Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
File:                     0be8b0af-8061-36c3-8885-a1d714a9af7a.roa (raw, json)
Hash identifier:          8XH/YOLiZfRoHSx0S0jMu4/WiZqluh0XoJbMx/4+eBA=
Subject key identifier:   2A:A7:C2:EF:0B:D3:0D:3B:DA:FC:DF:0B:A4:C0:AE:C5:CF:1C:4C:CE
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584DBD059B67C9DE2A0DA66599C0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     10430
IP address blocks:        164.116.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:9b:67:c9:de:2a:0d:a6:65:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=98a69245-1ea2-479a-b299-5bd1f27789f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:95:5e:74:81:a1:17:7c:de:b1:20:dd:62:
                    dd:71:3d:20:8e:9e:e8:f6:75:e6:3b:43:5e:b5:9d:
                    b1:be:4c:74:b7:9d:ef:38:27:7c:ba:b1:1a:af:02:
                    57:16:0d:71:62:3f:8f:ce:77:d4:b1:4b:8c:c1:5c:
                    43:0f:d0:f9:b4:70:e5:e1:b9:0f:f3:4b:d1:79:d1:
                    a3:a9:79:6e:8b:9d:93:04:67:c0:8e:d5:38:16:16:
                    b1:6e:c4:8f:55:cf:c5:f7:95:1c:ff:1c:c9:dd:45:
                    27:de:c1:df:e9:20:38:5e:4f:6e:1c:00:3b:72:78:
                    e2:cd:31:71:9a:d3:3d:a2:cd:f8:1c:94:5d:5e:16:
                    ca:2f:93:b3:06:ca:a7:0e:fe:a3:0f:fa:e8:1a:b3:
                    c6:24:c1:23:0f:2a:9f:75:ad:f5:20:a3:7b:05:01:
                    6c:4d:25:df:cb:b9:59:58:d9:83:96:3d:03:fe:09:
                    c7:ef:2f:54:f6:6f:e4:27:0d:15:e2:91:49:b5:53:
                    60:72:dd:37:69:6d:0f:d9:bc:b1:08:96:37:8f:bf:
                    f4:d6:67:b4:45:8a:ce:f0:b9:e5:50:27:7b:8b:bc:
                    ff:29:d1:65:0a:7b:bf:75:b4:12:cd:f5:21:5d:af:
                    69:15:3f:39:5f:b5:32:47:50:9f:6f:08:bf:38:f3:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A7:C2:EF:0B:D3:0D:3B:DA:FC:DF:0B:A4:C0:AE:C5:CF:1C:4C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:77:59:f0:95:dc:7e:89:e5:96:4e:cd:3e:9f:8a:66:58:
         e8:9c:4d:ec:71:74:33:5a:3a:b8:8d:f0:c4:af:e8:22:cb:d0:
         1a:c8:98:a5:8f:28:a6:93:b2:d8:ce:25:82:f8:b2:b1:f8:b3:
         6d:32:78:a5:79:93:bb:e8:88:e7:8a:40:e5:95:4c:10:0e:22:
         16:2f:5f:27:fd:20:7d:34:5a:78:43:17:8b:66:35:62:d2:e7:
         ac:dd:b5:9c:1e:06:1a:b0:0f:13:41:ae:23:b2:c5:d7:3f:73:
         e0:d9:cf:61:d3:cb:77:51:9c:49:46:b6:7c:87:19:7f:d0:94:
         b1:02:5e:f6:74:34:54:f7:3a:77:fa:7c:3a:00:ac:97:d6:8a:
         2e:fa:c9:5b:30:26:2c:0e:5b:81:22:d2:fe:ad:74:ee:fc:3f:
         27:50:01:09:fc:d6:04:17:c4:5f:45:51:2b:1a:6c:14:35:98:
         26:38:87:77:b3:fb:4e:c3:bf:d6:d3:56:2d:2f:de:37:c2:d4:
         65:c4:58:c5:99:dd:26:f5:17:29:5d:b2:e0:82:02:a7:75:3e:
         de:fb:f4:69:23:27:a0:20:3b:3d:c3:73:7f:38:b3:55:fa:2b:
         5b:66:05:b2:eb:d6:c5:7f:e6:d6:a5:f1:2d:92:5c:b9:6b:3c:
         16:83:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:30 2026 by rpki-client