Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa
File:                     b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa (raw, json)
Hash identifier:          CII5F7u/eRlMriYcJhbUUvJOR4kNSSfr6vE0DVUrxcc=
Subject key identifier:   39:76:14:61:B4:56:22:4B:51:02:DB:C2:23:9C:4C:5C:30:02:A6:9A
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DD8F062DA4892E76B2F81B800
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     203724
IP address blocks:        161.69.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:62:da:48:92:e7:6b:2f:81:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=93a13e0e-4023-445d-bdd0-b1f159186f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:3d:44:ad:7a:87:db:a3:1a:24:76:97:90:
                    01:71:e9:a9:28:99:0b:07:29:8b:61:46:89:48:0b:
                    2f:ba:a3:36:fa:e8:92:99:e7:84:a5:92:53:3c:43:
                    40:5f:99:d7:3b:aa:a5:b1:c8:af:f4:dd:75:80:a8:
                    2a:a9:34:f2:7b:3a:1d:5d:90:bf:d6:95:a4:43:c3:
                    88:1a:d4:c1:65:d4:d5:7e:ca:bf:3f:f3:9d:eb:e2:
                    65:20:60:90:90:0d:af:a1:c1:d1:6b:5b:67:dd:1d:
                    8c:cf:8a:9a:d4:83:37:75:0f:68:16:eb:b5:aa:e9:
                    98:2a:b2:74:83:b3:8c:a2:f0:a1:db:3c:62:60:12:
                    d8:ce:af:76:f4:9c:d0:82:94:41:fc:cc:bf:58:3a:
                    68:d7:6d:47:35:28:26:38:fd:9b:97:2e:31:00:08:
                    05:81:03:09:68:5f:31:3b:fe:1b:e6:76:fc:07:3b:
                    70:f3:5c:b4:09:9c:13:e5:eb:48:25:e1:5d:32:36:
                    93:81:ad:6e:de:1c:ca:b6:e5:d1:5e:6c:01:74:ff:
                    36:3d:94:68:95:e2:5e:e4:38:cb:32:9d:84:fd:98:
                    dc:6b:6c:9f:24:2a:55:81:d2:00:26:eb:8c:e7:a1:
                    15:f0:65:de:55:2e:f3:3a:ed:51:a4:d6:9f:75:70:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:14:61:B4:56:22:4B:51:02:DB:C2:23:9C:4C:5C:30:02:A6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c3:b3:57:1f:cd:69:c3:8a:46:66:b6:a4:b0:37:d8:9d:9e:
         3d:ff:11:9a:6a:d5:ae:b1:4d:81:90:2c:6a:40:a3:c0:5d:3d:
         75:37:e1:be:c7:a2:54:d8:2e:46:f2:61:1e:64:0f:f1:8c:62:
         2e:8c:89:5d:23:9c:82:fe:66:54:b3:3b:b7:b5:cc:45:5e:80:
         ef:26:29:c2:02:49:b5:64:f2:e4:d1:88:ac:9a:03:b8:06:d7:
         67:52:87:26:4e:5f:a2:e6:21:b2:dc:da:28:38:e2:c4:7e:b2:
         18:a6:a7:9b:81:e3:23:da:e6:77:fc:35:cc:df:87:cf:b2:67:
         ba:d0:14:02:30:69:56:b5:da:92:48:f0:3e:bf:0e:bc:31:ce:
         05:a9:0a:95:e5:f1:13:6a:9f:b3:61:ac:7d:74:5d:2f:02:a7:
         00:c3:06:f9:e2:c9:44:9a:a7:53:40:58:2b:c5:c0:e1:49:8f:
         34:24:d4:3f:ed:ea:66:c1:20:7f:fa:82:f2:4e:05:d0:63:5f:
         37:26:b2:ae:94:2c:f4:ec:ee:11:03:02:9a:a9:45:ed:d6:7a:
         89:49:59:d3:b2:26:47:5a:ca:83:20:fa:b5:55:2a:42:c9:33:
         84:d4:ae:9f:9a:a0:10:d7:8e:ed:35:e3:4d:2f:f2:47:6f:2e:
         96:88:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:22:55 2026 by rpki-client