Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa
File:                     f738af2e-6574-3997-a029-ee3b01e5ca5c.roa (raw, json)
Hash identifier:          +m/Dmfag/gId5N1WvVicsmzTgmH214EBic5SS1bqBBo=
Subject key identifier:   FE:E8:69:46:60:56:34:74:F3:FE:64:BA:CA:C5:C1:15:7D:F0:76:D8
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DD8F06217ABE90A7C153F6DC0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     16509
IP address blocks:        161.69.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:62:17:ab:e9:0a:7c:15:3f:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=7d10b591-14eb-4d34-b948-75ad4a0f89eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:bb:72:5a:77:29:74:a9:f0:74:06:2f:b7:
                    cd:13:37:46:91:2c:10:8b:e8:98:8e:40:f2:d4:50:
                    58:ad:2e:bd:3f:14:bb:b4:bd:51:46:b9:92:d3:26:
                    fa:89:60:0a:a9:96:76:0a:a1:b3:de:8a:69:cd:df:
                    cb:73:2f:1e:0c:0d:ca:aa:13:8c:d3:d6:03:a0:c9:
                    5f:34:ab:86:c9:99:ec:7f:67:06:6f:27:4e:9a:be:
                    75:67:0a:8a:af:8e:ef:88:ad:4a:e7:a7:4c:ec:9f:
                    8d:d2:e6:d8:7f:5b:8b:cc:8a:1c:23:be:95:91:8e:
                    f0:f0:69:c3:1b:4e:f1:80:c4:07:a1:80:3e:f7:1c:
                    d1:f5:b5:c5:ff:5f:36:12:5b:20:ab:d0:82:13:bf:
                    af:c7:03:61:80:3d:fb:bc:0b:20:85:5b:17:d0:29:
                    77:73:f6:31:1d:cd:28:c9:2c:69:2d:ae:95:1c:42:
                    99:92:51:b8:fa:ab:91:ad:7e:1c:d2:29:a0:f3:d0:
                    0c:88:3c:7c:13:32:22:0d:fa:0c:db:5a:36:66:43:
                    70:f7:46:be:c4:50:88:14:cc:c9:65:9e:a0:2a:ea:
                    a7:a0:b8:6c:ac:5a:ab:5f:5a:02:5c:81:90:bf:f3:
                    8b:dd:c1:23:56:24:68:b5:72:d2:05:c4:f5:fe:e4:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E8:69:46:60:56:34:74:F3:FE:64:BA:CA:C5:C1:15:7D:F0:76:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:61:d3:d2:11:2c:85:af:2f:ac:93:ab:bb:bc:9a:87:d1:c8:
         58:c7:4c:29:79:4b:93:54:57:d3:c6:7a:8b:06:71:da:46:a9:
         95:f7:ea:ce:12:4f:cf:18:f9:3b:4a:12:2b:e0:c4:de:fa:c1:
         d1:ef:c1:90:86:c4:07:8b:94:91:5c:d7:89:a6:91:f3:9a:6d:
         f2:c9:b1:3f:b6:43:0e:e2:08:a7:49:94:7a:c5:62:96:50:82:
         94:ad:74:e5:b6:91:a6:58:1e:23:ca:79:22:ed:19:c8:6c:51:
         e3:62:42:fd:57:24:ec:4f:58:d2:37:c5:c7:a9:be:ea:94:d1:
         68:7d:5e:f2:89:88:d0:e1:d9:dc:1c:3f:b4:a1:6e:46:07:c4:
         23:0c:11:25:f8:c6:c6:6a:24:7c:e8:89:20:e8:fe:f8:20:13:
         45:3a:de:5c:bf:c5:ab:a8:48:f6:6c:77:79:4e:9a:4d:dd:e3:
         89:75:2d:ae:5b:b1:49:22:23:0f:6c:5f:1f:69:6e:a9:91:5e:
         3d:56:6b:de:3b:99:91:d5:ed:a0:13:e2:27:e7:18:3d:b3:3c:
         ef:03:29:5b:d1:23:f8:01:04:8b:a4:b5:09:29:83:33:e6:6a:
         d4:bb:c8:69:0e:41:93:a0:40:77:5c:ef:b4:35:67:40:9f:50:
         1e:2b:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:43:06 2026 by rpki-client