Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa
File:                     416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa (raw, json)
Hash identifier:          TFTztk5IDbWa243pr53ympHwHhm9UYMrNjgvU2uuwtc=
Subject key identifier:   F7:10:E9:C2:E7:72:AD:04:43:B5:B2:69:20:5B:F7:1F:01:D2:02:D0
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584E8B24EF657EDD97A8BADDBFC0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     1239
IP address blocks:        172.98.161.0/24 maxlen: 24
                          172.98.167.0/24 maxlen: 24
                          172.98.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:ef:65:7e:dd:97:a8:ba:dd:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=59299fcf-75a9-45d6-8583-f92ce2c741c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:22:3c:49:44:3e:1b:43:ec:56:e3:7d:0f:4f:
                    13:ac:72:05:2e:8c:bd:90:bb:53:bc:3c:6c:2e:0c:
                    23:52:ac:18:da:70:75:82:2d:f3:d0:5b:41:75:20:
                    83:b9:52:a7:02:24:37:76:66:f7:2f:c0:b7:84:84:
                    30:db:0a:86:da:cb:c8:f7:42:6d:6a:0f:bb:5c:57:
                    b3:a7:c1:f6:fc:7a:09:7f:ee:1d:27:82:8c:cc:40:
                    39:10:7b:cc:fc:4c:c9:8f:5c:8b:08:ab:6c:84:3a:
                    18:82:18:95:76:5e:03:49:fb:06:a7:3c:85:16:3d:
                    1c:c0:2c:44:6c:70:d0:36:60:65:ce:d8:9e:22:33:
                    52:a5:26:c2:41:5d:28:0f:35:63:62:ef:56:38:fa:
                    dd:59:fb:dd:6e:e9:c6:70:65:2a:78:44:ee:ff:e0:
                    87:e9:87:11:3a:86:3c:bc:e4:99:75:85:89:60:a7:
                    40:fc:97:09:f8:7a:e1:a5:c1:6b:0c:99:90:42:1b:
                    62:e4:6c:98:66:1c:f4:c2:4b:73:62:d9:6e:02:4e:
                    82:f3:81:68:3f:90:15:9f:29:02:b1:21:55:37:6d:
                    84:3e:ec:50:ad:3c:a5:a3:8e:fd:31:ae:ab:d8:22:
                    0f:bd:7c:bf:34:b8:ec:c0:28:6d:ae:7f:2d:1c:e9:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:10:E9:C2:E7:72:AD:04:43:B5:B2:69:20:5B:F7:1F:01:D2:02:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.161.0/24
                  172.98.167.0/24
                  172.98.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:24:42:f7:9e:3a:65:e1:77:86:0c:26:28:94:26:32:2e:88:
         bc:77:be:a5:62:51:51:93:b6:c9:5c:3d:1a:a4:bb:aa:1f:63:
         5e:3e:0a:88:d8:4f:53:8e:aa:94:74:e4:c9:ef:ea:09:29:78:
         b7:50:a6:c3:4d:00:29:13:bd:c7:8c:29:ed:e6:46:9b:81:8f:
         9e:63:cd:0f:b3:4d:aa:dd:cd:54:d9:d5:a6:29:14:f9:58:ff:
         54:b3:e5:e7:76:62:af:8d:f1:e2:d3:89:b0:d7:09:b2:6b:27:
         61:fd:62:06:c9:8a:a2:48:df:97:8e:c2:9e:19:f1:c9:4c:60:
         eb:9a:c7:c1:3d:e3:9d:85:be:5c:aa:fd:b2:85:82:d0:81:48:
         7f:d9:d8:a2:29:9b:b4:87:33:d6:f3:1d:37:57:c2:f4:ad:26:
         39:24:fc:9b:5f:02:24:a9:1f:a9:2b:a6:4b:22:a4:d3:bd:1a:
         12:f7:2f:0e:38:ed:93:f2:e0:c9:fb:ef:d1:4e:09:5a:62:d9:
         75:b3:41:fa:db:8e:41:8e:bd:70:d8:9e:18:5e:98:d8:74:30:
         c1:14:9a:70:0c:3f:30:20:4f:57:aa:6b:48:f3:77:83:02:51:
         90:4a:58:46:69:1a:6e:7c:02:4e:e9:34:6d:89:c1:36:58:09:
         d7:f7:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:10 2026 by rpki-client