Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/818cc0f5-4ff6-3965-a12c-ea8161763855.roa
File:                     818cc0f5-4ff6-3965-a12c-ea8161763855.roa (raw, json)
Hash identifier:          /s4BCsrLcp9cz2NSpP1//9O4cVO6QkAZoVLwPW+s+NU=
Subject key identifier:   A1:7B:7E:25:B5:92:AF:7A:DD:3D:DA:9F:74:25:D7:BA:03:6F:21:97
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584CDC6786B65A94D8F0A8C7CD00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/818cc0f5-4ff6-3965-a12c-ea8161763855.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     203724
IP address blocks:        161.69.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:86:b6:5a:94:d8:f0:a8:c7:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=d0555393-ce7e-4398-8ec8-0d20c6d9654a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:12:f1:b3:94:6d:ec:9b:9f:55:a2:8f:19:ed:
                    58:5a:61:bd:ad:d2:d8:b4:cd:b9:96:82:1d:ea:ab:
                    46:74:4e:44:81:7d:bc:84:c0:04:86:15:f5:40:e0:
                    67:73:b3:a6:9d:d1:57:dc:5a:8a:6f:55:44:88:b3:
                    f4:e0:92:a0:c3:34:0b:f6:5b:6f:27:53:3d:eb:f4:
                    9b:ba:c8:6f:1a:95:d6:da:ee:c4:85:da:98:dd:f5:
                    53:59:db:68:c2:13:23:10:17:6b:38:2b:55:7c:59:
                    8f:d0:53:82:d8:57:10:04:73:a9:7a:37:a8:e9:fd:
                    21:bc:72:89:65:f2:97:cc:80:76:8e:7b:e7:f5:ee:
                    c4:f8:4b:ac:e8:62:60:5c:f8:4f:aa:92:b3:13:04:
                    52:40:77:23:c1:0d:f8:5f:6d:d4:cd:e0:7c:0f:11:
                    7b:2f:ec:94:28:01:5a:ce:fa:8b:f4:be:7d:f5:fe:
                    df:b8:65:11:9d:06:9d:75:f8:27:92:7c:64:3b:7b:
                    05:43:6d:16:7a:be:0e:87:ba:c4:12:43:e0:af:57:
                    50:cd:75:9c:4d:5e:eb:89:89:fc:f7:1b:9d:4f:77:
                    0f:ab:b4:02:4e:4a:b6:74:2b:62:51:37:19:ff:b3:
                    26:c8:84:00:e9:ac:59:3d:af:45:6b:de:17:23:83:
                    f7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7B:7E:25:B5:92:AF:7A:DD:3D:DA:9F:74:25:D7:BA:03:6F:21:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/818cc0f5-4ff6-3965-a12c-ea8161763855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:24:c7:90:81:d7:9b:2e:75:74:2b:07:06:1a:99:52:ea:
         76:00:f2:ad:fa:25:04:14:5c:39:ec:7c:3e:51:01:48:df:b6:
         b1:ec:80:84:ea:da:35:a1:51:b3:ad:af:66:a9:e8:8f:2e:a4:
         a9:5f:2d:83:d8:10:f1:4d:9e:05:7a:8e:63:11:fe:db:23:03:
         9d:44:42:ca:5f:6e:8b:7e:1f:2d:86:26:31:76:ef:f2:37:bb:
         7e:78:a5:71:c1:99:d7:13:20:c9:9d:09:a8:a6:63:38:c8:b7:
         e2:0b:d9:d4:aa:92:f9:30:93:42:e1:a8:cf:86:97:82:ae:54:
         6e:e7:8b:e5:0c:8d:3f:c1:d7:96:94:4f:96:7d:65:ec:e1:2b:
         73:6e:84:7a:7d:20:ad:dc:b3:cf:ca:6c:ea:f3:1d:14:9a:43:
         38:85:72:4e:2f:ba:8c:bd:4d:27:0c:2f:14:9d:8b:b4:f9:3d:
         57:65:cf:63:ac:e0:1c:b9:55:b6:0d:a8:6c:20:bb:ce:a4:13:
         44:ab:3e:fb:71:f5:14:1b:da:b0:f6:2d:dc:5b:f8:9d:53:f5:
         75:1c:09:04:86:7f:77:7a:17:9a:64:49:02:12:dc:39:0b:91:
         e9:49:1b:e4:59:2d:1b:c1:07:b7:3f:47:8c:b3:98:b8:c2:0c:
         57:84:5b:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4a2WpTY8KjHzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
ZDA1NTUzOTMtY2U3ZS00Mzk4LThlYzgtMGQyMGM2ZDk2NTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBLxs5Rt7JufVaKPGe1YWmG9rdLYtM25loId
6qtGdE5EgX28hMAEhhX1QOBnc7OmndFX3FqKb1VEiLP04JKgwzQL9ltvJ1M96/Sb
ushvGpXW2u7EhdqY3fVTWdtowhMjEBdrOCtVfFmP0FOC2FcQBHOpejeo6f0hvHKJ
ZfKXzIB2jnvn9e7E+Eus6GJgXPhPqpKzEwRSQHcjwQ34X23UzeB8DxF7L+yUKAFa
zvqL9L599f7fuGURnQaddfgnknxkO3sFQ20Wer4Oh7rEEkPgr1dQzXWcTV7riYn8
9xudT3cPq7QCTkq2dCtiUTcZ/7MmyIQA6axZPa9Fa94XI4P3JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF7fiW1kq963T3an3Ql17oDbyGXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvODE4Y2MwZjUtNGZmNi0z
OTY1LWExMmMtZWE4MTYxNzYzODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbGJMeQgdebLnV0KwcGGplS6nYA8q36JQQUXDnsfD5RAUjftrHsgITq
2jWhUbOtr2ap6I8upKlfLYPYEPFNngV6jmMR/tsjA51EQspfbot+Hy2GJjF27/I3
u354pXHBmdcTIMmdCaimYzjIt+IL2dSqkvkwk0LhqM+Gl4KuVG7ni+UMjT/B15aU
T5Z9ZezhK3NuhHp9IK3cs8/KbOrzHRSaQziFck4vuoy9TScMLxSdi7T5PVdlz2Os
4By5VbYNqGwgu86kE0SrPvtx9RQb2rD2Ldxb+J1T9XUcCQSGf3d6F5pkSQIS3DkL
kelJG+RZLRvBB7c/R4yzmLjCDFeEWyg=
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:33:19 2026 by rpki-client