Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f6c85390-cb48-35e1-b9d3-bf536d58de42.roa
File:                     f6c85390-cb48-35e1-b9d3-bf536d58de42.roa (raw, json)
Hash identifier:          SE8lWIt/pmkEcIBOUvaK1pacbZ3XiESMBQy64ufQsqc=
Subject key identifier:   46:E8:4E:E2:97:27:B5:FB:DF:CC:C6:54:49:2A:69:66:8E:A7:07:19
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584D5E1A65A1B757CEA8AB614EC0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f6c85390-cb48-35e1-b9d3-bf536d58de42.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     203724
IP address blocks:        161.69.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:65:a1:b7:57:ce:a8:ab:61:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=6d212c19-da9d-4a58-b512-15b069bf9afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:7b:7e:57:71:b4:af:be:76:02:a7:e6:7e:
                    62:ac:20:0c:6c:6f:41:4a:3f:02:40:f3:8b:57:9b:
                    8c:92:9a:03:76:47:b7:cb:f4:08:9f:24:21:eb:cb:
                    ea:e9:b2:17:3b:2b:4e:1d:2f:9e:b7:d5:65:b7:ee:
                    9e:49:fe:d2:d7:72:a2:02:0a:8c:3b:e5:c4:e1:96:
                    49:9d:0c:96:05:ed:67:13:c9:49:4f:36:ae:31:ae:
                    9e:1d:52:cd:87:43:72:79:c0:e9:b2:8e:45:b1:ee:
                    bc:7a:5a:34:70:49:d9:5e:83:69:1b:5a:ae:1f:e5:
                    d4:1b:54:11:58:db:ac:18:a0:2a:ff:e0:2b:45:40:
                    7f:9f:a0:74:48:64:28:73:b1:41:9c:39:82:46:4b:
                    1d:02:61:65:5b:a8:4c:a3:5f:ef:f0:61:cd:c9:7d:
                    40:bc:ed:bc:2e:db:bd:02:d9:a9:cb:e2:22:03:50:
                    70:9c:5e:db:a7:a2:c2:e2:4d:ac:aa:9a:d0:e2:c4:
                    3d:8e:a5:fd:24:68:d6:52:61:a1:c3:f0:45:5b:dc:
                    f5:9c:8a:05:e8:1b:c7:c6:09:34:18:59:4e:a5:13:
                    ce:40:2b:4c:fe:ab:9e:68:7b:36:be:e1:92:4c:2d:
                    9c:ba:2c:4b:3e:d5:80:af:fa:77:f4:d9:0f:7c:60:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E8:4E:E2:97:27:B5:FB:DF:CC:C6:54:49:2A:69:66:8E:A7:07:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f6c85390-cb48-35e1-b9d3-bf536d58de42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b0:3a:03:d9:e3:57:ff:ad:3c:4a:01:bc:c8:d4:a5:86:e0:
         1c:55:50:9a:b6:84:ad:4d:3e:27:05:35:9a:88:b0:9f:22:fc:
         3b:12:21:28:9f:d2:e4:95:6c:5b:3d:2a:e4:78:77:2f:bb:6a:
         96:1f:d6:1b:23:1f:88:84:08:65:0d:ec:25:56:ef:82:f8:8b:
         b3:73:48:48:fe:4f:7e:ec:d2:c8:58:5d:b0:80:58:9b:10:8e:
         9a:fc:b1:89:05:65:4a:8e:70:02:d4:ef:19:f8:c3:76:92:3e:
         5c:cd:e0:d4:ac:51:ad:22:62:35:01:e1:f8:7d:33:c3:30:d2:
         14:f8:5d:11:19:3a:09:35:77:3b:72:2d:65:e3:73:42:41:6e:
         53:a1:40:a8:99:26:3c:08:b0:e6:4d:f9:9d:a9:1f:4d:5c:fa:
         74:a8:e4:9b:13:09:d7:bb:b5:81:ad:c4:41:7c:7b:44:f2:32:
         a2:9f:bc:d2:18:ab:bf:24:99:69:ec:a3:6a:e7:f8:23:b0:65:
         aa:da:80:35:cf:ca:40:38:cb:46:dd:66:a4:db:d0:84:33:62:
         5d:06:44:8d:14:b5:4a:61:57:90:b4:01:ce:22:ca:df:e1:f6:
         55:fc:6f:44:0b:b1:09:de:cb:0f:54:88:90:a0:67:b7:62:77:
         78:1c:97:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:07 2026 by rpki-client