Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa
File:                     450c0d21-5700-3ed5-8c33-216c663999de.roa (raw, json)
Hash identifier:          NRT5ESJkgZTX7LVfXPpC0333UbsE4BfAzNpPoyxq5hY=
Subject key identifier:   CA:96:6E:A8:FC:5C:53:2F:53:55:68:9D:41:5E:40:48:F3:E7:41:87
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DBA3AFAF62A5A7FD2B4D81B00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     203724
IP address blocks:        161.69.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:fa:f6:2a:5a:7f:d2:b4:d8:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=0af5bb85-c81b-453f-a6f5-682f034da915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:9b:08:cb:a5:db:27:c3:f4:be:ba:87:77:
                    15:98:2f:23:19:a5:22:09:d2:35:4a:42:fe:ec:4b:
                    ab:46:eb:36:7c:95:61:f4:24:5c:9d:87:7a:93:f3:
                    90:40:b3:43:80:ae:2c:5f:60:34:6f:83:f3:4c:a7:
                    da:ef:69:e0:42:6a:d1:3d:a7:68:18:22:d5:ca:5c:
                    18:3d:ff:d2:ac:f8:8d:3a:05:d8:f7:d6:33:f6:2c:
                    f6:fe:59:22:b0:36:b0:17:46:67:33:0f:86:a6:9e:
                    1d:5c:8f:c4:51:ae:58:f1:93:8b:56:3a:5f:ee:28:
                    c8:23:db:2f:22:58:ff:6c:68:34:df:ca:fa:fc:7a:
                    7f:30:f0:c0:1b:30:3e:5c:63:ff:e0:f6:7c:41:98:
                    cc:09:08:c1:61:6a:cc:f1:24:8c:b4:8f:38:c8:a6:
                    df:36:fd:3d:c7:93:22:b2:36:fa:8e:8d:21:4a:51:
                    d0:64:75:e4:ce:3c:52:4d:84:39:57:6e:08:c9:5b:
                    18:9d:a9:b8:2b:2b:a3:c8:4a:8a:bf:5e:03:75:d1:
                    a4:3c:02:2a:12:c4:d6:d9:9a:10:7d:9f:8e:4a:9f:
                    93:19:3d:89:5a:12:f4:78:ab:9c:e1:20:f7:05:02:
                    14:f0:d7:3d:61:cb:63:67:02:9f:31:d8:8c:04:e1:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:96:6E:A8:FC:5C:53:2F:53:55:68:9D:41:5E:40:48:F3:E7:41:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:64:30:bb:14:d0:9c:f5:bf:f6:c6:f6:d1:e3:56:e8:5f:5c:
         65:83:a0:ab:e2:12:03:6b:fa:5d:07:cf:b0:e9:78:12:b5:e9:
         41:73:94:46:03:f2:2f:5d:26:94:7b:ad:0f:4b:01:fc:e8:bf:
         1e:8e:3f:a4:68:02:0b:8e:a1:63:68:7c:bc:ca:91:07:09:94:
         d4:fe:20:af:6b:42:1c:f1:ab:78:e0:0a:07:19:29:0f:f3:dc:
         b9:b6:74:92:70:88:fe:d4:33:ef:5b:94:af:c1:5d:c8:e1:99:
         4c:82:cb:76:ba:82:52:1f:01:8e:03:ca:d8:28:7d:66:9e:7e:
         8c:0d:a8:2f:49:b7:ea:87:c7:8e:26:28:d0:5e:7c:64:49:0d:
         96:59:8d:35:17:b5:87:16:21:ce:aa:73:0b:48:80:2b:0d:17:
         23:79:54:d4:bc:b6:0d:fb:25:9c:3f:7a:77:70:3e:90:47:2d:
         28:b0:46:78:f7:68:37:69:30:97:1c:30:b2:6b:af:3b:22:4b:
         30:9a:42:14:2a:24:dd:72:02:10:e4:a3:67:7d:f7:0c:b5:19:
         71:b4:08:06:cb:4c:49:53:d5:3c:99:7c:c8:7b:3c:b3:04:94:
         47:de:fd:fc:c4:29:7f:85:e9:8b:2d:57:cc:bc:23:d4:b0:1e:
         c0:d6:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:03 2026 by rpki-client