Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa
File:                     5af02877-cfb6-3e11-ab01-56751afb3817.roa (raw, json)
Hash identifier:          W8ILIbWYTGY0ideKUOYxTmOydxOiegO9wpl4EWcRPIY=
Subject key identifier:   2B:CC:5B:7C:6B:4C:97:D0:57:E3:9A:BA:77:19:A4:D9:4A:C6:F2:F1
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DD8F06280D310E4BB4B5DE200
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     16509
IP address blocks:        161.69.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:62:80:d3:10:e4:bb:4b:5d:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=a2fa0971-6a9f-4b12-a72d-7c4c5a3f6388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:76:7c:3b:8f:99:57:ce:b4:3f:11:c8:ba:
                    7f:5b:fe:5c:76:79:58:60:9f:cc:0b:b9:ad:27:8f:
                    d4:fd:8e:d1:5e:fa:b7:20:94:a1:5d:bb:8a:05:0b:
                    c1:af:26:07:1c:73:84:b6:33:75:44:1f:6c:47:9d:
                    cf:74:0f:6a:73:8a:6d:79:50:8a:ed:ec:a5:41:72:
                    30:12:24:7d:1c:25:85:21:16:c2:71:06:9a:1a:bf:
                    9c:8e:83:23:10:2a:5f:89:45:af:e0:30:f7:01:69:
                    6a:8d:ab:e1:02:42:8c:55:52:e6:24:0d:af:fd:d1:
                    ee:67:35:f6:64:b5:ec:f7:d8:62:2e:bd:4c:ea:21:
                    e6:c7:67:e1:50:83:e6:b1:ba:df:7f:aa:78:b0:53:
                    f7:97:94:92:fc:7c:2e:8a:7f:3b:49:cd:08:60:8f:
                    24:72:1e:0c:b2:ac:d7:df:b7:6d:9a:8c:e7:cf:43:
                    88:a4:37:ef:01:65:10:e0:b2:b0:04:b3:f8:90:e0:
                    87:4d:58:ca:d8:9d:81:57:8e:bd:4a:fb:65:ac:09:
                    16:9c:8c:90:b5:9c:fc:5c:3b:46:f6:18:c6:8f:14:
                    46:65:60:a0:6d:51:ae:2a:02:e4:62:a6:f3:b6:c7:
                    09:32:83:65:b7:a9:da:10:85:fc:ed:ba:e7:7e:ab:
                    48:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CC:5B:7C:6B:4C:97:D0:57:E3:9A:BA:77:19:A4:D9:4A:C6:F2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:20:ee:0c:44:a2:01:eb:c9:dc:e6:db:33:da:3f:93:0f:
         c6:e5:a3:fb:00:c8:c8:e3:2f:37:a9:da:4f:d4:ef:74:5e:9c:
         c8:eb:5b:fb:f9:6a:08:fc:1a:12:56:f9:10:d2:99:e9:bd:33:
         27:c6:bb:2d:3d:4f:c5:53:10:d6:7d:98:4e:23:ef:88:66:52:
         e7:3a:fa:25:0e:d7:38:94:77:44:62:8b:97:71:0f:59:9c:ec:
         5f:17:b7:c8:7a:30:93:68:58:e4:bc:36:de:d2:88:44:0c:12:
         fb:d5:2c:0f:e4:e3:01:fc:32:6b:7d:7b:a0:88:35:9f:1e:6a:
         28:8b:c9:6a:07:4d:eb:13:80:e7:17:9f:ee:2d:9b:de:e7:e8:
         b5:cb:f1:1c:7f:dc:29:c9:89:b5:ba:0f:c8:56:8d:f7:2a:9a:
         ae:d8:11:fa:c7:1a:b1:1e:e8:4e:6b:87:6d:6e:ec:6a:5d:86:
         45:25:a1:e6:d1:e9:8b:c6:32:60:5c:ac:10:d5:3d:55:48:4d:
         23:1c:85:42:c5:87:63:5a:a7:fd:30:b8:6e:88:13:54:cf:cc:
         30:f6:b7:43:43:5c:71:32:ad:ba:cf:58:9e:63:b0:91:6f:b0:
         e1:c2:e4:a7:f4:45:71:f0:87:22:f7:5c:4e:5a:de:76:36:80:
         bb:5c:4f:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8GKA0xDku0td4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
YTJmYTA5NzEtNmE5Zi00YjEyLWE3MmQtN2M0YzVhM2Y2Mzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAl2fDuPmVfOtD8RyLp/W/5cdnlYYJ/MC7mt
J4/U/Y7RXvq3IJShXbuKBQvBryYHHHOEtjN1RB9sR53PdA9qc4pteVCK7eylQXIw
EiR9HCWFIRbCcQaaGr+cjoMjECpfiUWv4DD3AWlqjavhAkKMVVLmJA2v/dHuZzX2
ZLXs99hiLr1M6iHmx2fhUIPmsbrff6p4sFP3l5SS/Hwuin87Sc0IYI8kch4MsqzX
37dtmoznz0OIpDfvAWUQ4LKwBLP4kOCHTVjK2J2BV469SvtlrAkWnIyQtZz8XDtG
9hjGjxRGZWCgbVGuKgLkYqbztscJMoNlt6naEIX87brnfqtIKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvMW3xrTJfQV+OauncZpNlKxvLxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNWFmMDI4NzctY2ZiNi0z
ZTExLWFiMDEtNTY3NTFhZmIzODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwsIO4MRKIB68nc5tsz2j+TD8blo/sAyMjjLzep2k/U73RenMjrW/v5
agj8GhJW+RDSmem9MyfGuy09T8VTENZ9mE4j74hmUuc6+iUO1ziUd0Rii5dxD1mc
7F8Xt8h6MJNoWOS8Nt7SiEQMEvvVLA/k4wH8Mmt9e6CINZ8eaiiLyWoHTesTgOcX
n+4tm97n6LXL8Rx/3CnJibW6D8hWjfcqmq7YEfrHGrEe6E5rh21u7GpdhkUloebR
6YvGMmBcrBDVPVVITSMchULFh2Nap/0wuG6IE1TPzDD2t0NDXHEyrbrPWJ5jsJFv
sOHC5Kf0RXHwhyL3XE5a3nY2gLtcT8I=
-----END CERTIFICATE-----
Generated at Wed Jun 3 21:43:23 2026 by rpki-client