Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fd008602-53bf-30f8-b0cf-dbfeef70a6ad.roa
File:                     fd008602-53bf-30f8-b0cf-dbfeef70a6ad.roa (raw, json)
Hash identifier:          cM2l+PKba+n6D/hOfLDO74P2T0bLFwMNaavfXOKCGb0=
Subject key identifier:   A8:33:73:AB:28:96:C0:DB:C5:94:FB:4D:34:3C:70:F8:77:2E:A3:11
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584CF8523D8F584B4E3DD1358280
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fd008602-53bf-30f8-b0cf-dbfeef70a6ad.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        161.69.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:3d:8f:58:4b:4e:3d:d1:35:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=3409716e-6539-483b-b9b7-942dd2745af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:dd:86:29:6d:3f:6b:53:f8:a1:5a:f5:26:
                    ac:c4:c3:97:7e:43:6e:c8:e8:0d:b7:fd:84:f2:56:
                    96:c9:8a:04:53:db:bd:49:69:6e:9a:59:e2:ef:7d:
                    c2:32:8e:4c:01:3a:c7:5d:e1:47:9a:09:ac:0c:15:
                    5e:f3:2f:4d:32:f7:52:a7:34:1f:84:4e:95:5a:23:
                    b4:00:b4:d4:a6:bb:9b:6d:d9:94:22:3f:71:88:21:
                    07:a1:61:99:45:2f:c1:81:17:1f:c0:3f:1b:f8:33:
                    a0:8a:79:01:43:58:98:8a:07:7b:57:8c:40:5f:27:
                    5d:24:2a:9a:cf:44:60:34:62:e2:42:64:9f:b4:8b:
                    15:49:a8:d4:91:db:53:6d:d5:61:3b:4e:c2:f0:1c:
                    08:bf:8f:85:5e:ab:71:9d:d7:db:ec:44:04:80:0c:
                    30:84:92:1e:65:41:f2:31:a8:30:43:59:c6:3c:df:
                    c9:82:7b:ce:5b:c8:1a:2f:45:8a:c0:73:1e:0f:27:
                    0b:e9:a2:a4:bf:dd:a1:5d:92:4f:12:68:3c:85:7a:
                    28:d8:f4:ec:a8:eb:8e:37:87:7b:69:97:2e:9c:a7:
                    81:7e:52:04:e3:69:fa:7d:0f:65:84:9c:c0:66:d7:
                    cf:c0:04:45:8d:84:02:05:43:4e:55:fd:8e:fb:f7:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:73:AB:28:96:C0:DB:C5:94:FB:4D:34:3C:70:F8:77:2E:A3:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fd008602-53bf-30f8-b0cf-dbfeef70a6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c3:01:52:89:14:47:be:c0:6f:93:d0:a1:3f:b2:a5:d9:a0:
         16:d1:c9:82:73:56:71:91:f0:9f:86:e5:62:d8:96:5d:c9:76:
         c5:56:6d:90:26:7c:73:17:62:26:f8:cc:ec:f7:5c:8c:d7:a6:
         96:35:94:da:a0:f5:42:31:a4:2a:36:bc:f5:28:5c:9f:d4:2b:
         ac:e8:26:31:22:9c:3b:83:95:6d:09:d0:e2:00:3f:56:3f:4b:
         aa:38:45:16:c9:cb:b7:1f:5a:d7:5b:b6:4a:d1:6f:e6:d4:06:
         9b:c8:6a:31:ca:c0:35:17:fe:04:ee:22:ff:3a:ad:fd:dc:0f:
         2b:04:87:3b:2d:61:fa:1d:05:f4:a7:19:83:c7:d4:ec:cf:af:
         f7:d1:8e:82:62:ae:b1:6c:26:55:89:20:97:6f:5b:da:2f:58:
         4a:e2:43:eb:39:e4:b7:15:11:93:4c:2d:de:23:c2:f3:df:3f:
         6f:f0:df:4d:5b:0a:7f:c6:12:38:40:28:c4:d4:50:d3:9e:b0:
         f8:ea:00:84:04:a6:fa:cc:e3:0e:63:a9:c4:cd:33:5b:b0:cc:
         74:63:dc:bf:0d:56:b8:72:64:da:cb:28:04:70:27:8f:d6:06:
         6d:8c:83:0e:40:97:b7:9c:57:ad:9e:5b:5c:44:e4:c7:18:d3:
         42:1c:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:31:30 2026 by rpki-client