Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b681bd68-19bf-34bf-bd63-380bf6d5fa00.roa
File:                     b681bd68-19bf-34bf-bd63-380bf6d5fa00.roa (raw, json)
Hash identifier:          tauJrscB/Uyg1MUqX91Q0lmv3DYj0LdXo5VtSUQa/lY=
Subject key identifier:   8D:48:65:BF:03:38:F6:4D:C6:48:44:40:97:5D:B8:50:50:38:58:D6
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F4328584F050CC859C9AEDB5FE683DC00
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b681bd68-19bf-34bf-bd63-380bf6d5fa00.roa
Signing time:             Mon 31 Aug 2026 13:00:12 +0000
ROA not before:           Mon 31 Aug 2026 13:00:12 +0000
ROA not after:            Sun 29 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        160.79.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:0c:c8:59:c9:ae:db:5f:e6:83:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Aug 31 13:00:12 2026 GMT
            Not After : Nov 29 14:00:12 2026 GMT
        Subject: CN=5fd4206e-ef41-491b-8973-2711a24d070d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:98:89:c9:a4:cd:97:e1:ed:5c:3c:0a:c7:
                    e4:a9:52:b2:3c:93:95:05:b9:0f:3c:18:06:bd:3b:
                    e0:cf:bf:92:a8:d0:d3:f4:6a:39:63:b6:cd:fc:1f:
                    cb:06:89:89:ad:72:93:9b:81:5d:dd:03:8c:d4:8b:
                    33:d9:73:37:66:98:51:d8:10:ab:1a:0f:89:72:5c:
                    9f:a7:66:f7:5e:11:b7:8c:e9:38:d1:3a:bf:38:c4:
                    25:61:36:24:1e:95:87:17:b9:16:10:43:c7:b4:87:
                    31:0d:22:b7:78:65:04:81:34:1a:f2:2e:cd:e7:ea:
                    b5:96:73:85:9a:09:d0:de:b5:9a:42:ee:3f:c9:1e:
                    96:18:b2:67:74:f8:63:44:f2:ef:3b:e6:2a:b7:c3:
                    4d:e7:ae:f4:f5:c7:48:8f:a1:0a:b7:67:28:ec:de:
                    02:a5:bf:31:b0:f2:fa:b5:b1:07:c9:a8:72:b3:41:
                    8b:e3:45:1c:86:5a:8b:76:f5:62:ee:5f:5d:3e:2a:
                    f1:81:0b:67:c3:d3:a6:ef:4e:43:e5:e9:88:89:ee:
                    3d:ad:0d:cf:c4:61:bf:ae:7e:fa:ab:b1:d7:6b:4d:
                    b5:74:91:dc:c8:58:48:1d:55:19:27:b8:1e:65:bf:
                    1d:0e:17:89:dd:77:01:b4:5c:ca:b5:bd:59:b6:5d:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:65:BF:03:38:F6:4D:C6:48:44:40:97:5D:B8:50:50:38:58:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b681bd68-19bf-34bf-bd63-380bf6d5fa00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:c8:87:a9:e8:62:21:79:57:ec:7f:e1:f7:f4:a3:dc:19:
         52:9b:0b:21:5a:b7:77:da:17:da:ac:81:77:d0:2f:36:07:2e:
         08:f4:7e:3e:f6:c8:ff:3e:5a:d9:25:12:66:bb:fb:07:9d:b0:
         0e:c9:2e:21:fc:17:2c:7b:0e:ae:da:36:3c:39:49:80:c1:72:
         dc:c9:09:d0:27:54:f7:2a:88:14:fe:5d:97:f6:65:96:01:b7:
         09:87:5e:f0:0f:1d:1d:64:c6:67:2a:5e:62:0a:58:b3:c1:a1:
         72:cc:17:9a:3d:7f:43:bc:7a:d0:7e:45:24:ce:47:8d:02:56:
         23:62:9a:96:cb:26:92:2f:fc:96:ef:05:d9:82:84:08:6a:b9:
         4e:0f:e5:08:20:7b:60:8e:09:31:d0:ca:c5:26:fb:13:8a:8a:
         29:d3:4d:c9:50:45:ef:54:41:e1:50:3c:d0:5c:4c:4f:be:9f:
         4a:9a:98:28:eb:5e:82:1b:d5:71:ae:8e:14:ad:3b:1e:55:c5:
         c7:de:fd:e3:18:b1:87:bc:47:6d:ea:3e:71:11:be:73:47:a5:
         7d:0b:6e:37:96:0d:ad:45:21:be:05:ec:c8:e6:50:e4:22:63:
         5e:5b:ac:85:76:be:ed:76:7f:63:b9:16:98:f0:ca:b8:84:13:
         3f:07:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:07:06 2026 by rpki-client