Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
File:                     bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa (raw, json)
Hash identifier:          0CeOMFjyxuMou7zl+oBFsReVFt22/yRgJA6d8qNERdk=
Subject key identifier:   E3:B6:2A:31:0A:CE:5A:3B:CE:D9:D7:22:DC:0E:95:9D:5F:60:71:97
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584CF852483D241ACE3AF001A980
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     203724
IP address blocks:        161.69.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:48:3d:24:1a:ce:3a:f0:01:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=45511650-2980-441e-959f-f31ce9f29fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:e4:56:33:cb:31:64:26:f1:11:d8:27:4d:
                    60:c4:9e:84:55:d3:1c:86:c8:f5:71:2a:de:03:d7:
                    ef:80:46:5b:c6:f8:bb:d7:55:39:79:39:fa:9e:3e:
                    13:10:5e:ba:ec:b4:89:76:4d:ab:c3:a6:9e:38:19:
                    f3:cf:ee:bf:df:19:8c:49:d8:45:17:ae:a8:e2:a5:
                    2e:a2:ac:ea:d7:07:a9:69:84:36:c4:4f:19:9f:91:
                    83:09:7a:8e:27:a3:88:c6:7b:50:0d:b5:c5:92:c3:
                    47:4b:7e:06:06:1f:f0:24:97:e6:d8:d5:13:05:37:
                    74:a2:7f:5c:81:e6:92:1a:5f:0e:3f:88:87:4f:9e:
                    73:86:12:4b:05:70:ff:ed:64:a2:f1:15:fc:7e:07:
                    f6:b1:01:e4:99:dc:55:67:cc:68:be:d7:1e:f2:2a:
                    14:e6:8b:23:df:1a:aa:c6:98:f9:28:94:0b:ce:88:
                    6a:3d:3b:9e:e1:20:94:c1:bf:a0:ba:49:44:19:83:
                    ae:a1:e9:ac:d1:55:30:de:df:2a:7b:ba:3b:c0:7d:
                    2b:22:db:33:d8:f9:16:dc:be:51:71:d9:ac:45:76:
                    ff:9a:bd:2c:b9:b9:3d:db:7a:cd:3b:ac:16:65:be:
                    96:f6:2e:db:b6:a7:c3:65:1a:3d:8e:32:8c:2c:f3:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B6:2A:31:0A:CE:5A:3B:CE:D9:D7:22:DC:0E:95:9D:5F:60:71:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:01:8b:ff:53:16:33:46:3f:db:ed:82:df:f3:d8:bb:b4:
         bd:c6:86:a8:e3:51:ed:6a:2a:63:fa:9a:9b:cf:12:0f:f6:38:
         91:54:c7:9b:62:85:82:d1:74:a1:61:67:73:6e:90:c6:7a:28:
         9a:f5:b8:13:a0:8b:16:ce:74:9b:b1:8b:fa:90:b3:89:36:d5:
         94:35:78:4d:d0:75:09:47:0b:02:d2:46:f8:53:ce:61:23:2f:
         db:03:53:35:34:79:25:28:2a:a6:94:53:f7:17:ce:e9:63:74:
         e5:6f:d3:42:10:7f:c2:1d:de:bd:81:e8:9d:e5:d4:bd:fe:fa:
         36:c8:f0:ab:fa:06:f3:fc:98:9f:c9:e1:99:32:08:8a:d7:c5:
         96:21:08:1a:01:f3:15:8a:f0:5c:2f:6f:90:11:d0:43:c5:d6:
         4a:df:c2:34:28:ae:95:39:b9:27:dc:f6:ac:c9:0c:bc:e2:fd:
         d8:3f:cf:02:68:48:7a:c9:df:a5:a9:ee:cc:40:86:98:bb:24:
         e6:1f:44:f6:3d:78:fa:6e:bd:28:f3:55:c0:1e:34:90:fe:fb:
         4c:42:bb:54:eb:fe:cc:9e:1b:25:32:b1:bc:ad:69:77:4e:1f:
         51:ee:2b:d8:73:20:0c:89:95:13:fe:d7:35:fb:64:6e:0d:32:
         dc:6d:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:33:40 2026 by rpki-client