Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/4659c7d8-6afd-35c2-b621-4eef04d1967a.roa
File:                     4659c7d8-6afd-35c2-b621-4eef04d1967a.roa (raw, json)
Hash identifier:          ttDLFpZTiVZojDPtfaTjy50jYvielhA3ksl7kDRSUW4=
Subject key identifier:   90:94:00:52:FB:01:C9:8D:4B:9C:D2:78:D5:B6:83:90:22:12:64:C5
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584F4988DE378F448F40E65BE780
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/4659c7d8-6afd-35c2-b621-4eef04d1967a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        161.115.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:de:37:8f:44:8f:40:e6:5b:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=31a35c76-cfa1-4220-b5e9-8c6f99cb6eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:f7:3a:b8:96:96:21:97:1a:b3:bc:6b:ef:
                    04:7a:0a:c4:bc:cf:83:70:1d:46:47:36:cc:03:0c:
                    8c:d3:59:64:b6:75:20:5a:e7:0b:43:02:42:76:b4:
                    25:48:5d:bc:8f:8c:46:ad:93:47:7d:33:41:4a:cd:
                    b1:8d:a7:d5:85:43:17:27:62:08:ba:c8:62:d6:c6:
                    25:d1:68:f5:b1:21:74:8f:6a:db:a8:c4:a2:2e:e4:
                    60:7b:75:f9:45:dd:4c:d1:81:72:8d:2d:7d:47:67:
                    24:8b:e4:fe:85:63:21:c0:98:b5:37:e1:e2:e7:b4:
                    c2:79:15:8f:f0:b2:23:53:42:a0:3e:d4:e1:50:73:
                    d2:b4:2a:6b:64:44:fa:28:f3:22:c9:df:58:96:97:
                    b2:13:24:ba:b0:b2:a2:4e:76:17:88:d4:7d:ae:2b:
                    d3:20:71:fa:ca:1c:ba:c8:bc:49:9b:5b:78:ce:bb:
                    08:2d:4f:86:c3:1e:23:6a:08:fa:ff:9e:32:ea:89:
                    46:d6:a3:ef:3b:5d:f1:5b:59:79:fa:d0:fa:c0:c5:
                    59:47:95:8f:29:49:c7:16:6b:5f:b8:14:b8:22:9d:
                    70:bf:3a:02:97:5a:6e:e9:fc:9e:e4:00:c9:9b:41:
                    f7:ce:46:1d:b6:23:56:c6:37:93:1c:d4:ca:29:d9:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:94:00:52:FB:01:C9:8D:4B:9C:D2:78:D5:B6:83:90:22:12:64:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/4659c7d8-6afd-35c2-b621-4eef04d1967a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:e5:b3:08:e3:b6:38:30:6d:ac:fb:54:f6:58:96:17:fb:
         a8:00:35:b6:72:76:58:65:f2:dc:d5:f2:14:5e:d7:56:e2:13:
         84:51:76:f1:91:9a:8b:85:60:73:ee:27:2e:63:15:f0:09:2f:
         d9:21:04:11:0a:82:83:da:08:5b:0d:5c:57:4f:bf:cb:72:49:
         a7:ac:dc:70:5a:40:69:4f:f4:d7:50:56:8e:64:e5:65:12:ec:
         ac:3b:30:7b:af:ed:97:93:ff:22:7f:3e:23:6e:93:d2:a5:c5:
         7a:7b:8e:66:07:4c:e1:2d:8d:ef:9e:c5:07:89:f7:23:aa:1c:
         ef:3b:d0:1f:2b:74:25:38:7f:19:4e:10:d3:9f:18:21:42:44:
         bc:bb:57:30:df:5a:92:9f:9f:58:cb:22:8e:57:f5:de:b5:a1:
         b6:e5:67:4d:04:93:a1:dd:e9:c6:06:69:c9:50:63:ac:76:42:
         e1:23:08:b7:e2:aa:c2:43:c2:2b:e0:8f:2f:f9:19:43:f5:c2:
         46:ea:f3:6e:58:45:7b:cc:e6:2c:bf:c5:2d:3c:a2:3a:1c:36:
         b2:1e:da:bf:44:27:53:fd:fb:7b:9d:fa:50:d5:32:d3:d6:69:
         2e:f6:2d:37:c0:8d:0e:c0:7b:6d:db:a7:7b:eb:83:57:de:de:
         a2:80:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:01:09 2026 by rpki-client