Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3822610b-37ee-3c20-98d6-c3c34a737686.roa
File:                     3822610b-37ee-3c20-98d6-c3c34a737686.roa (raw, json)
Hash identifier:          8GsRgSiYBiv8YrclnJE0MVrXuv7OF1C93OqCjAIAqik=
Subject key identifier:   A2:4A:A7:70:94:0A:C0:02:1F:99:F2:FE:94:F3:AA:20:C0:69:C0:CB
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584D316F6705BBC2AAB76DEDC080
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3822610b-37ee-3c20-98d6-c3c34a737686.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        161.107.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:67:05:bb:c2:aa:b7:6d:ed:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=4a746281-33bb-4ae0-99bb-4f3b468e4276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:01:7f:80:7c:ae:14:75:d6:70:a3:bc:6e:
                    9a:46:69:e2:47:4c:f9:dd:e4:e1:01:e2:fd:76:ac:
                    a2:fb:ce:9f:7b:2b:16:24:45:05:ba:d5:7d:7a:cf:
                    a6:41:88:5d:ca:65:76:0d:1f:5b:4d:9c:9b:41:c5:
                    3b:e5:65:a2:e7:e4:e9:fc:20:31:80:c4:d3:92:8d:
                    db:3b:c4:2d:66:c1:67:01:cb:8b:59:5b:b9:d0:c4:
                    9c:25:0c:89:94:4d:06:57:5f:59:78:4a:23:42:04:
                    c9:59:21:5c:83:6f:a6:fd:7b:36:08:57:77:6f:53:
                    69:dd:b5:3d:69:19:4b:ea:2f:0a:ce:ed:9f:6a:52:
                    cb:17:55:80:5a:8c:48:72:25:26:c6:5c:b0:3f:29:
                    cf:4f:e6:c0:8d:be:c1:d3:fe:e9:96:15:7d:a4:17:
                    3d:58:5c:d3:ae:89:f6:7e:63:29:be:a5:d3:45:79:
                    34:23:88:36:b8:b2:19:fe:d0:cb:8f:31:18:6f:9e:
                    89:2d:f1:4b:e7:92:43:32:3b:86:80:46:61:6e:15:
                    44:93:3c:a6:74:25:56:a3:4e:65:b2:c1:1b:a0:4a:
                    46:da:ab:03:66:b0:cf:07:fb:d0:ad:d9:46:9a:2d:
                    d6:e6:95:96:47:60:51:cb:d3:73:87:c1:f7:4d:c6:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4A:A7:70:94:0A:C0:02:1F:99:F2:FE:94:F3:AA:20:C0:69:C0:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3822610b-37ee-3c20-98d6-c3c34a737686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:d0:84:01:e4:42:bd:aa:34:ed:19:e9:17:a0:ae:e3:68:
         a8:63:e1:06:f3:42:e6:2d:70:2d:3a:84:04:14:be:50:fc:80:
         4a:0d:70:20:81:45:ec:6a:ba:b4:96:9a:6a:ce:5b:bc:d5:50:
         61:d7:3c:a5:ed:ee:09:67:ab:76:4a:41:ef:25:38:f2:21:53:
         1c:c2:25:e6:81:d4:a4:68:12:3c:63:cf:6b:78:b6:64:2d:8c:
         89:73:38:13:02:ea:28:3c:54:55:26:1a:6b:5b:79:bb:a7:a7:
         45:aa:8b:68:c4:49:c8:45:6e:58:9a:84:a3:ac:76:5b:cc:97:
         80:a5:02:23:ca:8c:73:64:73:99:fe:c3:21:a1:80:b4:c3:aa:
         43:8e:ef:f1:0f:b6:5a:f8:22:3f:4c:3c:11:b8:c0:00:70:20:
         2e:cb:ca:48:f2:1f:15:78:fe:5d:3f:99:0e:b4:25:36:29:d4:
         ab:38:22:95:44:4b:d6:06:33:93:61:d7:57:63:af:4b:67:10:
         33:64:06:1c:05:9d:e2:89:1e:4f:25:d4:46:a2:f1:9b:e1:16:
         e0:12:21:6e:6c:bb:3d:05:ff:a9:e4:67:f8:28:bb:46:94:ba:
         3f:41:87:fe:d5:66:e6:21:f2:a3:a3:45:51:b3:2b:61:70:2e:
         fc:be:8c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:53 2026 by rpki-client