Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6a9fff90-98c1-319d-9b04-11e6b49ff1b6.roa
File:                     6a9fff90-98c1-319d-9b04-11e6b49ff1b6.roa (raw, json)
Hash identifier:          Zd/Hho7ZpKVAsLNHigZ0mE5HtdYvYFh3MJ0yJR1FpV8=
Subject key identifier:   02:B7:46:B9:D0:5D:E1:08:EC:55:54:17:49:28:B3:E7:27:A5:A8:A9
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584D624A63B50ADDF70B6ABAFE80
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6a9fff90-98c1-319d-9b04-11e6b49ff1b6.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        161.115.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:63:b5:0a:dd:f7:0b:6a:ba:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=3f8692ce-cc25-4a7c-b570-bb4cc2d13593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:23:39:33:72:33:44:64:a3:db:cc:15:0d:a5:
                    c0:29:01:7d:ae:be:90:1b:c4:0a:68:36:a2:3e:d0:
                    11:67:a9:88:46:17:12:f9:9f:d2:fe:42:53:07:20:
                    c0:15:e3:37:45:da:ff:5b:f9:80:f5:25:5d:f3:50:
                    8e:f4:d9:6e:33:fb:ee:ee:32:12:41:55:6c:49:18:
                    74:72:b8:5b:64:2b:03:11:a9:f1:36:9c:04:98:ae:
                    87:05:0a:66:4e:b0:b8:ab:61:af:4f:ce:21:d8:c7:
                    48:ff:de:37:e9:ad:5d:26:69:b5:3a:a8:61:e8:1d:
                    49:70:48:31:59:a1:98:a5:36:d9:27:61:a3:1b:e9:
                    ee:60:b0:84:a5:0f:8c:9f:c5:60:3d:da:2f:74:0b:
                    72:93:5a:93:60:a2:dc:8b:85:80:81:a0:51:12:31:
                    c0:2c:2f:ab:47:5b:81:49:2d:af:0a:c4:b7:70:6a:
                    dd:5b:64:b5:c8:fb:7b:fb:b9:f1:a7:6e:04:07:8e:
                    35:53:70:10:cc:7f:01:78:15:ce:b8:03:80:5a:82:
                    d4:23:64:e9:98:4b:d6:b4:4a:f9:68:da:33:27:de:
                    0e:46:ad:3b:c5:8e:d5:73:df:98:09:1a:1e:c6:f3:
                    9a:e1:9e:b3:85:e9:00:a0:20:64:01:a8:44:13:ca:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B7:46:B9:D0:5D:E1:08:EC:55:54:17:49:28:B3:E7:27:A5:A8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6a9fff90-98c1-319d-9b04-11e6b49ff1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:31:05:8b:bb:11:5b:e9:44:f6:8c:7a:c6:c5:1a:87:d2:a2:
         e5:4c:06:ae:f5:f6:9f:d8:e5:62:d0:d9:97:12:37:20:bc:e6:
         7a:b3:b7:ed:ea:c1:eb:43:b8:37:8e:ff:b0:47:96:ff:f5:1c:
         01:4d:24:5a:e7:cf:c2:3f:17:7e:ba:ce:ec:b0:96:92:9a:c8:
         38:ea:a6:02:c1:c3:f7:5e:17:cb:7c:d0:4d:62:43:0a:3f:88:
         4c:20:5e:f5:50:14:a7:35:6b:61:8a:0c:42:6b:e8:31:30:88:
         b3:ed:3b:4a:5c:71:fa:70:b3:f5:15:85:21:a9:98:0c:96:11:
         cc:a8:d0:78:49:aa:25:1f:e3:55:d8:76:7b:3e:51:4d:84:95:
         1d:e9:cb:39:1c:c5:68:44:f0:b8:88:1b:63:49:43:85:fd:74:
         1e:ac:8f:c8:27:d3:5d:0b:21:94:7e:9b:75:3c:07:e1:be:d6:
         d5:14:52:95:77:58:dd:dc:4d:32:54:77:d1:da:df:5b:25:36:
         01:71:39:43:e8:c2:11:b5:59:6a:5f:8a:12:bf:34:7e:ff:65:
         25:d2:f2:49:30:b3:9f:ea:32:ce:0d:90:56:60:87:04:66:e2:
         75:ae:db:5a:e6:d7:7e:f6:03:3d:51:bf:9d:68:03:34:ce:59:
         ef:45:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:40:55 2026 by rpki-client