Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/bec8433e-ca77-345b-a21e-fe59884c8789.roa
File:                     bec8433e-ca77-345b-a21e-fe59884c8789.roa (raw, json)
Hash identifier:          zPEyjpfx43/AJCwiB4xjMMaZk87E2YECiMxHVW5Lpp8=
Subject key identifier:   91:24:ED:6F:9D:67:BC:4F:DE:B5:23:81:F3:02:81:CF:04:41:10:85
Certificate issuer:       /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83
Certificate serial:       010D0C9F4328584EE2274E6A50EBB9E309420C80
Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/bec8433e-ca77-345b-a21e-fe59884c8789.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     10753
IP address blocks:        161.203.15.0/24 maxlen: 24
                          161.203.16.0/24 maxlen: 24
                          161.203.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4e:6a:50:eb:b9:e3:09:42:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=4f1edd60-4f7e-4ee9-ba0e-e641efc5c960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:13:71:84:80:0e:89:8d:fe:f4:58:a7:5e:
                    31:5b:92:31:15:25:4e:8d:ed:1f:d4:bb:84:34:69:
                    53:f5:85:6d:6c:c7:a1:b6:4d:96:cc:98:be:5e:c4:
                    2f:4c:5a:36:2e:00:08:f9:78:b7:7c:a6:c7:6c:c2:
                    07:d8:84:72:6f:ba:4a:2b:cd:34:43:06:31:af:96:
                    9b:0f:bc:91:02:16:e9:93:cb:4a:b8:4c:95:f6:2c:
                    39:f1:af:6a:18:9f:f9:43:8b:e9:54:41:ad:3e:55:
                    4d:e2:98:68:47:92:5c:44:68:31:d3:d3:b1:54:99:
                    43:e3:c8:b3:08:02:5b:b1:d8:01:34:5c:fe:46:58:
                    65:24:78:1f:74:bf:3d:0a:56:63:92:39:0f:09:8c:
                    51:ab:c7:3c:f9:57:2c:22:79:67:df:45:a3:62:fb:
                    9c:8a:e2:db:b8:0a:42:52:9f:09:09:cd:5b:75:40:
                    7c:a2:66:d0:d8:bd:53:2f:ab:4e:52:89:c5:55:59:
                    e6:21:06:e7:a0:03:a9:a8:a2:8c:88:eb:24:c0:f1:
                    3c:7e:87:d7:64:db:75:c8:dc:20:8d:84:9a:1b:7c:
                    17:cd:c8:8b:a2:7d:09:01:62:45:90:1f:72:7b:f2:
                    7c:89:16:aa:7e:e5:6e:79:ab:f8:89:8f:20:db:44:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:24:ED:6F:9D:67:BC:4F:DE:B5:23:81:F3:02:81:CF:04:41:10:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/bec8433e-ca77-345b-a21e-fe59884c8789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl

            X509v3 Authority Key Identifier:
                keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.203.15.0-161.203.16.255
                  161.203.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:82:3c:8c:f6:f2:79:e6:64:1a:16:2b:1e:99:27:8e:da:95:
         3d:26:e9:2f:3b:57:3a:ad:d4:6e:8f:39:87:0e:19:3f:4f:46:
         85:75:b6:fb:48:2f:2e:77:e4:77:7f:cf:d9:be:b2:98:8c:4a:
         92:9a:ab:4a:86:7b:25:9c:7c:4a:bf:05:06:ba:43:b2:d1:57:
         13:70:49:81:fb:00:d9:b6:81:af:55:5c:8d:c4:fc:dd:30:66:
         ec:1e:df:2e:56:4a:e2:93:aa:b9:22:ae:06:0b:30:91:e9:3a:
         a1:00:07:06:1f:b5:b4:88:54:6e:57:c2:d8:53:2f:c4:3a:bd:
         82:2c:7a:f9:f4:bd:54:56:0c:6b:52:f2:bd:a7:f8:e6:5b:26:
         34:89:68:1e:ab:3a:2b:51:f4:b2:68:f9:dc:db:62:4a:d5:02:
         a6:29:e1:b5:59:c6:a9:5b:9a:4e:82:2a:74:0b:2d:14:78:d8:
         81:9e:99:c5:2c:31:d5:18:cd:4e:66:8b:6b:1d:0a:9e:27:0b:
         94:0e:f4:79:06:56:f8:1d:79:68:65:e0:0f:4c:31:b4:0c:d9:
         e1:a7:16:f3:bb:db:c8:a8:6a:3e:44:15:b3:06:67:0a:a4:d5:
         08:ee:8e:c2:e8:23:88:b3:cf:c8:0b:ef:cb:c9:bf:25:01:b0:
         25:fb:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:41:17 2026 by rpki-client