Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f8c946d2-7594-3815-973a-2aa03f2f886d.roa
File:                     f8c946d2-7594-3815-973a-2aa03f2f886d.roa (raw, json)
Hash identifier:          7j8GwYrWdp7yJsFs2axx//Q0xhI95AYl2T0q9NzrvKE=
Subject key identifier:   8F:1C:38:9D:05:21:E4:BF:3A:19:82:CB:A8:16:3A:48:0E:6C:54:BB
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584E1DCEC5EAE614C746F492DA00
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f8c946d2-7594-3815-973a-2aa03f2f886d.roa
Signing time:             Tue 09 Jun 2026 17:03:35 +0000
ROA not before:           Tue 09 Jun 2026 17:03:35 +0000
ROA not after:            Mon 07 Sep 2026 17:03:35 +0000
asID:                     31898
IP address blocks:        161.115.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:ce:c5:ea:e6:14:c7:46:f4:92:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Jun  9 17:03:35 2026 GMT
            Not After : Sep  7 17:03:35 2026 GMT
        Subject: CN=821aedb4-4b1c-4a37-88e8-843efad73d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e5:c5:23:4e:1d:de:d4:74:12:ac:99:54:20:
                    92:7e:1c:10:8a:34:11:06:b9:c2:24:f3:6a:19:a1:
                    56:80:c9:78:e4:99:9a:8a:ca:0d:ba:ac:6f:c3:a3:
                    18:2e:85:e6:97:38:50:63:43:04:fe:46:a2:1c:96:
                    cc:e4:39:1c:4d:9c:3e:f8:ac:80:2c:d0:ab:9b:b3:
                    6f:0c:0f:93:00:b8:52:9c:d1:cb:d5:87:fd:a8:17:
                    3b:49:f3:20:1e:f5:da:22:e3:b1:75:a1:7d:7c:47:
                    40:2a:e1:d6:09:b1:fd:23:d9:cd:b9:80:bc:50:92:
                    c8:3b:0b:86:31:be:62:3c:18:2b:3e:49:f0:ca:ec:
                    0e:83:54:23:cf:a6:99:42:28:cf:87:39:e5:ea:28:
                    f3:14:06:2c:e1:4e:8f:4e:e4:23:1f:ae:2f:31:7b:
                    19:b9:dd:0d:62:ef:c4:27:57:ac:a7:ac:6e:b8:e9:
                    dd:fb:14:5e:5c:0c:15:94:5e:2c:ab:76:21:97:71:
                    b1:29:c7:4f:8f:b7:1e:52:66:bf:81:58:3c:2b:2c:
                    0f:0b:b2:43:f3:e7:8c:99:18:42:8d:f9:de:74:cd:
                    97:32:88:dd:9d:54:d2:61:e5:ea:77:89:dc:25:e6:
                    3b:3c:c5:60:ad:47:b8:e4:39:05:a5:74:68:2a:01:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:38:9D:05:21:E4:BF:3A:19:82:CB:A8:16:3A:48:0E:6C:54:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f8c946d2-7594-3815-973a-2aa03f2f886d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:de:18:03:4b:9d:14:7d:b3:4c:ce:36:dd:77:1a:f1:2a:cc:
         03:11:a1:c7:41:cd:16:4e:b0:14:50:2b:17:89:a0:d8:6f:3b:
         20:65:eb:41:f1:96:de:6a:2f:fa:8c:83:14:dc:ec:bf:cd:0a:
         d5:6b:f3:9e:dc:7a:6c:4f:24:c0:25:e2:2e:08:3f:9e:3b:50:
         b9:19:1f:1d:91:64:b8:ff:ea:ce:b0:f3:1c:27:d0:51:05:24:
         97:69:84:68:07:e1:fe:20:cf:5a:a6:2c:23:fe:e0:a5:ab:c5:
         f7:bf:95:bf:1f:d4:55:c5:7d:45:7a:07:f1:0d:0b:bd:cd:b5:
         40:bb:2c:41:1d:67:c4:31:9d:87:ee:00:00:1e:ba:b5:0f:c8:
         c2:60:c3:98:79:c9:1e:25:36:7a:89:b9:ab:fb:d9:00:f3:05:
         71:6c:48:dc:fd:5b:55:25:8c:fd:db:9b:13:cc:17:74:12:93:
         8f:f4:b5:22:f8:a4:c1:01:c7:15:d1:6b:50:e0:1d:b8:e8:3e:
         3f:89:db:89:0e:ff:75:fa:07:6d:4e:7c:0f:62:c2:9a:5d:b3:
         c6:a2:27:d4:6d:09:26:4a:1e:f8:47:43:45:e2:20:f1:0c:35:
         50:56:1c:04:c5:d3:19:89:a0:54:c7:f3:19:29:a6:cf:08:cb:
         f4:50:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:55 2026 by rpki-client