Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e1ac7d37-3b33-3a37-b3f8-4bfd5ae4d9a8.roa
File:                     e1ac7d37-3b33-3a37-b3f8-4bfd5ae4d9a8.roa (raw, json)
Hash identifier:          cBzP94dQkErz0ZG7+IrbRMhJ3J4CTiqVbMEbYMif9y0=
Subject key identifier:   86:C4:9D:49:E8:00:C5:B3:CA:9C:88:80:20:FA:EC:6C:A3:82:94:31
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DD8F066E15EA9CADBA6291E80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e1ac7d37-3b33-3a37-b3f8-4bfd5ae4d9a8.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     203724
IP address blocks:        161.69.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:66:e1:5e:a9:ca:db:a6:29:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=76dc5dd5-65fb-4258-a8c0-fddaa51d1f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:20:f1:1c:86:df:e3:70:65:b0:8d:26:6a:
                    ef:3c:61:e3:b9:56:5d:5c:9c:55:9f:e9:35:ec:bb:
                    a4:62:e5:ef:47:31:12:bb:18:a0:53:a7:e3:78:0f:
                    0c:fd:2b:64:e5:1c:81:82:87:ac:c5:81:f6:c9:31:
                    32:75:55:45:c6:8a:f0:c7:1a:88:f4:2a:21:31:40:
                    9b:dd:ed:c3:a3:e9:ed:11:90:ad:f6:87:9c:b4:52:
                    22:85:51:f8:1a:26:18:a8:1f:39:a8:8f:3f:62:7f:
                    1e:c6:cd:8e:ae:70:b2:08:f1:7c:5e:3c:bb:39:35:
                    29:b6:38:a5:64:00:06:50:b7:72:ea:6b:c7:5e:e4:
                    0a:a8:b3:4a:7a:79:ea:13:a3:58:40:c6:86:77:18:
                    60:d8:09:fe:4e:db:db:a8:f6:b0:f1:6d:f5:a4:b4:
                    63:d2:b3:d8:05:d8:ce:f2:aa:81:6a:20:aa:3a:48:
                    ac:03:48:15:4d:b7:1f:ac:fc:88:34:f5:08:f4:a3:
                    ef:fc:1d:ae:f0:8a:31:88:b0:73:cb:ac:0e:68:13:
                    50:9a:e7:65:d6:c4:44:f6:25:01:62:79:83:72:c8:
                    d7:c4:3c:2a:ee:4b:ec:f3:65:6d:be:04:f3:51:2a:
                    33:2d:8f:28:76:85:08:2d:fb:2d:4b:21:3d:fe:d1:
                    9c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:9D:49:E8:00:C5:B3:CA:9C:88:80:20:FA:EC:6C:A3:82:94:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e1ac7d37-3b33-3a37-b3f8-4bfd5ae4d9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:01:4e:be:15:92:25:dc:ea:0a:91:a2:17:96:39:ac:1f:
         32:6c:a7:bf:12:da:3d:8f:57:7c:c9:f4:3b:87:f0:73:71:78:
         6c:2e:82:73:a1:8b:66:fd:63:0a:f2:a1:2b:44:c5:e6:0f:22:
         ce:6a:25:71:7f:34:3b:e2:01:8f:19:c3:b0:f7:a2:1f:33:a6:
         51:6d:af:8e:a8:13:da:13:22:97:f0:fb:83:3d:ec:12:99:e9:
         8e:ac:4a:b5:7b:69:d2:dd:03:a3:e2:b3:e1:9c:2c:6c:db:b3:
         95:9b:45:8f:03:c0:91:9c:9c:b6:77:70:ee:ac:78:80:bf:5b:
         05:4f:43:44:4e:4b:a8:73:34:f5:ea:51:6e:4a:d4:0e:13:69:
         6c:ff:03:09:66:8f:b8:8f:bc:07:91:01:af:9b:12:5c:bd:43:
         05:09:29:5d:49:63:f4:21:04:07:3b:d4:3e:95:8c:1b:99:1a:
         eb:fa:56:87:d5:50:43:2c:f5:43:49:63:48:ad:f9:b2:7e:53:
         42:39:81:87:bd:c2:74:ef:2b:2c:81:13:85:0e:de:c4:c9:dd:
         19:ad:d4:8e:12:91:24:b6:09:5a:81:8e:d4:30:11:12:f2:aa:
         df:17:c7:6f:f9:fe:df:85:1e:7e:be:01:fa:fa:62:57:43:dc:
         34:03:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:22:27 2026 by rpki-client