Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/d663d2b8-91e1-3482-89de-9ea4d0084935.roa
File:                     d663d2b8-91e1-3482-89de-9ea4d0084935.roa (raw, json)
Hash identifier:          Oqcr+DwslCcry7AtePFMQ9XbH5JO9+hCqcGHuqBE5nQ=
Subject key identifier:   3E:46:67:C0:0E:CF:73:68:24:CA:0F:9C:F7:E4:1A:43:21:86:07:D1
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584F549D5EEFFD6080C1F1F107C0
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/d663d2b8-91e1-3482-89de-9ea4d0084935.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        161.115.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:5e:ef:fd:60:80:c1:f1:f1:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=425c15f8-b25e-4211-b2ef-16af087578ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:28:74:e6:c7:ad:aa:c5:03:a6:df:b7:e7:
                    58:41:91:cc:93:c4:38:78:ca:be:18:50:01:66:f8:
                    d4:7c:95:4c:99:4a:a6:7c:d1:33:4d:7e:8c:91:6c:
                    65:7f:61:7a:7a:5a:59:82:b2:27:21:53:5f:db:09:
                    c8:47:0d:c1:4d:64:12:67:fb:fd:ed:ac:c4:e0:fe:
                    69:f4:f7:8a:81:65:7c:98:b1:3d:1f:6f:fa:02:dd:
                    3c:05:bb:83:cb:08:13:aa:83:0f:38:5d:62:32:ee:
                    67:b3:47:65:9f:37:c1:9b:f5:77:ef:bb:71:5d:43:
                    d3:ae:35:0f:72:ff:e9:b4:2e:af:eb:3b:d2:94:57:
                    50:2d:bf:bd:95:b9:da:2f:4a:d7:9b:32:2e:8e:5f:
                    fd:59:06:e0:e0:37:fd:08:2a:52:cc:b6:41:17:e0:
                    72:80:ec:7b:35:57:25:8a:5f:1b:0a:6b:af:bb:85:
                    cc:6f:54:98:8c:5b:ad:86:4d:3d:9f:bb:96:05:b4:
                    60:3d:e5:4f:8e:d5:98:92:d1:40:80:44:5b:65:79:
                    7e:c8:7d:5e:a5:19:50:59:73:07:9c:5f:79:e8:ea:
                    c2:b9:63:45:23:e2:f3:5b:95:29:ab:05:3d:b2:35:
                    19:3b:99:73:30:a2:37:c2:45:55:8e:8a:9f:07:64:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:46:67:C0:0E:CF:73:68:24:CA:0F:9C:F7:E4:1A:43:21:86:07:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/d663d2b8-91e1-3482-89de-9ea4d0084935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b1:e7:66:b2:f7:7b:4c:f4:1b:95:72:36:c1:49:35:01:30:
         39:70:7d:25:a2:7c:1e:5e:7c:db:af:7d:9c:78:66:c9:fb:68:
         0d:72:0e:e2:b0:70:2e:f1:d3:f5:1a:12:09:ea:2b:6f:0f:c2:
         8c:2e:a9:af:13:eb:3a:57:14:a8:24:ea:07:2d:ae:8a:35:41:
         be:34:84:5a:14:1e:e8:d4:ef:a1:0c:f7:86:ef:45:9d:6f:50:
         3d:87:fe:74:86:ca:49:54:3e:88:8f:1f:ed:e5:96:36:76:96:
         fb:5e:91:d8:c5:0d:98:22:fa:8b:f1:ac:03:a4:85:2e:63:5c:
         80:fc:eb:61:8d:01:ef:d4:80:2f:4a:20:ff:86:bd:a8:8d:28:
         69:a7:eb:be:57:a0:3a:2e:8f:2d:bf:f3:32:f2:a2:52:78:9d:
         2e:e8:b5:a4:19:02:8a:80:b9:d2:4f:8b:f6:3b:c8:ff:38:c7:
         c0:14:7f:10:0e:62:7a:dd:3c:39:0f:93:43:98:16:5e:9f:31:
         38:fa:77:1a:a8:43:16:56:68:a6:06:5a:7b:50:5d:9a:17:a2:
         dc:f0:94:d3:7f:cb:01:2c:1c:f0:d3:c7:94:61:46:39:ad:6b:
         da:d7:dc:78:dd:87:0a:cf:0e:e4:48:97:df:c4:62:3e:f3:9c:
         de:e6:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:42:14 2026 by rpki-client