Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa
File:                     f0289389-aaa6-342d-8462-e0a519e36ae9.roa (raw, json)
Hash identifier:          YhzysieOJhAdTjp6Kyp8lJ7+ixSjKPunBHnMyIJDWgs=
Subject key identifier:   31:02:45:B6:A2:17:64:DC:81:12:08:D5:C9:53:70:DE:A9:DA:B0:61
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584D07AD02D10C451292D4326060
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     31898
IP address blocks:        161.69.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:02:d1:0c:45:12:92:d4:32:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=aa958106-aa66-474d-9aff-c6d34cb21973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:7d:35:d8:0b:13:7b:b6:f5:4c:ad:9a:30:
                    f2:c6:35:57:ba:d7:98:fc:83:83:d6:8c:f5:93:3e:
                    ad:aa:17:6b:81:f8:7f:ed:f0:ac:66:5b:37:8d:2f:
                    b6:a0:20:ed:42:8b:43:5a:e9:31:63:f5:0d:3d:3a:
                    79:72:13:b2:5f:9e:9e:b3:1f:9e:9c:ae:66:08:98:
                    7c:b4:9d:f3:28:b3:41:dc:6c:42:e8:a6:2c:5e:a6:
                    46:3b:f2:92:7c:f3:5d:5b:6f:4e:4e:74:38:b4:27:
                    ef:5c:33:0e:b7:70:e1:5f:e9:d5:d6:d9:d1:76:9b:
                    53:7d:46:45:d0:05:d7:f5:b0:7d:4e:b7:88:e1:d5:
                    f1:e9:94:84:95:c0:93:67:56:cf:52:fc:dc:f0:6e:
                    13:fa:f8:ba:0a:88:83:68:be:0c:49:3d:04:48:21:
                    5c:88:cd:25:b8:41:3a:20:70:13:0d:9e:5e:f1:e5:
                    19:c2:9b:32:ea:09:0b:1e:19:5c:2a:3b:4e:c6:0a:
                    dc:67:7f:05:b9:d5:37:6b:91:4d:38:e6:2d:5f:71:
                    6a:77:c9:b6:bc:72:58:81:ca:66:23:7e:7e:7b:d8:
                    3c:9c:23:2d:aa:0a:7b:ea:55:b8:11:cd:a1:9c:e5:
                    98:83:67:08:47:9b:bb:05:ac:80:a2:d5:35:9e:fa:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:02:45:B6:A2:17:64:DC:81:12:08:D5:C9:53:70:DE:A9:DA:B0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:98:52:0b:f0:28:65:fb:00:93:87:e7:26:d0:fe:e9:65:ef:
         15:a9:48:e8:5b:bf:a4:62:ec:85:92:dd:e8:42:84:36:32:57:
         07:6f:34:86:72:b1:43:12:3e:1e:7f:36:d1:78:61:84:24:e6:
         23:43:ac:a9:b5:9a:df:04:88:9b:49:cf:4b:e5:0c:6b:73:89:
         0b:e5:e4:94:7b:c6:c1:19:bf:f3:a0:11:5d:69:83:56:7c:08:
         52:fa:6c:ad:75:b9:33:12:9a:9f:33:25:04:f9:2e:09:8d:f4:
         9c:fc:24:90:17:96:d1:53:1a:8a:02:52:fb:f8:97:fa:92:b1:
         69:72:52:73:b1:bc:73:52:04:50:fb:23:b8:cd:fd:8e:b7:52:
         02:94:b5:b0:b9:2a:e5:7f:15:16:81:9e:91:fe:05:11:01:b1:
         8c:3b:0f:ab:c4:5b:60:50:5b:37:fc:51:22:d9:e2:e4:3e:67:
         bd:79:a4:f7:50:4f:70:ea:88:33:d8:96:31:ab:fd:81:ef:02:
         5b:62:3e:85:4e:70:cf:c7:bd:bc:b6:98:42:a8:67:32:d4:8a:
         8a:de:34:2a:f2:2a:95:23:53:fa:5b:95:3d:3e:ea:9f:21:2d:
         f6:48:9a:d7:08:a3:d3:20:7c:7a:1b:ad:bd:6a:12:0d:6d:1a:
         dc:8a:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:10 2026 by rpki-client