Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9ba130fc-2e48-32d3-b876-d819a9c0b39a.roa
File:                     9ba130fc-2e48-32d3-b876-d819a9c0b39a.roa (raw, json)
Hash identifier:          kgfALRlvpwRgEOA8sBTrYUMRjBlWrFWo+r6mE3AzPuA=
Subject key identifier:   D4:DE:21:BD:FF:2F:BC:A6:72:D5:D0:78:3E:6C:E5:AC:32:29:EE:3D
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DBD059D8781DB30684F1887A0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9ba130fc-2e48-32d3-b876-d819a9c0b39a.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        161.69.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:9d:87:81:db:30:68:4f:18:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=cd10967f-2066-409f-bc92-9b2b38d54253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:93:7a:f7:b5:dc:53:6f:cd:a3:dd:3e:75:
                    1b:d0:cf:9f:a0:0e:e2:fa:d9:18:5c:00:f3:37:c9:
                    7d:5b:ce:2c:56:78:c2:1a:57:70:df:94:8d:23:52:
                    52:09:02:1a:99:2f:bc:82:6b:86:cb:76:40:5c:c6:
                    fe:43:e3:a0:ac:2d:e8:01:47:14:b3:1e:2d:d1:0a:
                    d0:de:0c:67:af:30:3d:85:6b:b1:09:b1:78:28:44:
                    f5:de:e0:8f:d7:ef:f5:d0:a5:47:8a:af:ee:92:b6:
                    3f:63:00:7d:6c:de:57:f2:24:3f:90:be:81:fc:8a:
                    7b:5f:8b:da:02:29:5e:2b:88:1f:c1:28:f8:84:ae:
                    ad:88:40:3e:04:7f:3c:a2:f9:96:d4:78:3b:40:2f:
                    f2:83:26:f2:00:21:67:59:0e:c9:b0:05:bf:1b:15:
                    4e:6b:80:80:47:a7:f5:4f:d8:ab:72:4c:06:d5:9a:
                    12:1a:59:43:e9:94:06:d9:cc:1b:03:36:ef:59:5d:
                    03:3b:af:f3:74:7d:e3:af:16:40:44:a6:89:9d:51:
                    ed:44:24:ae:45:11:20:38:df:34:f8:a5:30:d4:3e:
                    98:11:fa:db:7c:cb:d9:13:ef:de:f8:53:16:bb:45:
                    57:39:89:c7:f1:41:91:d7:d7:f6:73:66:55:64:76:
                    be:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DE:21:BD:FF:2F:BC:A6:72:D5:D0:78:3E:6C:E5:AC:32:29:EE:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9ba130fc-2e48-32d3-b876-d819a9c0b39a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:24:24:f1:44:ad:8a:a2:63:87:7b:f1:79:4a:dd:fa:30:85:
         17:02:c5:7a:4c:2f:09:35:9c:b0:eb:6f:09:c3:cb:21:38:d8:
         ff:e2:3d:2e:75:b2:57:b3:7d:07:4a:09:80:7a:7d:c6:e6:29:
         20:5a:02:3f:42:fe:a6:f9:30:76:85:43:2a:c2:ed:1f:42:0b:
         b6:53:4e:1e:34:14:16:1e:a9:42:de:cd:fd:d9:73:f2:33:1d:
         c5:08:0e:2b:e4:b6:74:ca:38:18:db:23:63:e7:2c:ae:e4:fa:
         51:83:32:53:25:29:0b:45:61:9c:d3:d5:0e:11:0a:64:25:4b:
         6a:17:82:8e:82:13:20:72:ac:d5:ff:f4:0e:56:48:36:55:aa:
         2f:2a:8d:d0:7e:c3:75:74:2b:60:23:30:3e:94:44:92:c7:c5:
         10:c3:62:9f:23:b5:ae:3a:a7:7f:75:00:8c:3f:f3:8a:9d:b9:
         68:6a:07:65:a4:44:c8:ca:63:e4:ad:33:51:7c:f8:66:30:bd:
         e6:d5:83:e1:3e:aa:f6:16:b5:e3:80:60:36:f0:d1:f9:47:10:
         b4:36:7d:aa:14:b0:53:0f:26:8d:da:88:d8:47:32:ff:c5:ab:
         2b:08:b2:6c:a2:54:97:23:e9:38:22:85:d1:13:a3:01:a9:4a:
         f0:9b:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:58 2026 by rpki-client