Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/7a9904ba-000b-3e27-a3a3-639b4a336082.roa
File:                     7a9904ba-000b-3e27-a3a3-639b4a336082.roa (raw, json)
Hash identifier:          hzJPRCTMRCHmaP7tEv+mTe+vo+ZSoHnz9gffuhbwFWk=
Subject key identifier:   23:4B:4F:28:D4:A8:83:A2:34:9C:4E:89:51:23:A4:89:4C:D6:81:04
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584CE5C0F10A848EE5C76A548CE0
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/7a9904ba-000b-3e27-a3a3-639b4a336082.roa
Signing time:             Tue 17 Feb 2026 22:23:30 +0000
ROA not before:           Tue 17 Feb 2026 22:23:30 +0000
ROA not after:            Mon 18 May 2026 21:23:30 +0000
asID:                     16509
IP address blocks:        161.38.56.0/24 maxlen: 24
                          161.38.57.0/24 maxlen: 24
                          161.38.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:c0:f1:0a:84:8e:e5:c7:6a:54:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Feb 17 22:23:30 2026 GMT
            Not After : May 18 21:23:30 2026 GMT
        Subject: CN=d0cb74d8-c68c-4db9-bdbf-56196c85dca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:23:82:7d:ac:ed:e3:b4:14:1e:41:76:b5:
                    f7:cf:c7:dc:1e:0b:74:a2:07:4c:85:77:42:71:0f:
                    05:92:ea:70:b6:3d:7f:97:8e:f9:77:75:72:29:e0:
                    a9:45:0d:e4:24:66:d8:5e:1e:4d:d0:32:03:32:be:
                    db:05:c1:5a:89:00:0f:3d:8f:b1:e7:91:b9:02:af:
                    03:90:46:e8:33:a2:2d:41:92:46:a4:ec:48:5e:39:
                    c2:42:88:b5:06:65:57:cb:63:e3:cd:4b:1e:f3:90:
                    25:79:39:35:57:ae:36:2d:a0:7a:ea:99:a4:cd:3f:
                    fc:b4:51:4a:50:e8:d6:8b:0f:6d:95:76:ee:10:63:
                    0b:18:97:5f:75:d0:7b:ef:ce:70:3a:cf:95:e9:66:
                    9d:41:ab:3f:81:6c:1e:58:ac:f2:a9:0d:26:26:d8:
                    8e:30:38:b9:45:e3:94:65:48:59:3c:c2:db:8e:52:
                    ed:53:20:22:8e:f4:1a:29:8a:95:7b:85:07:49:cf:
                    cc:92:f2:6e:3f:ac:25:ca:97:ea:12:a6:dd:ee:af:
                    43:6b:a2:25:e1:23:b5:11:83:48:2e:4c:8e:56:5a:
                    08:50:c4:4b:01:14:2f:ee:75:4d:19:c4:55:80:b4:
                    e1:5e:a8:55:26:b4:ba:cc:9b:9f:ac:66:7c:7a:2c:
                    69:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4B:4F:28:D4:A8:83:A2:34:9C:4E:89:51:23:A4:89:4C:D6:81:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/7a9904ba-000b-3e27-a3a3-639b4a336082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.56.0-161.38.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:13:5a:54:b7:31:2b:a3:c6:89:0e:54:c6:4b:e1:09:42:
         c2:fb:0e:57:98:b4:ea:2b:84:d1:30:7a:c8:5a:4e:ef:34:3b:
         7e:10:fc:cf:85:73:a2:54:97:be:07:c7:57:eb:81:c8:c5:e5:
         69:a3:3d:90:9c:6f:a6:8b:30:29:77:02:57:14:5c:ff:ce:58:
         ee:88:4a:1c:5b:4a:f3:e6:7d:cf:fb:f4:c0:b6:50:5c:9f:a6:
         c5:3d:ec:fe:99:60:f5:dd:1b:19:7b:e9:5b:37:42:a3:6c:23:
         3b:5d:77:aa:d0:10:0b:0b:8e:6d:e7:39:a3:b7:cf:6a:2f:46:
         38:72:58:b4:52:f9:0d:a0:12:36:46:7b:cc:ff:c3:09:b3:15:
         0f:2d:e4:95:7b:85:fa:29:1e:2a:6a:11:ed:7b:f9:3e:cd:47:
         85:3b:f9:76:11:d3:69:af:fa:fb:5d:27:4f:15:6e:a2:28:ed:
         08:4d:33:4b:ce:46:18:51:ca:c5:17:53:69:91:93:11:79:fc:
         f9:56:94:59:4b:70:c7:b8:f4:b4:5c:78:6f:4f:95:d2:39:a8:
         f8:d1:16:1a:8a:64:02:34:90:05:37:80:33:04:3c:d5:9f:8d:
         2f:29:df:8f:3a:97:1d:7e:a4:06:93:36:30:14:49:4d:1e:ea:
         3e:61:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:55 2026 by rpki-client