Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0ea0197f-4449-393d-88a9-0a46b18137f0.roa
File:                     0ea0197f-4449-393d-88a9-0a46b18137f0.roa (raw, json)
Hash identifier:          I7B5pfndeijhEm7k+4Ffx40ApCm5yB0u7s7EvEmCvDg=
Subject key identifier:   56:18:EA:77:DA:53:44:10:07:E8:D5:68:FA:94:88:8B:70:D8:BE:A6
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DD8F05F5AB677BEC0016FE43C
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0ea0197f-4449-393d-88a9-0a46b18137f0.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     16509
IP address blocks:        161.69.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:5f:5a:b6:77:be:c0:01:6f:e4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=f2d91b47-2f13-426a-90b0-e72fee11eb12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:54:02:d1:f1:a1:f5:4f:8c:d3:8f:49:47:
                    87:bd:b2:1e:d9:24:62:86:d9:c8:28:33:3f:7c:df:
                    99:4b:cb:76:07:0c:9f:47:46:ce:08:79:8b:96:cc:
                    a3:f6:03:d7:17:42:da:ed:b7:7f:9e:a8:1b:f9:5f:
                    9d:2b:ad:60:96:6e:01:4f:5b:34:24:33:f8:92:25:
                    0c:fd:6e:49:d8:e5:62:52:40:6b:23:23:cd:21:20:
                    04:dd:99:39:eb:cb:0a:24:2f:34:a1:36:cb:87:50:
                    ad:73:61:43:20:a2:ac:a0:19:7a:60:ef:7c:4f:fc:
                    c8:30:fd:5d:54:32:0c:54:08:03:7a:95:a0:ed:1a:
                    d0:22:15:78:2f:d2:ce:c6:9f:1b:d3:ec:9d:12:36:
                    a5:81:11:70:04:f9:5b:9e:45:bd:b1:bf:74:58:1a:
                    57:31:ea:e6:1a:e1:6f:77:4e:c5:25:d0:0d:6c:45:
                    2f:27:57:50:6f:19:b7:00:0d:8e:ca:8c:b3:c4:31:
                    a3:1c:c1:42:c5:ea:1d:e6:ec:37:80:9a:55:63:c1:
                    30:d6:7e:20:d7:f4:de:cf:a7:7b:f2:fa:7c:dd:66:
                    93:ae:13:47:04:87:f1:39:76:16:88:e3:2a:c4:88:
                    fc:11:40:4e:d7:26:84:50:16:fc:18:f1:3c:40:5d:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:EA:77:DA:53:44:10:07:E8:D5:68:FA:94:88:8B:70:D8:BE:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0ea0197f-4449-393d-88a9-0a46b18137f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:34:f3:58:5f:57:20:14:81:ec:8e:95:90:16:a8:5c:d1:
         01:f1:71:83:94:b1:2e:a2:0e:9b:e4:ae:63:2c:74:65:fe:15:
         5c:2c:d8:69:4e:dc:fc:dc:ea:a1:ae:3d:9a:ec:73:f5:59:fb:
         ed:0b:97:79:c7:a9:4f:44:15:f6:f9:dc:aa:53:f1:ef:ef:b3:
         97:50:25:45:4d:fe:eb:1b:b5:58:d5:fd:8b:8a:36:89:d5:79:
         38:6e:f3:11:19:e1:36:2b:5b:dd:5f:f7:7e:dd:55:e7:48:13:
         a9:d6:33:f1:e1:d5:24:ce:11:05:dd:95:aa:08:f6:b0:42:ba:
         2d:be:e4:a2:1f:6d:38:81:b7:87:f0:96:d2:6d:2a:3f:98:f2:
         bd:9d:a8:37:82:0f:72:b2:b4:88:7d:e6:d2:63:13:31:be:41:
         13:1a:90:7e:bd:38:e2:e1:8b:f9:8a:8d:0a:ac:cb:b8:a1:7a:
         23:1c:7a:82:82:d4:b8:4f:53:b0:5e:bc:60:cd:ae:8a:e3:63:
         77:b6:6c:be:c2:70:75:a3:60:2f:a4:08:ed:70:bd:5f:80:f2:
         92:dc:10:cc:0c:40:57:ed:25:d7:51:22:1a:fb:c4:7e:80:ab:
         8e:c4:26:c1:9f:0c:ca:a6:69:8f:52:f6:62:f8:40:66:40:7e:
         49:c8:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:44:04 2026 by rpki-client