Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa
File:                     6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa (raw, json)
Hash identifier:          qIwj6tOe+JKWY4TxBNlZECMxBlKZnlY+eImiaidu36s=
Subject key identifier:   F2:37:D2:A6:49:45:88:AF:FB:86:83:9D:C8:82:C4:21:57:42:97:FA
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584F71EDC041DDA09D538CBDFA00
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     394352
IP address blocks:        161.38.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:c0:41:dd:a0:9d:53:8c:bd:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=633893ac-c8a4-4ef8-9a2c-c745b76e2e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:72:c2:fd:0c:a8:9a:7e:80:ad:a7:9b:31:
                    d1:4b:97:dc:af:93:7f:6b:ad:57:39:c8:0c:ff:c6:
                    fd:ff:9a:8f:2e:fe:45:b8:73:58:e9:f6:52:88:e4:
                    0d:2c:0d:9e:22:af:54:7a:95:79:a0:9e:37:f0:2d:
                    75:5f:6b:dd:e5:f6:e1:ed:1c:3e:4c:cd:96:74:28:
                    00:0d:33:21:e5:a0:08:7d:6c:42:d7:76:1c:74:3c:
                    ba:af:04:9b:2c:a9:e0:77:25:92:96:d0:e6:74:6e:
                    aa:6d:7e:59:d0:3c:81:a2:46:ed:b4:ea:03:16:23:
                    5a:64:7f:a0:ad:74:af:c3:b6:af:1a:cb:e6:1b:dd:
                    f3:e1:a5:69:e5:c2:d0:b8:a1:ed:76:26:27:aa:db:
                    13:ca:8b:87:9a:aa:38:86:de:a6:e4:70:ff:ab:30:
                    59:92:00:dd:c8:c6:4b:4b:64:26:1e:76:86:88:54:
                    cd:59:d4:28:26:78:17:65:44:51:fc:d1:82:2b:88:
                    eb:37:d7:7e:1e:79:99:eb:55:fa:7a:43:6b:98:c7:
                    59:38:89:29:f8:c9:88:c5:91:20:cc:68:23:87:7d:
                    30:a0:68:a0:60:10:13:1d:3c:d3:6a:55:e7:7f:68:
                    0b:0f:5a:0b:f8:72:86:73:84:e2:e9:b1:45:bb:cc:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:37:D2:A6:49:45:88:AF:FB:86:83:9D:C8:82:C4:21:57:42:97:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:57:e6:8c:56:8c:b3:31:fb:e9:21:07:bc:6c:85:57:6b:
         88:2b:04:bf:ad:00:44:cd:72:5e:c6:d5:5e:3c:52:fd:74:32:
         17:01:d4:1c:b6:fe:98:3e:b4:82:06:69:e6:de:e4:90:f9:fb:
         df:1c:ae:00:2d:b7:53:51:eb:ca:e2:d7:3f:91:b8:fa:d9:21:
         a7:b5:c4:53:46:f0:8b:71:aa:85:bc:ec:09:38:b4:53:02:ba:
         e7:8a:cb:6e:84:4d:62:28:4a:70:6f:5a:30:7b:f9:62:6e:b6:
         e6:c0:96:1c:0d:8c:d5:05:1e:04:69:28:c6:42:34:c8:75:27:
         f5:d6:6e:54:81:b6:14:fa:ef:6b:df:0c:44:c9:f9:92:7e:fd:
         38:4c:71:59:c1:cc:f6:5f:43:7a:ef:c5:79:2a:dd:27:95:2d:
         b8:96:8a:bc:10:01:81:a7:96:1d:7f:19:b8:ae:5d:59:77:55:
         3b:c6:ba:0d:74:fd:35:07:57:a9:63:a7:fe:03:87:34:09:a1:
         fe:7c:5d:a9:d9:d2:52:4e:cd:4e:ac:1d:b9:12:e3:74:d8:99:
         2a:bd:02:fa:d3:40:0a:14:6c:7a:2f:13:6d:ba:85:2a:89:cc:
         11:1c:c8:ca:9c:71:b2:51:ee:c5:8a:a5:e8:a0:1d:c8:4c:6e:
         0b:b4:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:21:21 2026 by rpki-client