Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/50e9c1e6-fd3d-36d6-b16f-efbb9b4b1cc2.roa
File:                     50e9c1e6-fd3d-36d6-b16f-efbb9b4b1cc2.roa (raw, json)
Hash identifier:          8d9BnuYz3E9dt0KRVCF0T8KOCDPNQtwuH00f9dQR7NY=
Subject key identifier:   B9:30:71:34:D2:74:24:9B:16:DE:38:26:9F:F4:2B:60:39:D5:FF:F0
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584CF8523DC5023CCE68C46C3D80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/50e9c1e6-fd3d-36d6-b16f-efbb9b4b1cc2.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     203724
IP address blocks:        161.69.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:3d:c5:02:3c:ce:68:c4:6c:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=fad4e87d-6c79-4689-b177-156ba74f93a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:b0:55:8e:80:94:ff:f2:47:c7:90:90:df:
                    a1:01:5e:c9:cd:89:d5:3d:7e:3b:d1:0d:10:6c:80:
                    1b:56:27:5b:0f:57:c4:9e:52:0c:2f:ad:d8:b2:55:
                    0f:dd:33:7b:39:33:97:31:5d:e4:8f:1a:9e:b2:66:
                    4c:9f:9f:5f:d1:a6:90:e2:c1:8b:5b:51:5d:c6:41:
                    03:a0:18:f7:36:23:0f:2a:f7:e0:31:66:c1:d0:2d:
                    c9:64:49:ba:50:ce:29:0c:2b:d4:fc:85:b2:df:20:
                    99:d2:3f:e0:6e:18:8b:af:57:9d:45:e4:13:30:32:
                    ea:cd:76:d7:14:c6:9e:ed:67:49:e4:3e:c1:d6:1e:
                    64:4d:42:fd:07:4f:c4:db:e0:76:0a:fc:c2:8d:30:
                    85:b5:05:61:51:31:3e:30:1a:65:66:c3:7e:99:a2:
                    fd:11:e7:3d:3f:c9:d4:d7:23:02:8d:cf:9c:86:1d:
                    02:c6:5f:76:38:9b:3d:45:db:ce:ab:d2:00:af:a8:
                    63:ba:47:62:87:9b:8f:bf:14:a9:0f:98:35:50:45:
                    3a:1f:82:ba:4f:ff:6f:e1:7a:10:42:78:a0:e9:af:
                    e5:69:38:d7:61:6f:de:e8:33:be:ee:3f:2d:47:8d:
                    47:93:c6:f0:b1:2a:ee:e2:94:b6:68:43:44:57:59:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:30:71:34:D2:74:24:9B:16:DE:38:26:9F:F4:2B:60:39:D5:FF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/50e9c1e6-fd3d-36d6-b16f-efbb9b4b1cc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8f:23:05:f2:a5:cc:ae:94:65:a1:25:8f:a1:18:90:fd:2a:
         0e:05:9b:56:13:80:3f:07:92:4b:52:16:88:de:f9:e3:00:e6:
         0a:6b:d7:06:41:5a:d1:aa:0e:44:25:56:dd:01:1e:ba:ee:fe:
         82:26:63:5a:c0:73:a4:db:39:14:25:69:ff:4f:04:00:59:50:
         fe:14:40:31:0e:24:d4:ea:2c:31:b6:5f:da:59:c1:03:2c:91:
         31:c8:08:85:fb:a7:60:ee:bf:e8:6a:ea:2d:40:ec:fd:96:32:
         55:51:09:89:cf:93:e7:b7:f0:df:e4:94:25:12:f5:30:07:62:
         b2:dc:23:67:62:ce:0a:e1:37:11:bf:39:77:c8:f9:17:4d:de:
         55:10:88:69:52:53:b0:24:60:93:9c:13:84:d7:9d:19:9a:26:
         8b:5d:5d:14:e7:7b:f3:6d:66:34:2c:84:f5:1c:54:e8:5e:7a:
         47:92:d2:d3:ea:88:6b:2f:2b:05:6b:5f:19:5a:d1:6c:dc:26:
         bb:56:5f:06:20:7b:c3:ef:9a:37:bf:c4:20:04:f5:d3:99:7f:
         60:09:2a:c3:dd:bd:cd:9e:73:46:19:a8:18:3b:12:d0:0e:a5:
         5d:1e:5b:8d:20:23:ca:1f:b7:15:ca:47:e2:50:fc:8f:be:06:
         d1:4c:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:30:08 2026 by rpki-client