Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c8249a73-16dc-3eac-acad-deceaef86a1b.roa
File:                     c8249a73-16dc-3eac-acad-deceaef86a1b.roa (raw, json)
Hash identifier:          +OOg6gN+GRe4VdQYawIRfxXJNJT9XkMBNIUwbwcLrD8=
Subject key identifier:   ED:19:AB:D8:0F:D3:0B:A5:66:F3:06:0B:5D:7F:26:2E:58:F7:C7:99
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584D19B4DF2B291929583B548C80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c8249a73-16dc-3eac-acad-deceaef86a1b.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        161.69.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:df:2b:29:19:29:58:3b:54:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=e3336906-6393-4618-8d7c-6b03bbe041e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7d:c8:cb:af:a1:cb:9e:fc:fa:0b:1b:4e:5e:
                    19:63:e1:91:70:eb:65:95:66:81:48:6b:87:ba:a6:
                    0d:b5:4f:36:18:7a:80:41:c7:d6:2e:7e:ba:7f:e9:
                    bb:5a:b7:db:8d:5e:65:8d:ad:20:ea:76:33:07:7d:
                    09:fa:7f:ba:c5:db:77:88:fa:ee:ef:97:92:82:9e:
                    c7:28:6d:fa:b6:c1:b4:fb:95:29:ea:d1:c1:01:a1:
                    d2:37:7a:bd:c5:8b:0e:79:c9:f5:9b:e0:d9:7e:14:
                    85:97:6e:3c:22:6e:1e:04:e7:68:0f:da:f2:c6:bc:
                    5c:dc:39:6c:07:20:93:6c:b5:3d:73:ca:a0:48:c1:
                    42:49:2b:df:7e:2c:1c:0a:bf:5f:f6:90:5a:09:46:
                    f6:47:44:07:dd:9c:00:e8:af:9c:aa:56:3e:99:8b:
                    ee:f4:6f:6a:02:00:f8:67:94:53:cf:cf:e4:86:2c:
                    e2:ca:48:10:93:30:33:c3:56:8b:65:38:7c:d2:bc:
                    39:ab:79:95:a1:e7:4c:34:9f:48:ff:06:a2:8c:26:
                    dd:5e:17:19:4c:ca:02:b7:4a:78:62:71:55:9e:74:
                    fd:82:2d:69:9d:fb:90:76:c6:1d:c8:3c:c3:8d:af:
                    ef:49:5a:32:0f:81:bd:f9:38:f6:dd:51:63:1b:2f:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:AB:D8:0F:D3:0B:A5:66:F3:06:0B:5D:7F:26:2E:58:F7:C7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c8249a73-16dc-3eac-acad-deceaef86a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:42:99:9e:ba:bd:dd:fb:9d:2e:7b:b7:95:61:ae:3d:4a:de:
         b3:17:b9:64:79:61:6e:b6:62:a1:0f:e6:01:bb:c0:8c:a0:37:
         41:96:75:b2:40:8b:c5:8d:a6:11:88:37:45:9f:7d:02:fd:f7:
         72:c1:9e:94:c1:f3:9b:9a:3b:d9:65:1e:24:3f:0d:32:6f:a1:
         4e:12:fe:4c:ad:08:7b:c7:b6:32:f4:f3:28:b6:e1:04:6b:f7:
         e2:9f:60:e3:de:63:06:d6:cf:e3:02:76:e4:8d:20:30:32:b4:
         a6:18:f3:9a:0e:17:9f:bb:6a:6c:51:1c:9c:ec:f4:09:20:40:
         39:4c:31:35:78:c2:e5:ec:d5:b2:7f:23:cd:04:40:23:21:e8:
         75:78:cb:06:a0:a3:3f:72:4f:9a:4c:99:4f:5f:01:93:93:2e:
         56:0a:50:ec:20:cd:ac:51:de:ee:ef:de:cc:90:f0:c3:88:3d:
         44:7c:24:c7:75:79:91:d2:75:fb:d8:18:e9:21:32:09:85:f7:
         5c:4e:4a:b8:36:1a:32:41:e7:0c:6c:97:1d:50:89:f2:92:76:
         18:1e:c0:2d:a3:2b:64:49:e3:41:8f:89:98:9e:f4:58:9e:3d:
         c5:62:35:ac:58:e4:d0:4b:cb:90:06:e9:98:34:d3:8f:18:86:
         e4:c0:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:05 2026 by rpki-client