Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa
File:                     16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa (raw, json)
Hash identifier:          5Y5AADdVsqwy+8SOFt+8P5UmL9yS3hpPPoPvs0c8KVQ=
Subject key identifier:   1A:68:A9:59:08:50:1D:B9:55:AC:8E:14:88:61:D3:6A:CF:05:7A:63
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F4328584EA79434CCCD41728270041780
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396479
IP address blocks:        161.38.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:34:cc:cd:41:72:82:70:04:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=48b5696c-4716-478e-8f71-20869bdf662e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:c1:2d:cf:be:56:33:dc:f2:af:a4:2f:04:
                    da:0b:61:d1:c4:bc:70:b9:a9:1a:1f:b5:5b:e6:01:
                    f4:81:2e:b0:85:7f:48:05:12:ce:87:58:8b:74:32:
                    3e:af:e2:9c:6d:57:b1:2e:9e:1b:04:4a:78:92:97:
                    91:24:31:80:ff:51:2f:7d:2b:c4:71:92:3f:e7:04:
                    6c:ce:1a:b2:6e:44:ec:52:2c:ce:91:f4:4d:cb:d5:
                    3e:11:78:95:99:9a:5e:6a:f9:64:9b:74:df:2e:82:
                    9d:fd:60:fd:7e:fb:67:00:67:06:ca:7c:37:8b:38:
                    a1:8e:99:78:ca:72:b1:be:87:d6:07:91:d9:1b:41:
                    be:fc:87:40:cc:ed:1f:8e:d0:1a:56:3a:a5:74:fa:
                    e5:68:89:8f:d6:31:a1:1b:02:96:40:96:23:67:5a:
                    dd:0b:10:19:0e:6f:0e:dd:5a:e3:af:dd:ff:3c:51:
                    17:45:ca:2b:56:d5:ff:4e:c0:60:4f:0c:5a:8d:aa:
                    9b:5e:a4:c5:57:b7:08:c5:1c:ef:f3:9c:65:12:c9:
                    74:90:a1:92:3a:6d:b8:8d:d2:b1:ef:ba:4c:5b:50:
                    8c:dc:62:37:12:0c:19:a9:6c:41:5e:0e:c6:6f:0d:
                    56:ed:20:6a:e6:73:c2:b9:24:d3:ed:da:91:08:84:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:68:A9:59:08:50:1D:B9:55:AC:8E:14:88:61:D3:6A:CF:05:7A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:67:f2:9c:5c:6b:b1:73:02:fc:d7:f2:1d:31:c1:e4:54:
         7a:a9:34:ae:fa:e9:9f:8d:8e:55:f3:23:c0:b2:88:cb:95:1a:
         05:22:9f:71:ca:17:33:60:0c:16:ef:55:b6:66:c8:2e:5b:ee:
         1d:a1:b0:fc:45:dd:7e:09:8a:ee:f4:72:c1:5c:ab:6d:f0:fb:
         99:1b:48:a9:55:79:8a:c2:11:bf:f7:bf:a7:05:97:d0:cf:12:
         71:ac:fc:29:20:df:ee:1a:72:fd:b6:7d:69:82:f0:82:e0:59:
         7c:12:a5:6f:4a:f6:04:bc:47:5e:e8:09:1d:b2:65:c8:13:2e:
         44:81:52:e5:42:3e:7c:37:29:d3:e1:b9:53:ea:19:d6:66:e2:
         39:b8:e3:f4:dc:18:e2:ae:22:91:90:18:09:48:69:75:3a:f4:
         08:1a:7c:c7:a5:26:0b:00:e4:c6:0f:17:b6:0b:79:96:77:24:
         a6:a9:15:e1:b1:4f:69:95:f5:df:9f:41:8e:51:43:96:cf:45:
         b5:72:cf:75:d2:cd:42:e3:7b:40:bd:db:eb:9a:72:22:cf:10:
         8f:a3:8a:05:93:9a:82:81:3d:45:9e:51:ec:b4:fd:2d:f7:a7:
         fd:59:37:60:f1:b9:8b:3c:13:75:bc:d9:e9:0f:ae:b7:45:1d:
         4b:96:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:40 2026 by rpki-client