Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6b63ba95-527a-315a-959b-351bdb8b6339.roa
File:                     6b63ba95-527a-315a-959b-351bdb8b6339.roa (raw, json)
Hash identifier:          aULJCHHbb6N8OaCAg6y7yHy3Sr+aSMFNR6lpNI6G/JM=
Subject key identifier:   BA:F6:65:37:F6:20:E9:CA:43:C2:59:18:C2:21:C1:36:28:3B:AA:DD
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DD8F06206E0818BF8D0E3D000
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6b63ba95-527a-315a-959b-351bdb8b6339.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     203724
IP address blocks:        161.69.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:62:06:e0:81:8b:f8:d0:e3:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=aa9202f0-b9d7-4745-b856-cc7946497735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:00:e3:7a:c8:03:31:32:e8:e3:9c:c5:32:
                    b0:00:dc:0a:58:c8:0d:87:56:0f:60:8e:1c:e1:47:
                    0f:b1:dc:82:d0:72:03:3d:10:4d:67:ff:ed:27:eb:
                    88:22:f5:b4:6e:1f:9d:40:25:52:1d:2d:1b:36:f4:
                    dd:6a:f7:73:bc:c6:6b:48:42:7b:00:7d:c0:14:a2:
                    0f:20:4a:1b:49:dc:dc:75:fc:b9:95:b6:d5:ae:ae:
                    f7:0b:f9:c7:84:aa:c6:d2:33:0c:cf:9c:d1:df:49:
                    34:d2:0f:04:bb:a7:da:f6:ce:02:d2:b7:c1:09:69:
                    eb:6b:f0:cc:ce:29:c1:e3:46:b9:23:e7:1e:a2:18:
                    37:64:34:63:16:f1:50:9f:ce:6a:40:a5:25:d9:ab:
                    9f:81:24:b7:51:7a:54:74:50:a6:d7:00:12:b4:6b:
                    b8:88:bd:b9:1e:2d:1a:d9:d9:43:80:c1:26:80:95:
                    e5:b6:91:d5:27:bf:f6:3c:08:25:14:b3:b1:40:a1:
                    38:b6:b4:a3:55:38:69:ee:d2:a6:83:4c:cf:b2:94:
                    59:57:65:09:5b:b8:9e:d1:98:34:ab:20:a6:d4:4f:
                    6b:a4:07:10:a8:f9:3f:f7:a3:78:2d:98:b4:a1:39:
                    ea:47:9b:d7:e1:4d:5b:2b:82:a3:95:22:6d:6a:02:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F6:65:37:F6:20:E9:CA:43:C2:59:18:C2:21:C1:36:28:3B:AA:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6b63ba95-527a-315a-959b-351bdb8b6339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:31:86:78:47:5f:83:29:c8:0b:00:cf:59:09:79:41:dd:9e:
         76:49:18:eb:c4:50:99:c5:b4:49:8e:e2:4e:c3:93:d3:19:b2:
         8f:a8:ce:ef:43:48:ac:d4:ca:ce:79:fb:88:9c:36:66:6e:cc:
         13:9a:bf:e5:b2:c3:80:36:96:11:41:90:2c:ce:c0:cc:7f:c0:
         6b:ff:05:f7:84:96:9e:e7:8c:11:3e:78:2d:5b:e2:4a:73:5c:
         00:91:51:8f:d3:53:6e:b9:fb:10:ae:f5:72:aa:de:a3:c8:d7:
         ca:08:44:d4:0a:97:aa:fc:a7:a1:eb:0b:e5:05:d4:af:68:d3:
         92:ac:97:2c:df:be:e2:e5:41:bd:c6:b9:d3:ff:5a:b1:ac:b7:
         6a:a3:0a:20:a3:40:91:e9:69:c1:ec:29:df:ef:47:e1:97:8b:
         3c:3b:0f:a1:7f:a8:41:bc:f4:37:b1:21:d0:5d:7b:42:8b:55:
         f0:ed:fb:d5:36:b5:0a:53:e1:b6:5b:ae:b7:af:82:24:9f:dd:
         05:8c:fc:d6:a4:d1:e3:a7:65:5b:c3:ee:2d:88:e3:ff:bb:a8:
         f5:1a:42:48:0e:31:f3:18:a2:5f:17:0e:a3:77:eb:22:e2:93:
         76:f1:60:d8:6c:5d:93:e3:aa:24:ae:cb:8f:3a:c5:3b:0b:ca:
         40:68:93:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8GIG4IGL+NDj0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
YWE5MjAyZjAtYjlkNy00NzQ1LWI4NTYtY2M3OTQ2NDk3NzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+EA43rIAzEy6OOcxTKwANwKWMgNh1YPYI4c
4UcPsdyC0HIDPRBNZ//tJ+uIIvW0bh+dQCVSHS0bNvTdavdzvMZrSEJ7AH3AFKIP
IEobSdzcdfy5lbbVrq73C/nHhKrG0jMMz5zR30k00g8Eu6fa9s4C0rfBCWnra/DM
zinB40a5I+ceohg3ZDRjFvFQn85qQKUl2aufgSS3UXpUdFCm1wAStGu4iL25Hi0a
2dlDgMEmgJXltpHVJ7/2PAglFLOxQKE4trSjVThp7tKmg0zPspRZV2UJW7ie0Zg0
qyCm1E9rpAcQqPk/96N4LZi0oTnqR5vX4U1bK4KjlSJtagI6jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLr2ZTf2IOnKQ8JZGMIhwTYoO6rdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNmI2M2JhOTUtNTI3YS0z
MTVhLTk1OWItMzUxYmRiOGI2MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAExhnhHX4MpyAsAz1kJeUHdnnZJGOvEUJnFtEmO4k7Dk9MZso+ozu9D
SKzUys55+4icNmZuzBOav+Wyw4A2lhFBkCzOwMx/wGv/BfeElp7njBE+eC1b4kpz
XACRUY/TU265+xCu9XKq3qPI18oIRNQKl6r8p6HrC+UF1K9o05KslyzfvuLlQb3G
udP/WrGst2qjCiCjQJHpacHsKd/vR+GXizw7D6F/qEG89DexIdBde0KLVfDt+9U2
tQpT4bZbrrevgiSf3QWM/Nak0eOnZVvD7i2I4/+7qPUaQkgOMfMYol8XDqN36yLi
k3bxYNhsXZPjqiSuy486xTsLykBok7g=
-----END CERTIFICATE-----
Generated at Wed Jun 3 21:24:43 2026 by rpki-client