Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6b005c9e-b6a1-3485-878a-a7c273ad05bd.roa
File:                     6b005c9e-b6a1-3485-878a-a7c273ad05bd.roa (raw, json)
Hash identifier:          15XMJklh42MdP3GbSybx6ZArmSG8s4coltdlfMYZIoY=
Subject key identifier:   7E:5E:57:9C:44:30:0B:71:80:61:39:08:A6:94:0F:3E:6B:B3:6E:9C
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584F5767F539B07677F62C8D0B80
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6b005c9e-b6a1-3485-878a-a7c273ad05bd.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        161.107.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:f5:39:b0:76:77:f6:2c:8d:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=2d816ca1-f2e3-4f49-8a86-08e2f412f1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2e:25:51:a7:65:ba:d2:23:86:2d:58:4f:a3:
                    e4:f9:4a:5c:17:e3:26:9c:73:c9:9d:af:b8:ce:c7:
                    ab:d5:07:34:81:76:ed:46:76:18:1c:f8:f8:c2:7e:
                    2e:1f:44:7c:3b:a7:8b:e4:5b:e1:d2:42:9a:b5:83:
                    06:ef:27:e2:24:7d:fe:95:44:fa:a1:8c:c6:d8:0b:
                    2b:96:0b:36:6a:e1:bc:90:fe:fc:c8:33:b2:8b:4d:
                    71:04:c6:3a:fa:cf:9d:c3:e7:f7:22:72:4f:18:bb:
                    20:23:d5:43:05:73:89:e4:b9:62:a7:62:6c:68:41:
                    39:e7:97:68:df:1e:f3:3c:64:26:ac:61:8f:cf:b1:
                    8c:26:8d:07:e6:df:b4:41:43:4a:e2:2d:46:46:1c:
                    c0:45:3a:65:bb:9c:25:78:dd:e9:dd:81:e7:87:67:
                    60:76:ef:c6:3a:d4:46:6d:07:75:8f:66:54:06:ac:
                    de:c9:67:6e:39:94:44:0a:df:45:be:18:11:fc:2b:
                    a5:6f:53:a2:f7:eb:59:8e:e9:56:0f:6b:b6:bc:62:
                    84:c2:14:d4:b7:72:47:92:2c:13:46:1d:8c:47:68:
                    e0:96:41:05:db:df:fd:28:b8:1c:06:e8:b0:8c:c8:
                    8e:5b:19:41:d8:49:e7:db:6d:8d:53:dc:3d:7b:a6:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5E:57:9C:44:30:0B:71:80:61:39:08:A6:94:0F:3E:6B:B3:6E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6b005c9e-b6a1-3485-878a-a7c273ad05bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:47:c0:bb:8b:cc:2b:a3:8e:34:c5:3f:e4:a6:89:bc:67:
         5a:b2:e5:89:2d:3b:92:b3:82:49:d4:5f:6d:ea:96:fb:d0:00:
         1b:7a:c9:f7:e1:8b:b1:57:f8:6c:a5:98:d4:68:ad:5d:ed:28:
         3e:e2:30:69:a6:9c:6f:ef:d2:39:b9:94:c1:0d:41:62:c7:fb:
         1e:73:8d:33:f2:aa:5e:31:4f:67:91:92:c0:86:b9:bf:92:87:
         fe:42:02:65:e3:59:f9:a7:53:18:77:e9:2c:e5:a0:80:c9:66:
         06:01:b9:f3:99:74:68:56:74:be:d7:c3:1c:44:f0:12:45:a6:
         0c:77:2c:df:e8:3a:62:da:f7:96:10:15:b5:0c:23:e7:a8:c7:
         f5:b7:70:bc:d5:30:fd:34:ca:98:40:f1:8b:c3:9b:cf:64:ea:
         1c:cf:cb:a6:5f:19:75:59:32:32:d3:cd:a5:63:c8:ee:09:80:
         e4:bb:3c:0f:f4:7b:e3:9f:66:cd:71:b4:af:d8:1f:79:54:45:
         1d:ef:24:59:7c:e0:4a:fb:e5:86:06:c3:50:26:5b:d0:16:b8:
         b3:59:99:8d:8c:00:c8:c1:e2:97:0a:50:0e:58:a2:7f:3e:3a:
         3c:13:01:97:4a:6b:67:b2:d4:b7:54:df:7e:88:6a:d2:79:0e:
         d4:77:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:22:11 2026 by rpki-client