Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6d08ce1c-a490-3991-ba64-781afc6148f8.roa
File:                     6d08ce1c-a490-3991-ba64-781afc6148f8.roa (raw, json)
Hash identifier:          pBhAyLAbpfyjNOfLy1eUCsVxEJLOFbbkDpOVRC+TqVw=
Subject key identifier:   30:92:37:DD:00:5D:FF:25:DC:2E:E5:D4:DA:E1:2A:C2:3B:10:20:7D
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584F498A951D0A2E254205C01E80
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6d08ce1c-a490-3991-ba64-781afc6148f8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        161.115.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:95:1d:0a:2e:25:42:05:c0:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a0e1506f-dbe7-476c-8500-f7e761661e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:44:67:16:bb:56:0f:60:03:91:17:c0:7c:
                    f1:5e:26:4d:d6:aa:ae:88:cc:f9:42:26:2f:9d:ef:
                    03:79:3b:4c:bb:c3:14:3b:54:1a:f6:fb:e2:9e:72:
                    1a:83:66:4d:15:f5:ea:44:a3:ee:be:88:d8:09:ac:
                    60:66:ef:c5:43:84:0c:94:dd:bd:b3:9c:ce:9c:49:
                    14:12:6d:fe:ca:84:59:ac:90:27:a8:56:5e:da:c8:
                    20:88:38:3f:1e:8f:ae:a5:eb:dc:fa:3c:ac:d2:ba:
                    93:2e:19:72:ed:c6:cf:93:9c:e4:7b:9f:cc:3c:43:
                    08:71:1f:3b:81:d8:b3:b0:01:28:6a:17:92:40:a8:
                    d2:a0:04:cd:ee:40:26:d7:11:fa:d9:5c:b6:23:2d:
                    86:c9:f5:01:4d:ed:99:37:17:53:07:20:d1:f7:b8:
                    c2:4a:17:e0:0d:9d:d3:0a:e0:fe:6c:3d:2d:dd:1e:
                    f8:34:0b:34:a2:65:68:f2:97:a2:32:5c:25:01:c7:
                    67:2d:d2:3f:6d:17:00:d2:b9:a1:96:82:3d:7f:9b:
                    b0:d0:3d:2a:f2:19:6e:07:3f:62:9f:b4:24:27:d7:
                    a8:a3:15:23:43:5b:60:71:ea:a3:38:68:96:af:f8:
                    84:bb:24:fd:10:8f:03:5e:b1:2e:86:97:df:2c:67:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:37:DD:00:5D:FF:25:DC:2E:E5:D4:DA:E1:2A:C2:3B:10:20:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6d08ce1c-a490-3991-ba64-781afc6148f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:2e:35:07:b7:9e:db:dd:f1:52:b4:d6:6e:f8:34:59:8a:
         3f:b7:11:72:f0:f7:38:2e:a4:bf:4d:5c:5a:81:e4:21:db:df:
         59:af:d3:7b:17:f2:c3:1d:75:1f:1a:2b:c4:3a:9d:bc:8f:99:
         44:c0:19:e5:49:63:a3:22:8e:bb:57:c7:f6:ad:d3:cc:d2:b7:
         6f:53:94:df:d8:8d:2a:0f:aa:43:52:9b:00:96:4a:1d:af:f4:
         69:0b:d2:58:6f:48:db:2c:44:fb:bd:61:7e:17:e3:39:cd:01:
         7a:7d:16:d0:91:a7:ee:b2:68:c2:b9:83:71:ea:a1:bf:30:54:
         75:39:ea:6b:74:80:4f:e2:55:4f:91:5b:cc:7b:f1:1a:62:08:
         45:12:a1:b2:d6:f3:52:42:c1:ea:23:50:30:8c:18:79:4b:90:
         a5:ed:1d:a3:89:35:8b:86:de:4b:07:35:88:35:6f:4e:0a:56:
         e8:c0:80:42:80:13:79:57:6d:69:34:8c:30:0d:ca:10:0c:69:
         40:a7:e4:3c:17:3b:21:ca:b2:53:52:05:51:8e:95:f4:d9:97:
         c9:f5:91:f1:12:60:f9:2d:4e:7c:ee:bd:84:29:d4:80:52:c3:
         c5:9d:5c:41:47:8b:b9:e5:8c:b9:ea:11:d4:6e:4d:45:6b:aa:
         6a:8f:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:18:46 2026 by rpki-client