Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/a508865e-49b5-3e38-9f07-6d36278922e2.roa
File:                     a508865e-49b5-3e38-9f07-6d36278922e2.roa (raw, json)
Hash identifier:          ysSwPp1MM9sSXvTFttAoc1P0UpfqQZFV8yrs5CvV5Ng=
Subject key identifier:   05:E2:34:14:65:A6:CF:D7:D8:AD:22:24:3A:04:EF:90:3E:E9:C8:40
Certificate issuer:       /CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b
Certificate serial:       010D0C9F4328584F6292C6CE63AC7A7FB129BE00
Authority key identifier: CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/a508865e-49b5-3e38-9f07-6d36278922e2.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     399122
IP address blocks:        161.115.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c6:ce:63:ac:7a:7f:b1:29:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=054f7e0f-2fa7-488a-a437-d52609fe945a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:e4:45:b4:a5:4a:e3:97:e5:b7:29:bb:93:
                    8e:86:0d:15:5c:58:3b:93:37:93:8c:c9:de:b4:04:
                    d1:5e:19:9f:59:ec:b4:8f:71:f4:d7:69:7d:31:46:
                    6e:7c:5c:92:94:1a:8e:cf:3e:35:44:41:73:86:c9:
                    a5:6f:00:f2:55:62:d3:0b:99:98:6c:94:fa:8a:b3:
                    b4:5b:ff:02:97:e8:9f:d2:ae:21:c1:ab:0f:af:4d:
                    d5:a7:d1:da:5a:8d:22:1e:9e:d1:8d:7b:1b:ff:98:
                    b0:15:46:a2:4d:d7:0c:37:ee:1e:d8:26:59:be:52:
                    97:67:e5:f5:3d:ed:b9:9c:57:6d:40:4e:0e:00:76:
                    12:c9:0e:ff:1d:a9:9d:39:f4:8f:20:26:16:46:fe:
                    b8:c0:6a:b5:ac:2e:2c:6c:d8:7e:69:7e:7e:26:09:
                    3f:bc:d6:a3:1b:96:a7:07:7e:3c:c1:c7:d5:6e:f3:
                    52:01:ec:f5:5f:da:0a:41:1d:6e:2e:91:9c:0e:87:
                    db:4b:2d:ed:05:e0:09:da:9e:d1:a7:1c:dd:06:25:
                    ab:1e:32:f6:02:e8:32:96:df:c8:9a:42:a7:5e:13:
                    65:d1:fb:21:57:88:07:70:90:27:28:21:a2:2a:e0:
                    67:2c:97:ea:99:c9:0a:61:f9:a9:c7:f9:9a:c8:2a:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:34:14:65:A6:CF:D7:D8:AD:22:24:3A:04:EF:90:3E:E9:C8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/a508865e-49b5-3e38-9f07-6d36278922e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl

            X509v3 Authority Key Identifier:
                keyid:CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:33:4c:cf:2c:f3:df:1e:36:a4:58:ad:4f:b1:67:ee:7b:49:
         51:12:c9:86:28:54:bc:d1:bd:22:5b:e0:d5:a6:bb:23:5f:b8:
         14:66:9c:fb:ed:fa:98:12:3a:28:a1:2d:e4:44:a2:08:43:37:
         2b:9c:81:c4:fa:1d:12:3e:9f:5c:91:69:5d:da:b2:6a:17:0e:
         3e:38:f4:f3:c9:64:32:eb:1f:35:da:27:60:d7:3a:52:a8:d1:
         e5:ac:95:ce:fc:cc:d8:ec:3a:3e:bf:e5:50:38:86:bc:2a:f8:
         8e:67:d6:20:e1:54:0b:16:55:34:50:bd:e4:3e:b0:26:98:68:
         44:cb:9d:8c:dc:c4:1a:ff:c1:f1:f3:50:f0:ab:1a:bd:34:10:
         9a:1b:8d:01:af:a7:6a:61:82:30:c2:19:b3:2d:ae:05:db:50:
         17:fc:86:87:ec:ca:ef:2f:bd:53:1f:63:2f:c5:32:ef:9f:67:
         b7:e6:e1:c0:0c:1c:1f:4f:67:93:3b:3f:35:ad:d7:c8:e4:13:
         26:fc:2d:54:a4:d4:21:53:94:6f:7d:d1:83:ca:e5:ca:d9:24:
         55:9d:2e:0a:b2:01:8c:82:4b:20:ba:ef:cf:df:82:19:98:2b:
         55:d2:9d:9a:f0:7c:41:3a:5f:28:c7:66:2e:ca:9b:ac:17:0c:
         a2:d6:b7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:54:19 2026 by rpki-client