Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/007f8fb9-862e-3dc0-8eb8-ff66f4cd12a2.roa
File:                     007f8fb9-862e-3dc0-8eb8-ff66f4cd12a2.roa (raw, json)
Hash identifier:          IuV0UEnDWht9q90RZABL9IKDM8nxbOIRMS43Yp4SQ0I=
Subject key identifier:   1A:04:76:83:BF:93:06:FF:44:C7:06:59:CE:B5:44:FD:64:88:45:0F
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584CF8523D9F0787823EB2D74EC0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/007f8fb9-862e-3dc0-8eb8-ff66f4cd12a2.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     203724
IP address blocks:        161.69.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:3d:9f:07:87:82:3e:b2:d7:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=29a2cba7-7765-4c80-b796-090e2411f7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:80:45:77:b7:6e:34:09:59:d7:b0:b4:7f:
                    07:3e:1e:41:c1:f5:9d:29:d1:81:e9:e1:bd:c9:10:
                    2a:45:83:b7:3a:50:72:ce:57:d0:1b:44:be:08:da:
                    62:d4:c5:d2:52:e1:fb:ab:e9:f3:a0:8b:03:24:33:
                    dd:1a:7c:a9:48:5d:28:51:2b:f3:64:d1:49:cf:8b:
                    51:5e:8f:ca:9d:99:1d:da:be:ea:9d:b4:ae:c1:7a:
                    4a:90:1f:b5:4a:fa:89:20:73:76:33:a7:c5:aa:7e:
                    fb:35:40:5f:90:0c:ff:9b:57:4e:76:96:5b:fc:bd:
                    8f:43:8b:00:03:48:7f:4c:f9:60:22:8f:9c:e9:8b:
                    0b:99:be:1c:4d:2a:72:9c:d7:91:53:b3:aa:f1:7c:
                    96:08:36:ee:85:fe:95:b8:2d:26:5c:ff:1f:97:01:
                    63:58:e9:c7:07:31:05:8c:d5:2e:d8:8d:0f:cb:37:
                    b6:79:ce:85:94:6f:a6:06:2a:9d:e5:e7:25:2e:b4:
                    15:3b:7e:59:42:76:3f:db:c5:49:88:ea:36:7e:b8:
                    b9:a1:03:b2:f9:9e:12:18:d2:a5:ac:b0:d3:61:34:
                    82:4e:98:9e:de:50:8b:1e:bb:c1:a7:ff:d5:cb:9e:
                    03:1d:d6:05:09:00:ec:fb:21:39:b3:e5:fb:ad:97:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:04:76:83:BF:93:06:FF:44:C7:06:59:CE:B5:44:FD:64:88:45:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/007f8fb9-862e-3dc0-8eb8-ff66f4cd12a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:1e:42:06:51:46:b2:e3:95:76:fa:3d:eb:c2:cb:a2:25:
         c8:f8:83:36:0e:fc:eb:24:72:f6:88:90:a9:93:50:78:ae:ae:
         19:2a:89:ce:bf:18:d5:05:0d:d4:3b:98:ad:e4:ff:27:0e:6a:
         b1:bb:9b:57:89:97:13:54:82:89:5a:c7:76:69:73:26:55:e4:
         af:9e:2b:27:e1:68:29:47:62:2c:aa:60:39:90:53:f0:1d:38:
         23:c1:dd:fd:c0:b9:e3:42:a3:58:36:3e:60:90:82:fa:0b:39:
         84:e5:79:83:60:38:2c:21:7d:70:72:e7:ca:c7:f3:c1:5c:15:
         ec:72:f9:c9:e6:21:80:a0:23:fe:df:be:cf:d9:d8:f6:6b:81:
         cd:37:bb:7e:cd:be:66:bb:de:44:f4:82:80:68:2a:4a:ca:72:
         6f:01:d7:04:4c:f6:1a:92:15:d0:02:9a:a8:ab:73:f0:bc:6b:
         34:a5:be:06:61:87:20:f4:74:70:0a:c9:0d:58:7d:70:5f:b0:
         70:df:b8:1d:4f:3c:0d:88:41:e2:cc:6b:f3:f0:71:14:5c:8f:
         3c:a0:3e:1c:d4:72:31:f6:a3:8f:bc:a4:d0:64:cb:f9:64:af:
         42:7a:cf:b0:90:47:b3:9f:e9:9c:19:a2:6a:26:01:02:56:62:
         02:4c:fd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:29:00 2026 by rpki-client