Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b56b776e-53aa-311a-ada4-eb2a1a02564c.roa
File:                     b56b776e-53aa-311a-ada4-eb2a1a02564c.roa (raw, json)
Hash identifier:          EMWLNIjs2N1OqArucw3OWR/0TCwyV+w/02moRRJRUtk=
Subject key identifier:   99:B2:86:32:F1:A6:D2:B3:87:CA:FE:77:57:2E:3C:80:D1:C4:87:E4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4974BB2CA3800928CA580BA0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b56b776e-53aa-311a-ada4-eb2a1a02564c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        161.198.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:bb:2c:a3:80:09:28:ca:58:0b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=907037a2-27c3-4e86-88f9-121347cc8f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:cd:ae:18:d5:8b:64:d3:26:bd:84:54:2e:
                    e4:af:24:7f:a8:4f:76:f6:d8:cd:5a:9d:99:cf:8f:
                    ce:e5:a1:2b:b1:14:ab:28:79:a3:29:42:20:a7:fc:
                    ca:56:23:0d:7a:9f:a5:31:d1:6e:d2:1b:09:59:ff:
                    4f:59:32:c9:1a:86:3b:fe:08:d5:97:a6:a6:a6:5c:
                    93:85:d2:6a:77:7d:d5:86:e5:d5:2a:0b:db:14:37:
                    2c:7d:a6:89:ab:8a:91:4f:03:74:a9:9d:72:68:89:
                    12:6f:28:c6:ea:6b:22:ad:83:bf:3b:bc:73:87:29:
                    49:09:5f:e8:86:cf:7e:14:5e:a7:5d:14:c4:d9:22:
                    3c:38:91:82:1a:e8:c8:70:ba:11:59:9f:71:36:a5:
                    b1:99:5f:f4:a8:c0:82:76:b9:a8:11:f5:78:b1:f4:
                    35:c1:e7:3c:3f:06:76:91:e8:bc:35:8f:f0:c7:c3:
                    2b:c6:9d:85:1c:73:e7:16:b9:8b:6f:15:32:ff:81:
                    a1:9b:dc:a1:ac:6e:cb:a2:0b:38:66:48:c0:c0:4f:
                    6c:36:1c:b5:e4:bb:33:fd:6a:f4:6f:b9:b9:5f:c0:
                    bc:6a:af:8f:ae:09:65:0e:c5:7d:db:96:4d:45:73:
                    f8:04:e4:58:95:3b:8f:9f:87:48:92:02:7c:25:46:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:86:32:F1:A6:D2:B3:87:CA:FE:77:57:2E:3C:80:D1:C4:87:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b56b776e-53aa-311a-ada4-eb2a1a02564c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:bc:f8:c5:f9:bd:75:b4:a3:ee:d1:d6:be:45:30:cc:31:
         fc:5e:e7:f9:77:7a:cd:41:38:5c:1b:12:8e:b4:1f:cd:b1:85:
         f6:f8:d3:b4:8f:b6:e6:09:0d:3c:3f:5e:af:da:a0:69:37:f3:
         42:62:73:1d:13:b1:8e:86:ac:bf:57:90:67:07:20:87:04:66:
         d2:df:20:98:66:1d:3a:a8:fb:0e:88:e6:5a:a6:4a:d5:81:ab:
         1f:cf:25:9c:64:70:e3:4b:42:ad:28:31:cc:4c:14:a3:33:53:
         a6:55:6d:b6:15:b7:52:e7:de:a5:91:33:f7:c9:6d:6c:ab:0f:
         e3:4d:ff:6a:17:30:c5:cb:ed:17:db:d3:87:b7:21:b4:4e:3a:
         3f:45:c0:b3:85:d1:6b:57:33:63:43:03:f7:e8:5f:bd:de:8c:
         91:0f:aa:67:12:d1:7c:98:e8:52:35:26:df:31:87:f8:d0:3b:
         14:ed:49:11:30:23:f2:d0:2d:03:c8:b4:32:de:ae:bf:f5:3e:
         eb:82:a3:d8:e4:30:fb:55:e8:99:d4:02:16:35:f0:cd:8a:19:
         f4:46:2b:72:16:2d:5c:40:ef:e4:df:7b:9e:2c:b4:9e:c1:d9:
         30:d0:cb:15:67:ac:95:fb:a6:ea:6e:88:c3:f7:77:f7:73:bd:
         9c:25:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:01:38 2026 by rpki-client