Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa
File:                     035def30-19a3-3770-96c6-3387b1f7f2e2.roa (raw, json)
Hash identifier:          Rx+yus5g5EGZ5e8sdtga/8XsW1bYHHRaUMM7d+J0DVs=
Subject key identifier:   9D:57:C7:01:E1:29:B9:C8:B6:C0:D9:F4:48:00:56:8C:21:EE:39:6B
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E3E5F3822073FBDD9901989D4
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16696
IP address blocks:        161.38.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:38:22:07:3f:bd:d9:90:19:89:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=af80179d-87a2-4d80-89bb-9e1a35f6c2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:ec:28:48:44:a8:85:45:e1:23:6e:a7:d3:
                    5d:31:9a:d4:79:59:c1:1a:56:65:33:4f:95:4c:af:
                    bf:37:cf:4c:61:a2:f7:5a:8c:81:83:6e:8b:a2:6c:
                    41:4e:15:39:4d:3f:0f:9b:1c:eb:0b:91:8c:1c:c6:
                    b9:e2:52:b7:c6:5a:b7:87:ae:16:e5:5c:b8:18:3e:
                    ae:37:b3:9a:9f:cc:d3:b7:bb:d7:ba:e6:8a:1c:44:
                    eb:46:ae:dc:2f:55:b8:ce:3b:a7:27:b8:8e:a7:be:
                    e4:f9:13:eb:6a:0e:1c:6c:b6:4f:b3:9a:5c:73:14:
                    e5:95:f3:f4:ec:71:5a:6a:c9:5f:13:dc:b8:7d:50:
                    93:4a:61:09:50:0f:96:5d:10:a8:65:fa:0e:3d:e6:
                    0e:29:08:96:64:e8:6d:63:b5:a5:bd:65:2d:80:26:
                    47:3a:a6:a3:aa:4e:36:f0:c6:fe:e5:26:30:a6:fa:
                    c3:a7:6b:d0:c2:c1:24:af:7c:bf:4f:da:f7:dd:56:
                    5f:82:27:23:76:65:09:12:64:a5:dc:44:dd:1c:f6:
                    3a:dc:97:96:0d:f2:9e:aa:f7:d1:af:cd:c8:18:a3:
                    2e:cf:7a:6c:90:46:76:41:21:0d:7b:db:74:90:19:
                    9b:fe:56:91:4a:c5:6f:ce:b3:65:3b:43:77:1d:18:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:57:C7:01:E1:29:B9:C8:B6:C0:D9:F4:48:00:56:8C:21:EE:39:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:66:90:a8:28:cc:94:2c:55:7a:72:b0:7b:26:23:40:9a:16:
         ee:e9:42:ec:e9:6f:b7:6a:5c:09:a5:20:dd:aa:d8:b6:7f:bd:
         8c:6f:6b:04:af:e6:2c:97:ff:c7:9c:7f:b7:a2:bc:99:a8:f8:
         a3:b6:4e:13:da:d0:71:f0:95:65:63:98:37:de:53:9b:1c:0f:
         e4:7c:1a:1d:7d:28:71:2c:48:b8:66:de:02:cb:09:d6:c6:f6:
         fd:2f:72:6a:ff:49:23:39:7c:7a:2f:33:6e:9f:46:09:ee:14:
         b4:31:58:02:a7:70:15:66:b5:fd:6f:d0:b6:e5:61:ec:f1:5b:
         54:e9:f6:13:70:a2:28:2b:ef:69:1e:eb:19:33:50:aa:3f:55:
         89:d9:21:07:cf:d8:78:45:9d:29:8b:66:80:bd:65:2b:d2:12:
         2e:6b:04:ed:ee:25:c7:9c:53:c8:a9:1d:30:2d:4f:d1:12:6f:
         a2:b5:75:3d:78:88:b0:a2:d8:4e:ad:24:19:20:4d:f5:c2:2a:
         71:8e:af:76:ae:3b:d9:6c:eb:06:b0:7e:df:36:3f:08:3a:58:
         48:94:d4:ab:a2:bf:a9:f8:d3:ab:f8:f2:f4:d8:c9:b5:08:f0:
         fa:a7:37:db:b1:04:36:9c:cd:dc:b0:7a:13:b7:de:31:62:17:
         4b:e6:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:14:15 2026 by rpki-client