Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/208ae2bb-b262-32b9-8049-85859e842047.roa
File:                     208ae2bb-b262-32b9-8049-85859e842047.roa (raw, json)
Hash identifier:          wNYp8VmQXmDWk2Q196sd7+mKSnv3ElJbHcW2CtivY8A=
Subject key identifier:   FF:AB:04:FF:DD:06:E0:EC:E1:B7:F6:46:24:78:3B:91:F0:EE:76:73
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584DC565CA4BACC306FE55539C40
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/208ae2bb-b262-32b9-8049-85859e842047.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        161.38.56.0/24 maxlen: 24
                          161.38.57.0/24 maxlen: 24
                          161.38.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:ca:4b:ac:c3:06:fe:55:53:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=496e0dde-b2ba-4ae1-8325-6fb2a909ced5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:2b:9d:98:f7:9a:99:a9:68:c3:db:21:22:
                    57:be:61:2b:f8:52:b1:33:68:75:9b:1f:44:11:e3:
                    aa:ac:69:c1:68:c0:cb:3f:bf:f3:48:75:8d:90:f4:
                    81:50:6e:42:c5:ad:b6:1a:22:d5:0e:ff:2f:aa:08:
                    a7:fb:e3:ff:96:4b:fc:0c:7d:0c:42:24:44:94:4f:
                    e4:6b:8a:eb:c0:0c:af:eb:7d:ac:29:3b:f4:3b:29:
                    3f:d6:03:4e:47:b3:42:10:fb:f0:c7:24:ae:72:5f:
                    f2:9d:a9:7e:36:10:e2:d3:2c:3e:16:51:d9:c8:53:
                    a1:58:69:7b:b9:ee:32:2e:b4:be:a9:1d:b9:4b:a0:
                    93:7a:c6:bf:dc:1a:ff:62:e8:08:d2:a9:df:dc:87:
                    7b:5b:ea:36:96:99:68:20:d0:b2:11:07:b5:5e:4e:
                    cf:2b:d9:34:49:ab:6a:0f:fe:7c:fe:74:ac:b1:21:
                    af:b4:39:43:36:f4:68:34:6a:51:57:94:b4:93:30:
                    00:43:e0:0c:a7:ea:32:ea:f6:01:04:fd:4c:77:0f:
                    dd:17:4e:fa:91:6a:31:f2:99:93:e0:ca:37:a7:64:
                    83:3c:50:2b:2b:f6:43:1e:40:94:42:77:a9:98:2f:
                    05:58:cd:d5:79:9f:97:0c:91:69:10:04:23:36:71:
                    f3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AB:04:FF:DD:06:E0:EC:E1:B7:F6:46:24:78:3B:91:F0:EE:76:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/208ae2bb-b262-32b9-8049-85859e842047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.56.0-161.38.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:af:2b:df:c4:22:55:bb:c6:f0:b6:bb:c2:42:c6:57:a0:
         c5:32:d4:3a:de:05:89:fe:b3:c5:60:1b:d8:03:14:4a:da:47:
         92:66:31:39:64:a3:eb:41:95:28:46:7b:3b:c4:d6:8d:81:13:
         5f:83:90:1a:14:82:27:3d:ef:9d:f4:61:c1:27:13:00:e5:c6:
         e0:f2:c3:08:88:e7:35:26:91:ba:43:99:4d:14:33:a9:c2:6c:
         49:02:52:5e:d5:56:9f:21:d2:21:f1:f4:d8:be:b9:28:3e:3e:
         06:16:63:a0:88:6c:a6:51:a3:ae:4b:f9:81:7a:1a:9c:e7:88:
         61:ca:bf:c0:2d:d6:3b:69:5f:79:2b:fe:48:48:01:7d:8c:8f:
         d2:29:e2:6b:fc:d7:e6:5b:be:86:0e:4f:fb:f2:e4:9b:a6:11:
         11:37:00:c9:b6:37:a5:39:e0:75:56:93:f2:9d:53:fe:6d:f0:
         9c:9d:55:32:24:9d:55:30:e4:57:ef:04:a5:c6:2e:f6:b4:0e:
         c9:ab:a8:95:19:d5:50:e4:2b:7f:46:be:f9:b9:ad:49:9d:b8:
         3b:ee:74:97:5e:1b:6e:6c:a2:c4:3f:77:5e:3c:bb:f3:ed:84:
         62:92:ee:93:24:78:10:13:df:39:14:68:a4:ed:d2:07:7a:27:
         2a:b6:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:02 2026 by rpki-client