Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa
File:                     f0289389-aaa6-342d-8462-e0a519e36ae9.roa (raw, json)
Hash identifier:          I1RAJ/lLlhUstDjGrLWeWgrLQ2HlYpUndcvMbHLLThs=
Subject key identifier:   C4:CD:78:DA:27:69:54:00:BA:FF:69:70:64:E6:F9:6B:E7:2C:6A:97
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DE84B453846EDDA6E7C2A1D00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        161.69.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:45:38:46:ed:da:6e:7c:2a:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=1f841aa7-b353-44c0-ac9b-a9509bf823d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:90:eb:7e:8b:99:41:88:54:92:62:ce:89:
                    bb:46:f1:38:2c:7e:85:47:2f:90:ed:3b:c8:92:c6:
                    98:c8:96:88:15:7a:2d:d4:71:7f:56:7e:5b:0a:84:
                    e9:ba:98:d2:b0:11:90:6d:7c:65:21:96:35:61:98:
                    81:70:4a:9a:6a:18:2a:17:27:3d:00:79:a7:8c:9d:
                    c3:63:04:f9:e9:c7:b9:75:b7:98:42:aa:7c:4c:ca:
                    52:4e:31:df:0a:8f:81:60:de:51:4e:99:97:3a:2f:
                    d5:9c:77:5d:0a:78:df:29:cb:5d:dc:c6:f9:1e:e1:
                    be:3e:a2:8d:a6:34:79:d3:d1:07:fa:b0:61:88:9c:
                    ae:a2:e7:09:a4:2f:b3:17:af:26:17:2d:77:a0:46:
                    c8:4b:26:aa:d8:0a:d6:ed:65:bb:15:d4:0e:3a:a1:
                    95:96:f8:ac:5b:37:51:19:2f:0e:3b:01:e8:9a:42:
                    15:c1:d1:6d:1b:3d:08:a5:62:7b:fa:aa:ce:ae:8a:
                    c8:68:e1:99:da:48:3b:8e:f0:74:83:5b:45:27:5a:
                    4f:10:7c:95:96:f3:3f:e9:6c:e2:5f:dc:49:4d:e1:
                    6a:d5:37:21:d4:45:32:3b:32:1f:50:22:b4:2c:ed:
                    b8:d8:46:49:c7:cf:15:a4:5d:00:d6:6e:2c:70:24:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CD:78:DA:27:69:54:00:BA:FF:69:70:64:E6:F9:6B:E7:2C:6A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:1e:69:17:2a:0b:5b:e8:86:c3:06:f6:19:08:f1:8f:e3:
         c3:7c:29:04:48:2a:4d:86:0a:7f:52:d3:cc:a8:3d:f4:dd:26:
         00:d8:7b:8b:79:44:65:01:22:e6:c1:06:32:49:52:aa:10:19:
         48:a6:0e:6a:0b:31:af:dd:e8:b5:55:df:6c:f8:05:9e:eb:9e:
         9a:b3:ff:6b:12:71:91:0c:77:3d:9f:ca:bb:d4:e6:23:de:ca:
         47:87:c5:5a:be:08:01:67:1b:b4:ab:17:ae:26:4b:e2:08:17:
         c6:a7:1e:03:51:da:e9:b6:0f:32:db:7b:52:13:c7:32:46:8a:
         e6:ba:a8:a0:c3:11:6c:c6:cb:1b:7b:c4:c9:8c:26:d1:e4:2c:
         da:d2:dc:2e:ff:4c:8c:a3:7e:f5:a0:f9:a7:6f:86:e4:b5:ba:
         0a:88:22:b8:cc:fd:7e:cf:80:12:67:c9:cf:05:1c:fa:50:e9:
         eb:27:14:17:e4:25:13:1b:f3:20:3f:c9:76:99:94:d5:bd:33:
         40:12:50:eb:88:a9:1b:33:b4:02:48:f6:5f:54:37:3a:71:1a:
         68:ed:82:3c:54:3c:4f:eb:57:18:74:a1:46:ed:1c:af:c1:2b:
         d3:ea:bb:a4:fd:67:65:19:68:fa:a6:7f:23:60:a0:d4:84:3f:
         02:eb:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:42:14 2026 by rpki-client