Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c067990c-2cac-356d-926a-9fe19dcfde30.roa
File:                     c067990c-2cac-356d-926a-9fe19dcfde30.roa (raw, json)
Hash identifier:          hlpMx/lDy8kP/OZ2n6IkobuhoFVdAy03ee3Bfjl38m4=
Subject key identifier:   56:02:24:3B:62:92:EB:8A:61:07:6E:C6:22:B7:C0:AF:52:BA:D8:27
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584CF85243070294C870F0268800
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c067990c-2cac-356d-926a-9fe19dcfde30.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        161.69.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:43:07:02:94:c8:70:f0:26:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=1ad32b75-8197-44dd-baaf-b62a18a6de29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:89:96:21:1d:82:46:f9:de:0f:0b:c9:10:
                    bc:c8:a3:2c:d1:ba:34:59:90:3c:d6:40:2f:5b:e7:
                    e8:60:b4:ee:0d:17:1e:0d:3e:74:4f:91:f2:39:9a:
                    83:62:1d:85:b4:11:4f:6e:42:b3:70:1c:6f:20:78:
                    7c:38:a3:b1:a5:b6:0c:1d:57:da:69:13:df:db:63:
                    d1:81:ae:04:93:da:b4:9e:b8:11:17:ad:b5:56:9f:
                    53:c5:3d:1c:8b:ba:a2:a2:aa:7a:60:70:ed:cb:34:
                    a9:19:41:ed:7a:13:c3:db:4c:b8:b0:8d:0c:69:ad:
                    a9:81:4f:5e:a0:54:fe:21:fd:87:2b:23:34:92:48:
                    03:d4:30:b3:12:30:6d:23:14:c5:81:e8:f9:0d:bb:
                    68:7d:53:e5:42:fb:3b:49:2e:57:87:de:45:78:ba:
                    e9:df:1b:d1:24:0d:85:aa:9f:77:b7:4a:a3:61:1b:
                    8a:c5:13:ea:d3:16:17:21:84:84:c9:0b:14:67:7e:
                    39:4d:36:42:16:c8:53:c9:4e:54:a9:e8:a8:f0:28:
                    c6:b7:19:96:25:e4:ed:8b:c6:b5:90:83:ea:d6:a7:
                    f9:97:e1:52:3b:bd:d2:d3:4d:86:3a:15:9c:10:16:
                    89:27:55:b3:0a:23:c1:f1:e3:f1:37:d6:24:16:e6:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:02:24:3B:62:92:EB:8A:61:07:6E:C6:22:B7:C0:AF:52:BA:D8:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c067990c-2cac-356d-926a-9fe19dcfde30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:24:67:4b:05:0b:52:d9:e7:6d:40:68:57:6e:4d:24:a5:
         e6:bf:f3:b0:c8:a1:71:76:1a:51:3d:36:b8:07:e8:a0:22:ed:
         3a:45:6b:25:97:57:1f:3a:6a:08:b2:6f:e2:a8:ad:5b:40:88:
         80:7c:5b:5a:a4:2e:80:bb:bc:24:54:53:7d:76:8c:2e:64:d9:
         95:94:40:63:e0:96:37:9f:45:03:52:0c:fa:21:c3:04:31:8c:
         ab:5a:37:21:c2:ce:33:43:74:83:82:2d:c9:5a:f8:f6:0e:35:
         ff:63:6c:c2:b6:b1:3c:12:95:36:b8:da:7a:47:3a:3c:49:88:
         59:24:ed:30:ac:59:27:95:d1:d6:a1:95:2b:e5:da:1e:27:26:
         da:9d:dc:e8:91:40:4a:ba:a0:4e:ec:1d:62:58:03:82:31:68:
         cd:19:db:36:0d:2e:c1:9d:da:31:f4:02:60:f2:80:1a:78:30:
         9b:ec:8a:6c:c6:7f:9b:76:e8:93:91:28:fe:af:bd:f0:06:27:
         b1:85:11:f6:c3:e4:6b:88:92:68:e4:12:91:2b:c5:cb:1c:ac:
         3e:2b:ae:bb:ae:06:de:c6:f9:e7:7b:18:b4:1a:02:ff:39:21:
         cf:ca:6f:b4:3c:52:49:d3:d3:97:9b:7c:84:ed:19:15:1d:3a:
         26:5e:b8:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkMHApTIcPAmiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk
MWFkMzJiNzUtODE5Ny00NGRkLWJhYWYtYjYyYTE4YTZkZTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus+JliEdgkb53g8LyRC8yKMs0bo0WZA81kAv
W+foYLTuDRceDT50T5HyOZqDYh2FtBFPbkKzcBxvIHh8OKOxpbYMHVfaaRPf22PR
ga4Ek9q0nrgRF621Vp9TxT0ci7qioqp6YHDtyzSpGUHtehPD20y4sI0Maa2pgU9e
oFT+If2HKyM0kkgD1DCzEjBtIxTFgej5DbtofVPlQvs7SS5Xh95FeLrp3xvRJA2F
qp93t0qjYRuKxRPq0xYXIYSEyQsUZ345TTZCFshTyU5Uqeio8CjGtxmWJeTti8a1
kIPq1qf5l+FSO73S002GOhWcEBaJJ1WzCiPB8ePxN9YkFuZ7vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYCJDtikuuKYQduxiK3wK9SutgnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYzA2Nzk5MGMtMmNhYy0z
NTZkLTkyNmEtOWZlMTlkY2ZkZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABP1JGdLBQtS2edtQGhXbk0kpea/87DIoXF2GlE9NrgH6KAi7TpFayWX
Vx86agiyb+KorVtAiIB8W1qkLoC7vCRUU312jC5k2ZWUQGPgljefRQNSDPohwwQx
jKtaNyHCzjNDdIOCLcla+PYONf9jbMK2sTwSlTa42npHOjxJiFkk7TCsWSeV0dah
lSvl2h4nJtqd3OiRQEq6oE7sHWJYA4IxaM0Z2zYNLsGd2jH0AmDygBp4MJvsimzG
f5t26JORKP6vvfAGJ7GFEfbD5GuIkmjkEpErxcscrD4rrruuBt7G+ed7GLQaAv85
Ic/Kb7Q8UknT05ebfITtGRUdOiZeuMk=
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:31:48 2026 by rpki-client