Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f1bb42d5-496e-39a2-bc31-485b55da3d24.roa
File:                     f1bb42d5-496e-39a2-bc31-485b55da3d24.roa (raw, json)
Hash identifier:          ApAAEIu7RYIIOkFILygdyQvH9DomG+0CQ8ucA9Q7pMo=
Subject key identifier:   37:83:45:9E:12:B0:BB:ED:EB:E7:09:7A:77:58:A0:D7:03:28:89:19
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584DBA3AFB31CC51D98ED10C6C00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f1bb42d5-496e-39a2-bc31-485b55da3d24.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     203724
IP address blocks:        161.69.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:fb:31:cc:51:d9:8e:d1:0c:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=da6758fa-5b91-4e0a-9a0b-add9461d0d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:00:90:e9:e2:8f:3a:4b:d9:ca:c9:5d:3b:
                    1f:a7:8d:5a:47:32:8b:10:57:25:2a:cd:b9:06:74:
                    14:e4:53:84:10:cf:45:af:a1:c8:b4:a2:fc:7a:a3:
                    b4:55:eb:1e:bf:f8:d2:fc:bd:46:ae:0f:e5:50:ba:
                    cc:97:c2:e8:20:ac:cc:bf:90:84:d0:7f:ec:63:8d:
                    ab:30:4e:d4:8c:c9:45:5b:b0:bd:3b:98:ed:0a:87:
                    b3:2b:aa:fe:39:12:7a:5d:42:18:66:d4:fa:34:fe:
                    e3:3e:f4:da:a6:24:97:d5:dd:ac:aa:a7:4d:ee:df:
                    91:fe:62:3b:97:6c:73:f5:c6:fc:26:7b:d4:d9:15:
                    d8:46:90:3c:40:e5:d6:03:88:7a:70:72:d8:33:61:
                    13:b2:e6:3d:4f:3d:74:71:01:a5:bf:f7:01:5c:64:
                    07:65:99:41:e1:20:7b:f0:a8:81:fe:c1:aa:aa:52:
                    da:7e:88:22:17:3b:2a:3d:98:83:22:c0:09:6e:cd:
                    34:ea:91:71:f9:d4:0f:68:11:95:b8:56:87:63:fa:
                    93:69:99:96:c9:5d:21:6a:51:10:64:06:c0:35:47:
                    17:49:19:47:37:ef:34:f5:f5:92:e5:50:ec:78:57:
                    c3:7d:13:79:ad:fa:b8:3f:f5:86:d0:8e:9b:70:70:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:83:45:9E:12:B0:BB:ED:EB:E7:09:7A:77:58:A0:D7:03:28:89:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f1bb42d5-496e-39a2-bc31-485b55da3d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:50:28:bf:4b:2c:d8:36:f8:cf:1e:8f:78:a4:c5:0d:7c:5e:
         ca:5a:4c:ed:97:b0:3a:7a:1c:6a:81:ac:93:a4:e2:1a:c6:f1:
         67:8e:09:4b:15:ae:62:fc:c5:1a:d4:1d:b6:4b:0b:fd:d0:fc:
         b2:42:dd:e2:26:1b:7f:43:2f:4f:2c:e2:c3:dc:28:1a:64:87:
         ba:3b:fc:27:ef:da:c8:99:70:41:46:8f:ae:cf:9a:6c:9f:e2:
         98:31:2b:54:e9:fa:3c:3c:83:ca:3c:da:c5:90:3f:1c:59:97:
         23:e3:a6:7a:6d:31:92:f2:b6:a4:bd:41:97:6d:8d:7c:30:8d:
         aa:97:14:49:2c:02:d3:b1:c6:ba:67:34:c2:d0:99:8a:5d:6c:
         ef:4c:48:73:4e:57:c6:2b:05:af:87:d8:b6:c8:bc:a7:64:ef:
         d1:03:27:5c:72:f2:d3:c6:05:e8:cf:32:7e:c1:d2:ff:d3:3b:
         15:b9:58:56:e8:90:31:f5:c1:1c:21:0c:2b:35:16:38:36:34:
         ca:0b:00:96:24:05:69:d5:72:73:2e:96:7e:3c:73:2c:61:ec:
         e7:71:98:46:65:02:75:71:f1:ee:cf:eb:c9:35:c3:be:70:4c:
         72:a0:15:61:a7:6a:5f:9b:4d:b9:61:ff:d3:98:cf:48:df:e3:
         ae:18:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:57 2026 by rpki-client