Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/5c5c9bf3-aacf-327c-9639-47f9d5163265.roa
File:                     5c5c9bf3-aacf-327c-9639-47f9d5163265.roa (raw, json)
Hash identifier:          J3fngyGMsJ6AYOktdUjrV+DIHhIMgwuv9GDIL+VDhpA=
Subject key identifier:   B9:FA:4C:7D:E3:6B:D6:B6:F2:3A:DC:40:A9:8E:39:49:03:8B:4E:C0
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584F23C284DB269C136EB9969F60
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/5c5c9bf3-aacf-327c-9639-47f9d5163265.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        161.115.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:84:db:26:9c:13:6e:b9:96:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=443436b2-c05d-4103-a1bb-5670ec038159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:5a:26:55:8e:26:dc:eb:02:24:c2:b7:c1:
                    92:bc:bf:0b:75:8d:89:19:85:2e:35:f4:1f:df:76:
                    cb:c0:7f:a1:7e:f5:88:63:aa:05:02:63:51:db:01:
                    f0:42:08:35:be:07:95:d8:50:5f:75:2b:d7:4a:7c:
                    1b:71:b5:3f:de:d1:09:8c:c3:2e:e5:da:d3:58:2b:
                    2f:b9:e3:dc:98:3f:2c:ce:40:59:b2:fb:d9:f3:48:
                    c8:47:6f:92:65:8d:d9:d2:87:c2:08:e2:c1:a5:42:
                    ee:50:a4:22:71:57:51:92:ce:7f:79:41:13:66:c9:
                    fa:aa:c4:99:15:03:41:2a:8e:2c:73:ac:c5:a4:a6:
                    71:92:1a:cc:0b:cc:ac:e4:fe:37:24:9b:36:44:8c:
                    07:0f:d1:18:43:bd:30:b3:fd:20:ab:ce:da:bb:4a:
                    1d:94:13:8a:c4:d0:c7:fc:f1:db:6b:0a:3e:f0:c9:
                    52:ae:38:f2:58:c6:d5:95:e4:48:e9:a7:f1:3f:b7:
                    31:e8:77:98:34:ae:81:1a:12:b4:87:2f:9a:f1:56:
                    02:3d:04:03:08:27:a8:d5:80:d8:62:6e:99:6f:a6:
                    e4:df:61:f8:9d:dd:92:5b:6e:56:8f:6b:94:05:c5:
                    82:97:9f:c2:7d:c7:c7:d8:e2:49:c6:36:6c:e8:b2:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:4C:7D:E3:6B:D6:B6:F2:3A:DC:40:A9:8E:39:49:03:8B:4E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/5c5c9bf3-aacf-327c-9639-47f9d5163265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e1:f9:91:5f:2c:d0:bd:d6:ea:87:37:07:7c:6c:6a:9c:01:
         9d:4e:aa:d1:ec:52:11:85:1d:19:32:f7:5e:ba:55:6b:c7:ee:
         51:f5:1f:fe:a7:41:4a:52:a9:3a:43:ac:f0:2d:51:37:5c:9f:
         62:4a:5e:e1:13:e3:34:43:20:12:61:4c:d9:1b:79:c4:cb:9f:
         2f:36:d3:12:b0:51:49:e3:d8:dd:13:56:5b:1e:fc:85:b7:08:
         fe:82:c9:fe:50:ca:06:00:14:df:37:b9:47:46:d4:28:f1:30:
         ee:22:fb:1a:c2:46:a2:fb:80:f1:44:81:2a:55:aa:97:65:95:
         b5:6e:6c:d5:52:6e:ed:d1:41:2b:29:26:b1:0f:28:3a:2f:19:
         cd:3c:57:a6:16:6a:d4:3c:4a:85:07:db:3e:91:87:89:95:d0:
         47:6d:ba:39:9a:e2:21:f5:46:a5:92:31:7e:92:d4:e5:68:dc:
         80:7c:58:ec:92:4b:f1:bd:2b:53:27:61:20:44:de:ef:57:a5:
         85:91:cc:4b:98:09:6f:1c:12:2e:2b:21:af:61:6c:6d:1c:95:
         4a:60:35:3d:b4:4c:01:7e:10:f2:72:27:a5:76:a1:58:2d:5a:
         8e:f9:eb:b1:22:a4:ec:cf:42:1f:a8:c6:37:7e:28:0d:56:36:
         8c:17:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:31:34 2026 by rpki-client