Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9c6000df-7276-377a-b84a-1bbca075bf9a.roa
File:                     9c6000df-7276-377a-b84a-1bbca075bf9a.roa (raw, json)
Hash identifier:          Wzf2AcsyX6aLycsoEfZHq/wfzryVHrfSroZNUH7Ypnw=
Subject key identifier:   ED:98:31:02:ED:71:49:C9:22:E3:FC:14:46:78:CF:C9:D3:33:25:20
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DBD059D6FACBBA4299BC88780
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9c6000df-7276-377a-b84a-1bbca075bf9a.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        161.69.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:9d:6f:ac:bb:a4:29:9b:c8:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=e2476c60-a7c7-4272-b29e-8d0771eb45e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:3b:61:c4:11:56:70:34:5a:2e:88:64:34:
                    b2:34:1a:2b:75:04:fa:97:cc:21:02:a1:c4:4d:2a:
                    d5:3a:9d:03:cb:09:cd:74:68:3c:be:67:55:73:ef:
                    4a:0e:d4:32:d1:2c:c8:fe:1c:e7:fb:8e:14:d1:5f:
                    33:60:c2:26:c8:66:d5:69:ea:82:05:80:56:b9:7e:
                    0f:05:5c:41:e3:13:22:a7:38:60:09:2e:4d:56:e3:
                    b5:f3:08:14:c1:4b:49:6e:d4:e8:3b:e6:88:77:b9:
                    0e:be:40:e0:2e:c3:ee:cb:35:ca:7a:9d:c7:6b:2f:
                    c5:23:dd:42:63:2f:0e:e3:7b:95:68:e0:7f:cd:f2:
                    5c:02:ad:b5:16:e4:a7:57:30:cc:25:f6:bb:32:52:
                    24:3f:f5:d6:00:7b:4c:8d:9f:3d:e7:35:12:e9:51:
                    d5:90:f1:69:54:69:a9:42:7b:ac:8c:87:ec:db:c5:
                    e0:32:c0:d4:53:b6:51:dc:72:46:0c:87:d6:f0:dd:
                    ba:e1:b2:a6:08:78:46:5c:22:40:b1:6e:df:7a:2e:
                    90:bb:59:f6:cb:c3:34:55:9a:48:70:83:17:bb:a3:
                    ff:93:0e:50:4a:52:70:48:9c:eb:ef:79:7c:18:ab:
                    cb:23:31:6e:6b:48:af:a9:4d:e3:02:8a:16:c0:37:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:31:02:ED:71:49:C9:22:E3:FC:14:46:78:CF:C9:D3:33:25:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9c6000df-7276-377a-b84a-1bbca075bf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e1:07:ba:80:c0:f1:e1:a0:3b:f5:ed:c2:99:dd:26:98:7f:
         ec:56:87:30:e0:e7:9c:9d:4c:1b:04:5b:bd:99:36:e2:da:1c:
         87:0e:15:c4:26:23:e1:1b:47:8f:5c:a9:33:dd:44:c8:ad:07:
         1e:49:f1:5b:ab:f1:bf:a9:ef:c3:7c:8d:90:1f:7b:24:dc:6c:
         7d:8c:cd:59:c9:72:cf:9a:88:eb:79:8c:c8:65:f5:77:a6:72:
         41:61:be:48:22:f1:ab:ca:8b:39:26:92:24:9d:1c:27:b8:91:
         22:3f:6f:38:66:32:41:0d:d6:37:51:74:98:42:dd:39:c9:27:
         08:39:fb:ad:6c:aa:86:82:87:f9:11:99:cc:5d:61:17:e7:f1:
         ec:87:91:1a:ff:47:04:ea:6e:b2:64:c8:44:b7:e2:ff:df:a1:
         aa:1e:6e:66:6b:2e:6f:66:8c:f5:aa:e3:88:4e:a8:c3:fc:75:
         51:ca:0a:10:6f:9e:6f:5b:ea:f6:29:69:43:df:52:1b:b2:61:
         6f:bb:46:c2:be:a4:78:c5:3e:3c:6b:e6:d1:62:ae:42:c4:f3:
         0a:28:b4:b5:ac:3e:f0:dc:88:78:8e:bc:a6:78:28:ae:c0:9c:
         53:14:3c:2f:c9:18:7a:e8:2c:8a:51:68:77:22:1b:6d:e2:5d:
         9a:40:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:31 2026 by rpki-client