Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/037418ae-abe2-3d1b-b1a0-99f719634711.roa
File:                     037418ae-abe2-3d1b-b1a0-99f719634711.roa (raw, json)
Hash identifier:          /eAbQ26RHjYPyhq3NfD+4k2zpN5VFQsQlXcI5+1jqhk=
Subject key identifier:   24:AB:71:85:57:B2:BA:8D:62:BC:0C:7F:53:A5:45:34:9F:1B:90:31
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E815F93CD315799FB8BD8D600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/037418ae-abe2-3d1b-b1a0-99f719634711.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     852
IP address blocks:        161.184.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:93:cd:31:57:99:fb:8b:d8:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=51941cbd-9bf7-4f8d-99ef-1afc92b8ed25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:28:86:7b:60:25:f9:f5:64:6f:96:6e:03:
                    0f:cf:45:7c:10:9e:d2:b6:0e:11:b1:45:bf:e5:88:
                    ea:bb:c6:df:07:d3:cd:7c:84:5a:45:80:b2:f0:34:
                    61:9d:89:47:15:42:1c:36:7c:07:e0:a6:09:bf:4c:
                    07:fe:87:f9:c3:32:2f:f0:d6:f7:16:02:3a:5f:ce:
                    55:5a:18:5a:da:72:07:88:02:b5:2a:bf:f4:6b:b9:
                    1c:37:b1:10:28:3b:d6:e0:de:48:3b:44:53:41:4c:
                    61:b3:f1:c7:55:e6:63:ef:89:ee:f2:1b:56:26:8b:
                    0c:b6:33:a2:44:3d:c8:66:94:c2:ee:d3:fb:7f:22:
                    70:8c:6a:02:a6:bd:e3:65:46:3d:c9:46:29:fd:8f:
                    17:40:b4:c2:d5:36:a1:05:ae:ca:b9:be:b9:ae:a4:
                    47:3b:44:74:d4:cd:12:34:d2:0a:50:8a:3c:b3:5e:
                    76:37:38:a9:a5:88:55:e3:43:e8:19:9a:79:1c:0e:
                    f9:94:6f:e9:7f:aa:4e:06:41:fe:9c:e6:75:29:d7:
                    c2:db:e6:d5:c4:d8:3d:c2:f9:af:4c:b6:4c:fa:80:
                    ac:79:56:f5:df:0f:1f:5f:22:19:96:25:7a:14:29:
                    9a:91:22:ec:8f:f4:20:4d:46:2b:07:d7:af:8b:0a:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AB:71:85:57:B2:BA:8D:62:BC:0C:7F:53:A5:45:34:9F:1B:90:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/037418ae-abe2-3d1b-b1a0-99f719634711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.184.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:e7:ab:bd:f8:d3:97:f5:6e:10:ac:d2:f7:1c:02:76:1d:94:
         92:0f:e8:ae:74:60:8f:a1:a7:27:e3:ae:ab:bd:74:27:4f:0e:
         7b:51:37:d9:34:c4:66:4a:02:42:a1:b6:3a:11:ba:1a:60:42:
         2e:47:e6:d6:64:36:15:d5:ca:c2:a8:39:98:15:8f:1f:77:d7:
         15:c1:d1:58:9c:ac:28:d1:f7:81:9c:56:f2:4e:18:22:2b:fb:
         08:4c:0c:67:99:b3:7b:3d:f7:d1:16:c8:33:a6:0b:05:ad:04:
         c6:1c:20:3f:73:d5:02:12:00:ea:9f:29:90:d4:58:ac:7b:fa:
         50:a9:51:9a:99:93:ac:dd:34:61:0b:c2:20:e1:65:4c:26:a2:
         ea:75:e6:91:b3:b4:77:30:41:f5:be:6b:b9:f0:3a:20:8b:d7:
         37:2e:c6:3c:27:50:03:dd:7d:69:6d:8f:8b:02:e6:48:c7:c3:
         d0:d8:8a:71:dd:d3:a7:24:d6:e2:83:f8:b3:f6:3e:83:19:47:
         55:29:74:e1:b8:16:1c:d0:75:60:4e:e5:e5:e3:ef:66:4e:44:
         03:a2:b5:71:61:77:12:cf:07:3b:ec:79:1e:bf:79:a7:03:5b:
         1a:2e:9c:1a:52:a8:43:c8:67:84:2b:43:ac:cb:71:c4:97:a1:
         df:68:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:45 2026 by rpki-client