:a7:
                    63:05:b0:8a:20:0f:ae:d2:80:50:32:5e:4d:75:b4:
                    42:27:0d:10:98:5b:90:26:88:59:45:0e:c1:8d:a6:
                    3f:8c:a0:66:4f:6b:9d:df:3f:2e:ba:f0:17:d4:2f:
                    66:67:60:97:d3:cc:d5:b3:a6:de:1d:bb:9c:36:98:
                    33:30:cc:71:9a:6b:1d:e0:d9:13:82:05:8a:f6:13:
                    95:f0:f2:24:81:f7:77:60:91:3a:34:af:8c:b1:47:
                    1e:fc:be:86:83:57:20:e7:c5:d9:64:be:7e:6c:f2:
                    85:94:37:f5:9b:ea:00:4a:69:e2:44:c2:e1:3e:00:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:41:4D:98:8A:DA:78:9C:C9:79:C4:8F:C8:08:43:0E:9E:1A:C0:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl

            X509v3 Authority Key Identifier:
                keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.153.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:77:b5:a6:7d:2a:b7:9d:04:ea:2b:12:fd:d1:b3:3d:a8:58:
         20:c9:b0:93:31:b7:5c:1c:24:53:90:c2:7f:ec:8d:20:de:5c:
         ef:5e:5e:d5:65:91:b2:bd:fe:2d:e0:b6:c6:89:fe:d8:74:0a:
         fd:67:1d:d1:04:11:cf:45:a7:2c:c8:88:13:75:05:66:e7:b1:
         d6:de:06:95:d5:50:b8:6e:5e:8b:4d:66:1e:33:ec:76:da:f0:
         e8:3a:7f:f7:5b:84:e0:5c:f1:84:66:16:61:26:59:97:5b:09:
         53:8d:7e:bf:c1:e6:d0:c8:41:74:04:4b:4c:56:89:5b:ab:65:
         f4:4d:f9:58:bd:98:57:8b:82:56:29:dd:df:19:b5:7b:1f:8b:
         86:fa:e4:a1:ce:b4:7c:d2:b3:fa:dd:4e:e3:64:64:99:19:48:
         4f:46:62:22:74:3f:57:e8:8f:e0:2c:a8:eb:07:20:f0:5a:ce:
         17:72:f2:9b:c3:57:6c:d6:74:01:e2:69:bd:94:81:69:26:ae:
         25:c6:6a:ac:4b:b7:f7:39:f7:c0:b2:c3:b1:78:37:b9:56:1f:
         7a:d3:9e:bd:80:d8:8a:f1:88:17:d0:9b:f0:c0:87:51:11:f7:
         2e:55:d5:0d:39:cc:76:4c:ad:6b:9b:25:07:95:f8:66:76:f6:
         58:da:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:56 2026 by rpki-client