Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/563cdfc0-56c1-39b7-be2c-3598d0562265.roa
File:                     563cdfc0-56c1-39b7-be2c-3598d0562265.roa (raw, json)
Hash identifier:          Vib8KOjzEGyOK4RU7PE211OebU3VjxveZpRqmDuM+z0=
Subject key identifier:   12:A0:9C:8E:93:C9:0B:63:21:DE:99:2B:D6:9C:33:58:32:9B:3D:38
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584D74701EB20BD8384E45A516C0
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/563cdfc0-56c1-39b7-be2c-3598d0562265.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        161.115.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:1e:b2:0b:d8:38:4e:45:a5:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=16ee5faa-f753-47a2-a943-2e3eb571eaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:6d:eb:04:e7:55:80:11:27:c0:18:7d:bc:
                    18:5d:21:da:99:10:1a:ba:ed:e9:ee:99:e4:f5:5c:
                    c9:e5:53:a4:4b:03:0c:f0:3e:8a:1c:3f:3c:c5:d0:
                    27:d0:65:1d:78:bc:14:ff:86:c8:f5:0d:5d:a3:77:
                    96:be:ea:aa:f7:41:9c:ec:38:9d:bc:33:14:54:27:
                    0c:f7:93:84:67:8f:1f:ca:99:d2:7d:39:79:db:79:
                    bd:d7:a2:cf:6c:0d:73:25:a0:01:9e:bb:5c:10:fa:
                    bb:a6:e4:e3:68:f2:15:d1:3f:ba:81:29:86:cf:16:
                    75:cf:89:3a:9f:de:2c:b9:60:13:e8:09:97:0f:9e:
                    4c:99:4f:b7:32:d1:7a:3a:ef:46:ee:bb:5c:78:ac:
                    4f:d8:95:e0:f7:ac:76:c8:32:04:8e:08:de:a8:41:
                    fb:20:71:0d:99:ed:f9:22:07:f6:7d:b4:c6:c9:89:
                    a1:c7:f2:ff:0b:8b:dc:57:d5:78:93:7f:4f:a7:40:
                    33:57:8b:6f:bc:eb:01:06:f3:09:a8:56:50:a3:53:
                    3b:ff:8a:1b:1f:c6:b3:1a:65:36:ac:15:98:75:2c:
                    b4:3e:6d:3b:ea:e2:11:31:ea:b0:13:2d:a4:17:2c:
                    a6:7d:9c:77:20:be:53:08:64:d5:8f:a1:90:06:4e:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A0:9C:8E:93:C9:0B:63:21:DE:99:2B:D6:9C:33:58:32:9B:3D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/563cdfc0-56c1-39b7-be2c-3598d0562265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:b2:a7:0a:c9:3b:f6:f8:52:9d:0f:7d:81:2a:a5:99:67:
         df:15:6c:c1:ad:2c:70:5b:e1:75:28:dc:d7:47:8a:2e:1c:89:
         ce:5c:54:76:fa:f8:94:59:6b:2f:28:7b:1c:f6:bd:a0:ad:72:
         e6:63:f3:4a:ee:65:8d:75:b5:24:87:61:f3:f5:82:3e:12:22:
         ce:4c:66:d9:d0:b8:e6:85:93:a7:97:77:49:27:4e:72:01:6b:
         5a:fe:96:d8:e6:c2:c4:19:9a:93:f4:87:01:7b:1e:0c:64:c5:
         3f:aa:e3:f6:75:25:73:67:f6:00:89:9e:fb:c7:b6:9d:fd:15:
         71:25:61:d7:26:d0:fe:d1:62:27:7d:92:5d:e9:12:04:c8:9f:
         42:25:8b:02:0f:a1:60:70:c6:7b:71:6a:45:13:42:b2:b1:f0:
         25:e0:54:e6:9b:81:30:09:1f:8d:bb:ce:7e:43:71:4b:5e:28:
         de:6e:03:a8:16:db:59:20:1d:10:8d:4a:38:fd:da:cd:e5:61:
         2c:da:d8:59:f3:ad:45:3e:b0:a1:ee:ca:54:5a:81:16:2c:c4:
         f4:6e:8c:ed:a3:b3:1a:11:b2:bf:61:fe:a8:ec:7d:ce:94:2f:
         e6:9c:39:51:9e:10:f4:4a:1c:1d:6d:50:59:a5:83:86:50:4c:
         5e:5c:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:55 2026 by rpki-client