Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa
File:                     24e50275-08d8-38a2-a053-3a76fa2cbac3.roa (raw, json)
Hash identifier:          0TDe6PbmJ5cIQA/6WceZx6LJ5IaphRx/z4xE0dq5lgo=
Subject key identifier:   0C:D2:5B:2A:7A:79:84:B7:D1:11:69:7D:4D:23:B0:ED:A7:CB:53:A8
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584F1CC79CF80C71414087558380
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396982
IP address blocks:        161.38.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:9c:f8:0c:71:41:40:87:55:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=745b8b23-0d8f-418b-a42b-f980e4fec63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:d2:8b:e8:38:19:39:a7:a4:76:ac:f9:81:
                    5c:58:4e:7b:29:35:25:1b:f1:9c:22:70:50:7e:e4:
                    49:bf:78:97:d2:6e:70:16:36:42:3d:97:f2:7d:89:
                    70:87:45:4a:63:5f:49:40:13:0e:8a:a1:23:a4:4f:
                    34:eb:25:1f:c6:7f:05:0e:ad:15:b0:0e:a4:66:e4:
                    5d:7e:ed:b9:a8:63:fa:2c:33:19:58:c8:25:84:88:
                    e5:4e:f3:c9:5b:a6:0a:ef:14:69:19:92:1b:a0:79:
                    50:d5:cb:fa:5b:06:84:2f:e2:2e:df:d4:f0:42:de:
                    0f:59:5f:ea:51:e1:26:9f:3f:cf:e6:b7:18:bf:b8:
                    c5:c4:f0:16:c7:80:c7:3d:d1:ab:ca:19:48:47:29:
                    ae:c7:60:63:90:a7:95:07:e1:41:4e:df:16:43:fb:
                    7e:cc:77:27:25:10:3c:3e:09:79:c8:df:ac:5a:5d:
                    73:e0:be:33:f6:48:bc:b4:c0:8c:e8:bc:a4:7d:1a:
                    d3:ea:f4:12:0b:ba:19:7b:27:2f:ae:53:40:de:aa:
                    54:b0:c1:d5:55:c3:59:0d:f5:ac:ba:bf:d7:94:17:
                    3a:0a:c5:d3:f9:18:0e:be:77:dc:75:ae:6b:53:82:
                    88:c6:24:e8:03:06:b0:c0:7d:ba:1d:29:23:4f:20:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D2:5B:2A:7A:79:84:B7:D1:11:69:7D:4D:23:B0:ED:A7:CB:53:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:7e:90:9e:cc:d1:d2:87:27:36:b2:f5:62:80:b7:cb:0e:
         32:0a:04:61:7e:11:47:60:40:a9:e8:a9:95:67:f7:cd:3e:f2:
         4a:f2:48:d3:9d:ec:96:18:c4:f2:f5:19:9d:14:c7:0b:46:dd:
         0b:b4:e9:67:83:1e:8d:a1:5a:6a:48:d1:cc:e0:a4:9f:6b:30:
         d5:ea:dd:b3:50:c3:4c:fa:6e:6a:65:54:92:76:05:e9:0c:d9:
         e3:cb:be:55:89:a6:8a:61:e4:07:3d:4e:af:ad:b6:4e:d5:17:
         b7:25:7e:3a:3c:ac:b8:dd:29:b9:1b:7b:da:39:64:3e:7d:4b:
         50:aa:d8:3f:48:a4:36:30:4c:65:3a:f7:ea:79:10:6e:66:54:
         e8:c8:d8:9a:b0:0d:ba:55:3b:df:84:da:c2:7f:f8:52:76:dc:
         6b:21:77:9b:3d:64:d8:74:bc:85:1b:4f:5c:bd:93:ed:09:61:
         5c:18:18:12:88:53:c2:3e:c7:0b:0f:55:45:1c:b1:b7:8b:6f:
         ad:10:8d:bc:11:5d:b6:2b:13:c1:23:20:65:49:b7:ca:60:b8:
         3f:ca:98:dc:c9:1b:9c:0e:c0:06:5f:a6:13:c0:70:96:b3:82:
         57:58:f3:d2:0c:ac:08:6e:cd:fa:34:4a:ba:de:9d:c4:4a:62:
         51:4d:04:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:11:51 2026 by rpki-client