Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa
File:                     67d064b2-9899-36ce-80d6-ef6fd43df579.roa (raw, json)
Hash identifier:          t34ddoDtZPM+UXwVhVAe8UjaLTt1chJoyj7p4QJ0QJM=
Subject key identifier:   0F:26:45:B9:84:98:DC:5B:74:1E:0C:48:B5:7B:EE:4D:5C:7D:97:94
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DD8F05F8F5652A1A106632A00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     203724
IP address blocks:        161.69.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:5f:8f:56:52:a1:a1:06:63:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=700877af-7cc2-4bc4-8011-2b7a8e75c1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:00:d5:6d:12:f1:fc:4f:8a:a8:0f:bb:49:
                    c8:88:04:b8:b7:6a:45:db:3e:af:8a:f1:de:a0:72:
                    f4:a9:a8:f4:94:fd:8d:61:3b:c8:46:04:ac:2b:b6:
                    89:1e:ac:d3:08:40:78:32:12:d8:a9:63:f1:67:db:
                    f7:2f:42:ed:5e:49:63:6a:3d:d0:32:10:c9:20:f5:
                    3c:95:e2:dc:0a:b8:e0:9f:2c:58:c2:b1:91:60:63:
                    68:28:08:26:d1:ef:67:14:1e:ff:e8:e3:57:e8:35:
                    1a:0d:98:88:26:05:79:a1:c5:46:b0:12:b8:ad:61:
                    99:8b:70:51:15:fa:48:58:d0:7a:1e:bd:ed:5b:95:
                    18:66:0a:33:47:39:0f:0d:81:ba:8f:50:27:34:ec:
                    a3:7d:f3:77:4a:26:d9:6f:94:b0:8b:c5:4e:d8:68:
                    f3:1e:10:e0:bf:ab:66:10:c7:62:a0:c3:ef:81:79:
                    94:00:48:36:46:57:0a:d6:c4:41:b7:29:cd:11:c1:
                    ed:8b:5b:dd:0c:f3:83:dd:cd:a5:c1:d7:30:1e:49:
                    00:d1:52:7b:c1:3f:30:73:f0:0e:78:23:ee:c4:24:
                    bb:d2:5f:f1:ab:17:0b:fd:ad:86:2e:28:1c:e3:d3:
                    e6:8b:47:c2:1c:ea:4c:17:c1:00:7a:01:f0:f2:fa:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:26:45:B9:84:98:DC:5B:74:1E:0C:48:B5:7B:EE:4D:5C:7D:97:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b5:31:ee:16:1f:90:32:81:ee:a7:11:8b:48:f8:da:e4:97:
         50:91:f9:1b:68:7e:57:7f:bd:84:04:f1:1b:59:bc:62:7b:e1:
         12:a2:99:a7:e8:fc:a0:d4:c7:3f:41:f0:f9:1a:ab:a0:88:70:
         18:ab:c3:5f:97:4d:ae:fd:31:11:0b:07:ec:ae:ef:eb:8a:b1:
         80:45:7c:c3:9f:71:65:e6:0e:23:a1:11:92:0d:c4:ba:f1:7b:
         c4:97:db:11:17:2f:cd:33:c3:94:0f:53:da:15:3b:df:4f:e3:
         89:10:e5:a4:20:a3:72:1c:c8:c0:0b:d0:62:ce:9e:c9:b3:8c:
         a9:96:28:04:e3:27:b3:9e:92:4e:04:88:46:d9:a3:80:a3:b3:
         5a:06:af:cc:e3:7c:cd:3c:ed:42:64:88:41:27:c2:f7:a0:59:
         35:43:a0:ce:02:1d:d2:50:78:2c:f6:4d:03:48:f6:72:41:d2:
         40:6a:ae:fa:8b:ed:da:f5:49:ac:5a:f8:a0:06:78:1d:2f:5e:
         64:59:6f:67:dd:00:00:52:6d:27:1d:71:90:39:7e:cb:4d:71:
         d8:af:e6:86:23:3c:b2:c6:17:8a:42:73:ae:cd:a5:49:a6:f6:
         8f:8e:49:eb:48:8a:e8:d1:4b:81:86:4c:1f:6a:9e:11:54:01:
         00:55:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:23:30 2026 by rpki-client