Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa
File:                     aae72d5b-9be8-3703-913c-329e57bf9b39.roa (raw, json)
Hash identifier:          ljtoo0MjCcWz4sjl1shD5Qj0/MdFuPxkvAXJix4rPdA=
Subject key identifier:   32:30:79:DE:1E:50:F0:1E:5E:73:FE:C5:E1:75:21:01:38:2D:D0:62
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DD8F066EF763E5A1F999331C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     203724
IP address blocks:        161.69.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:66:ef:76:3e:5a:1f:99:93:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=5aa59b84-ce45-4a1a-820e-4958eb1838fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:fc:76:69:f9:fa:5a:9e:35:07:ea:e8:8d:
                    33:9b:9a:d4:d9:f4:57:18:3d:04:2d:81:d7:3e:9d:
                    58:21:d9:58:0f:76:96:95:f3:28:dc:82:37:06:3d:
                    24:39:42:e7:c7:84:06:fe:54:4e:15:75:72:c6:7e:
                    f0:7a:ce:58:53:26:15:80:ea:2c:2d:c9:0e:c8:36:
                    8f:2e:a7:c2:69:a8:15:7b:c5:7b:96:2c:a6:df:28:
                    0d:64:8d:82:4a:cb:9e:1b:25:4a:14:c4:d4:12:9f:
                    5c:f4:fd:3b:60:11:99:d9:c8:67:82:59:aa:85:e4:
                    24:66:14:81:a1:d1:be:d9:ac:b1:f3:a6:f6:6f:92:
                    b1:bb:f4:54:99:b7:ea:a1:ea:d6:a9:34:a4:43:2e:
                    a9:4b:43:0c:8d:13:35:a5:41:8f:1a:6c:11:4e:a9:
                    13:80:f4:c1:8d:22:ef:e6:b2:9b:81:c1:d9:e3:f3:
                    b5:5f:71:79:f4:67:7f:ee:be:85:9c:4b:12:10:13:
                    eb:d9:66:37:d6:9f:a2:28:53:b5:16:4e:42:c9:65:
                    ce:cb:53:f6:59:c4:c6:95:5d:b7:13:ce:2c:42:25:
                    ee:1d:75:62:ba:32:22:e4:16:a8:ad:3e:46:e1:32:
                    75:23:a4:2e:e8:80:5c:6d:a2:21:93:11:b1:89:46:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:30:79:DE:1E:50:F0:1E:5E:73:FE:C5:E1:75:21:01:38:2D:D0:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:c6:06:04:2e:06:1a:75:d7:6b:14:2e:de:a4:34:86:e3:
         5b:3f:b4:64:a7:83:6c:52:3a:ca:0d:3e:07:f3:7e:99:53:39:
         20:f3:9f:43:3a:a8:b9:2f:1f:24:5f:11:5b:11:b9:9b:8b:f5:
         5f:63:d6:67:b8:70:98:1f:6b:9b:bf:7a:ca:7c:0f:2a:16:58:
         bc:0b:2d:85:41:fc:a4:54:a0:87:c5:11:f1:79:1e:98:bc:b8:
         5d:31:8f:5c:ee:11:01:84:a8:d3:e6:63:9f:28:fa:c6:9c:10:
         cb:01:4c:bb:77:a1:5a:46:9b:37:51:38:1f:5c:ee:c0:25:1c:
         d1:56:64:d7:a3:ca:1b:f6:75:1a:c2:d5:c0:e8:6b:f0:46:89:
         e7:ff:99:90:ba:8e:70:df:1a:96:27:64:cb:a6:c2:f6:33:87:
         dd:cf:01:d1:1f:a0:ec:b3:43:e3:2b:90:f4:28:2b:0f:1c:a2:
         93:00:2c:5e:b7:dc:85:e3:d2:fe:f9:1f:2a:f2:ae:4a:0f:bb:
         bb:e1:d9:df:19:05:76:01:df:2d:1e:ad:a2:01:6b:74:74:67:
         f0:f5:21:ca:31:c5:1f:17:f3:91:dc:b4:9a:8d:0e:74:61:1b:
         98:c0:e2:07:72:5f:a6:a9:66:22:b3:de:00:62:fb:56:ed:23:
         9d:c6:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:23:34 2026 by rpki-client