Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/968aa14f-2456-35a7-98d3-1d405e49ee89.roa
File:                     968aa14f-2456-35a7-98d3-1d405e49ee89.roa (raw, json)
Hash identifier:          Yc3Y3Ha8m7xWoZIvSFyr61KlVqcB/T0RUqdwrieXlCY=
Subject key identifier:   65:EB:0A:84:F5:28:FB:2E:86:61:B8:03:88:A0:D7:F7:42:C3:22:B3
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584E683F613563F12F89E84B48C0
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/968aa14f-2456-35a7-98d3-1d405e49ee89.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        161.115.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:61:35:63:f1:2f:89:e8:4b:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=5514a735-5b78-454e-b7db-f5230648ddd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1a:d9:2e:f3:00:fa:9c:7b:88:50:af:dd:81:
                    14:41:fc:e5:61:c2:02:7d:38:2b:60:8f:b7:a3:e5:
                    0f:d3:17:f7:15:70:5a:2a:35:e6:12:63:7d:58:bb:
                    30:de:77:ba:70:34:6b:4a:6c:76:84:c3:5c:5c:b1:
                    3d:99:7d:e4:c9:8a:72:cd:06:5d:5f:83:ef:11:48:
                    4e:82:f3:c6:ed:9d:e8:25:32:01:c2:58:69:96:3c:
                    c9:7c:cd:c9:bf:32:9d:a9:8e:62:d0:4a:9e:04:5f:
                    28:30:04:b7:e6:6c:ed:f3:f6:2c:90:eb:62:82:d0:
                    e1:19:3d:cd:5d:1e:e3:81:91:ec:75:f9:bc:a4:1a:
                    81:9e:aa:cf:77:e3:66:3d:46:0b:71:78:f4:cb:df:
                    53:d2:70:71:fd:43:48:f9:c5:49:d0:35:91:c5:e7:
                    8e:f9:b6:4f:c6:1d:d6:b8:d5:cd:d4:78:2f:2e:ea:
                    97:b6:e6:24:c1:01:31:fb:3a:a2:c7:92:c7:58:16:
                    7d:a3:bb:1e:60:ec:e7:91:be:09:69:19:f7:c3:51:
                    8c:89:d0:63:21:3f:95:69:d7:2e:48:95:e6:9a:6a:
                    00:10:1b:34:ab:9d:2f:92:ce:ee:39:c2:5e:d1:1f:
                    4f:f1:a9:08:38:b3:83:7e:e1:76:f4:18:91:d8:7b:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EB:0A:84:F5:28:FB:2E:86:61:B8:03:88:A0:D7:F7:42:C3:22:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/968aa14f-2456-35a7-98d3-1d405e49ee89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:71:e4:b6:57:b0:99:da:f4:fa:51:4b:09:f2:fd:aa:41:
         6e:a4:58:99:ec:e7:68:41:e1:52:f6:d3:00:3a:12:a1:15:00:
         5c:9b:dc:9d:09:c0:92:bd:39:81:9c:73:dc:b0:23:dc:fe:d4:
         91:c1:94:c3:0b:d0:a0:eb:55:5d:a2:f0:69:2b:64:61:9c:ed:
         d5:52:17:17:c7:ca:7a:a4:17:41:30:ea:13:34:06:d5:56:3d:
         11:b1:7e:ee:56:be:08:0f:74:f6:21:cf:3c:bb:5a:d9:af:dd:
         d4:8c:f0:b1:dc:90:34:e4:83:64:2d:f4:0d:47:b9:aa:2c:ba:
         de:40:f8:2d:3d:2a:ac:90:49:70:10:e4:58:f0:52:8f:e7:94:
         7c:d3:9b:fe:c3:dc:8f:44:51:05:2d:9f:89:de:85:48:b2:12:
         18:17:77:68:8a:b4:f3:9e:09:2c:4d:f5:0f:c8:4d:d0:34:20:
         75:e2:f3:40:a3:17:97:fa:60:4a:61:5f:b6:34:67:4a:6e:c6:
         15:4b:21:da:06:7e:74:0a:bf:38:99:53:81:11:a6:e9:be:e6:
         7d:53:ee:f9:00:14:39:48:9c:7f:7e:14:03:dc:08:fe:d8:f5:
         ce:44:cb:a0:a2:9c:7b:a9:ac:72:bd:e2:eb:40:4d:b5:87:bf:
         07:67:19:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:56 2026 by rpki-client