Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/fb18f710-affc-3092-bb31-b7d1d2250355.roa
File:                     fb18f710-affc-3092-bb31-b7d1d2250355.roa (raw, json)
Hash identifier:          zb1OdxeRY0X4eANQU6bgwu8QOosilHzxMgQts4Vu2lg=
Subject key identifier:   68:2F:64:71:FD:03:E2:1D:24:CC:19:D7:7B:91:65:E2:60:5B:06:35
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584F69DF57B7EFBCA12D2A1915C0
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/fb18f710-affc-3092-bb31-b7d1d2250355.roa
Signing time:             Tue 06 Oct 2026 15:45:20 +0000
ROA not before:           Tue 06 Oct 2026 15:45:20 +0000
ROA not after:            Mon 04 Jan 2027 16:45:20 +0000
asID:                     15092
IP address blocks:        161.199.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:df:57:b7:ef:bc:a1:2d:2a:19:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Oct  6 15:45:20 2026 GMT
            Not After : Jan  4 16:45:20 2027 GMT
        Subject: CN=38bb4e0d-137e-493f-a0f6-bcd59356d91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:37:a3:12:e9:21:85:b5:49:b0:f7:40:fc:
                    ae:fe:fe:36:b7:61:78:eb:57:ae:41:38:a8:f4:7e:
                    7b:ec:b1:f9:78:a5:f4:5d:b3:fd:9b:d9:52:02:02:
                    ce:77:e7:f5:1f:e1:f7:d3:75:92:c5:79:45:78:7c:
                    6f:f9:12:e9:78:ed:38:bf:7a:12:9e:d0:ee:be:b9:
                    4f:4b:da:3e:f4:6b:e6:ce:73:34:59:95:ed:2f:63:
                    38:e3:ca:c5:2f:c5:d6:a1:c8:4a:81:2c:58:ec:42:
                    d1:c1:43:59:69:6f:0e:7c:0f:2f:77:26:e8:2e:1c:
                    d2:1a:b0:e3:ff:3f:54:f2:4f:de:24:df:a6:b7:ac:
                    64:48:be:c6:e1:7a:f5:c7:bb:da:cc:c8:05:98:df:
                    ca:e9:03:13:b6:86:a8:e3:f8:33:24:aa:34:26:7c:
                    af:d9:7f:22:db:fe:a6:70:20:c2:09:b1:31:e1:ae:
                    66:c8:aa:88:52:e5:91:84:34:14:87:2c:cc:a0:07:
                    17:b4:52:82:91:4e:a6:24:15:1e:fa:29:16:5d:88:
                    f7:36:5e:c2:e7:df:aa:d4:04:a9:36:da:a9:7c:b4:
                    95:d4:da:97:5c:aa:fe:f6:28:24:c4:e3:e0:bc:13:
                    51:6e:ff:79:2c:0a:cf:0b:a7:e2:b3:c9:83:c9:e0:
                    fe:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2F:64:71:FD:03:E2:1D:24:CC:19:D7:7B:91:65:E2:60:5B:06:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/fb18f710-affc-3092-bb31-b7d1d2250355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:3d:b1:3a:34:46:de:24:f7:70:c8:2d:d6:7e:be:5c:61:
         15:33:cc:e3:ac:0f:93:23:a3:47:3d:97:de:a1:64:fb:f8:d0:
         18:2c:86:ac:04:8a:7d:bf:7f:0a:bb:d7:35:1c:09:44:df:b6:
         e0:e3:d1:15:25:76:62:aa:22:d2:06:44:9d:72:15:dc:0b:5b:
         65:5d:c2:60:33:2a:44:55:5b:ad:57:26:67:51:f3:ae:48:b8:
         c4:2b:b1:a1:02:4e:72:bf:cf:a6:64:5f:1d:b0:96:50:24:a6:
         1e:67:96:a4:ae:d6:87:74:91:0b:39:be:84:8a:df:69:38:45:
         f4:0a:3d:f4:e5:e7:ff:54:5d:ef:da:6f:30:c7:70:cc:b8:34:
         1e:66:f6:0c:e5:5d:3d:01:56:1c:83:f0:0b:30:92:a2:39:74:
         83:cb:38:b4:69:a0:a4:ac:fe:9b:b3:b6:1f:71:91:2b:3c:f0:
         c2:17:35:db:07:ef:2f:b9:ac:86:df:9b:f7:56:2a:de:17:85:
         ba:b6:b0:d8:5c:33:c6:8e:9a:5a:2c:89:dc:f1:09:18:24:4f:
         8e:87:ac:a6:52:c3:10:f8:19:af:43:5d:46:94:08:f9:4c:d7:
         46:a3:53:dc:7a:de:c0:87:1d:97:c8:f4:05:75:c9:d7:e5:ad:
         f9:9f:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:55:32 2026 by rpki-client