Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/9bde89cb-83be-3736-ab68-27dfcc8ee14e.roa
File:                     9bde89cb-83be-3736-ab68-27dfcc8ee14e.roa (raw, json)
Hash identifier:          qhQNqZVRYFXc+vQ80ztmG6HdRKs3KWH39GnOfWmrbZo=
Subject key identifier:   B4:0A:DF:B2:57:BA:54:08:85:CA:65:A0:56:CC:57:CF:92:49:84:70
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584EA79896EB6D3D606D9EF96680
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/9bde89cb-83be-3736-ab68-27dfcc8ee14e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        161.115.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:96:eb:6d:3d:60:6d:9e:f9:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d93a9eac-5502-4c13-abc0-84497107b541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:c9:9d:ad:5a:51:0b:bb:a9:ba:c1:34:11:
                    12:15:b3:17:29:31:93:c0:43:80:40:de:3b:79:e7:
                    63:7d:bb:fb:72:dc:b4:ea:1d:81:4e:cd:03:c2:be:
                    f9:d7:39:c5:68:e4:cd:b6:78:78:c6:b9:19:5d:83:
                    1a:b3:44:0d:29:c0:e2:97:5d:f2:86:0e:fa:95:3e:
                    4d:08:7e:7f:68:6f:cf:34:c0:cf:f8:1f:41:d4:30:
                    06:0e:89:55:b6:56:2b:5e:89:6e:aa:24:0d:d6:92:
                    88:a7:53:49:34:39:29:50:37:ee:2b:c1:da:a4:66:
                    55:66:54:d2:74:e5:a1:1d:8f:50:0c:3a:c1:97:32:
                    04:f4:29:84:c6:9c:b7:13:b4:1b:43:96:1e:f5:b0:
                    8f:29:e8:6d:79:6c:d7:8c:3a:59:1e:7a:73:40:5b:
                    6b:9c:57:cc:2c:a3:1f:b9:42:a5:69:da:90:8d:94:
                    ae:eb:ba:7f:4c:d0:0e:b0:84:8c:2a:c9:2a:4d:cf:
                    c4:2b:2b:89:3e:27:7b:82:69:a4:fb:e3:be:d4:0f:
                    cf:99:fa:8e:b7:26:7b:7e:90:84:c8:c3:26:65:8c:
                    da:23:71:b8:5f:65:6c:ae:6d:52:c1:85:43:12:6d:
                    b2:97:be:8f:c9:f0:b2:27:c7:8b:7f:e8:16:ef:3f:
                    54:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0A:DF:B2:57:BA:54:08:85:CA:65:A0:56:CC:57:CF:92:49:84:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/9bde89cb-83be-3736-ab68-27dfcc8ee14e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:9a:3d:a8:5a:9e:54:c4:22:fe:01:19:3a:a6:53:f5:e1:
         48:e1:03:8a:7e:c6:f5:47:c4:42:fb:67:55:5d:40:77:02:d1:
         64:f5:73:8b:2e:46:a1:be:2b:d3:e7:99:4f:95:85:e3:f3:6b:
         2a:0f:c6:4c:46:a5:7d:d6:03:dd:90:d5:81:46:87:c7:17:77:
         84:f4:4a:47:77:1b:2d:71:6a:42:cb:5b:2e:15:47:01:0e:b1:
         50:c8:78:da:19:b2:a8:34:88:12:c4:34:e7:77:62:31:c8:31:
         f1:c9:77:51:8b:96:cf:0f:26:af:4c:2e:b2:5f:45:20:e6:3d:
         b8:7b:52:43:35:48:14:bd:58:5c:3e:fe:13:67:00:1d:43:96:
         7a:e0:cd:02:f8:60:69:30:83:8a:b7:73:ed:df:65:46:22:19:
         65:09:5d:38:93:39:dc:ac:a0:4d:3b:2a:55:64:ea:f9:5a:75:
         40:79:74:eb:f7:4d:ef:e6:ee:3b:85:94:5b:85:a0:00:c6:b9:
         7a:12:35:93:35:28:fc:c4:7e:c7:91:32:d0:ca:79:c2:df:3d:
         9f:8b:e4:fe:3b:a4:3e:cb:3e:d8:b5:af:bb:88:9f:aa:4f:50:
         3c:ba:c9:ed:88:92:7e:44:09:fc:ce:9f:e9:75:2e:34:63:21:
         6a:e3:90:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmJbrbT1gbZ75ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc5NTkxZWItZjhmZi00OGY1LTlhYzYtZTFhZmEyM2U1
M2ZiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDkzYTllYWMtNTUwMi00YzEzLWFiYzAtODQ0OTcxMDdiNTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeHJna1aUQu7qbrBNBESFbMXKTGTwEOAQN47
eedjfbv7cty06h2BTs0Dwr751znFaOTNtnh4xrkZXYMas0QNKcDil13yhg76lT5N
CH5/aG/PNMDP+B9B1DAGDolVtlYrXoluqiQN1pKIp1NJNDkpUDfuK8HapGZVZlTS
dOWhHY9QDDrBlzIE9CmExpy3E7QbQ5Ye9bCPKehteWzXjDpZHnpzQFtrnFfMLKMf
uUKladqQjZSu67p/TNAOsISMKskqTc/EKyuJPid7gmmk++O+1A/PmfqOtyZ7fpCE
yMMmZYzaI3G4X2Vsrm1SwYVDEm2yl76PyfCyJ8eLf+gW7z9UowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQK37JXulQIhcploFbMV8+SSYRwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1
OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFmYTIzZTUzZmIvOWJkZTg5Y2ItODNiZS0z
NzM2LWFiNjgtMjdkZmNjOGVlMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjc5NTkxZWItZjhmZi00OGY1LTlh
YzYtZTFhZmEyM2U1M2ZiL2Y3OTU5MWViLWY4ZmYtNDhmNS05YWM2LWUxYWZhMjNl
NTNmYi5jcmwwHwYDVR0jBBgwFoAUC3rnSZ44dN+bLPVV81syl2w4I3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFm
YTIzZTUzZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoXO4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFk6mj2oWp5UxCL+ARk6plP14UjhA4p+xvVHxEL7Z1VdQHcC0WT1c4su
RqG+K9PnmU+VhePzayoPxkxGpX3WA92Q1YFGh8cXd4T0Skd3Gy1xakLLWy4VRwEO
sVDIeNoZsqg0iBLENOd3YjHIMfHJd1GLls8PJq9MLrJfRSDmPbh7UkM1SBS9WFw+
/hNnAB1DlnrgzQL4YGkwg4q3c+3fZUYiGWUJXTiTOdysoE07KlVk6vladUB5dOv3
Te/m7juFlFuFoADGuXoSNZM1KPzEfseRMtDKecLfPZ+L5P47pD7LPti1r7uIn6pP
UDy6ye2Ikn5ECfzOn+l1LjRjIWrjkN8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:36 2026 by rpki-client