Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa
File:                     7774879b-9330-3b7e-ae8b-286b0014a62e.roa (raw, json)
Hash identifier:          DjzM9hzmXjna/yiuTiVzTBVZhwOWvkGwKg9Hw2iNQ8g=
Subject key identifier:   81:E0:34:AF:C8:75:0C:85:A5:37:B9:6E:5A:40:28:86:AB:20:3F:B3
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F4328584B84E7866AAAE7A7E4537E2B80
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     202
IP address blocks:        161.151.162.0/23 maxlen: 24
                          161.151.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:86:6a:aa:e7:a7:e4:53:7e:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=33ff8194-83a6-4424-a33c-aef40134ef4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:f1:f5:7c:36:69:a7:3c:21:95:00:b0:d0:
                    32:60:37:f6:8d:55:59:f9:bc:82:25:cb:01:a8:8b:
                    84:eb:97:aa:9f:c8:6f:05:6b:a0:02:8a:2b:aa:1e:
                    a9:0e:e2:24:14:3b:41:a2:0e:9f:9c:b9:13:37:90:
                    5c:58:13:37:04:81:fb:43:49:f6:d5:9d:04:3f:73:
                    09:f5:08:b3:44:20:a5:01:ea:11:d7:0d:b9:0f:9a:
                    c2:97:ab:e0:5b:60:b5:1c:53:58:4b:26:a9:1c:24:
                    f8:30:6b:13:f0:4f:5d:86:99:6f:f7:ec:d3:82:00:
                    2e:95:72:bf:7c:4e:5f:b6:d5:b2:cd:95:51:c9:fa:
                    ec:29:f1:d9:e7:e1:ba:76:1c:27:a4:80:87:1a:72:
                    1a:6f:c6:9e:35:b5:8d:66:08:f7:28:e4:b3:40:93:
                    14:8e:a8:8f:3e:ea:4d:33:8f:b7:c2:ab:73:8f:36:
                    90:50:7c:00:d4:8e:7c:f4:93:af:4f:21:10:22:8b:
                    75:42:9a:c6:a9:9a:be:ad:ab:ed:a4:83:1c:33:0e:
                    02:82:1e:95:e2:0b:30:08:80:fb:b9:3b:de:12:c0:
                    14:dc:c1:27:c7:e6:0b:ee:fb:6b:22:f2:ea:72:59:
                    7b:fd:71:53:43:c3:89:14:f3:b9:cc:f2:3a:38:3a:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E0:34:AF:C8:75:0C:85:A5:37:B9:6E:5A:40:28:86:AB:20:3F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.162.0/23
                  161.151.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ab:a9:1c:f1:da:0d:5e:a2:c7:ff:18:b6:09:72:7d:e6:43:
         66:5a:2e:11:da:d0:50:76:fd:87:c9:1e:a2:b9:3a:a2:d1:44:
         c3:3b:3a:50:69:39:4b:18:7c:1a:69:e7:6b:62:ee:e8:4e:fa:
         aa:08:74:09:68:9b:02:91:bb:23:b1:92:2a:b7:19:aa:40:03:
         42:ac:48:a8:fd:61:4e:95:5d:4e:7a:82:0c:62:86:6b:f3:df:
         8d:ca:b7:79:44:09:67:6f:da:82:c0:73:90:fe:3a:36:ae:45:
         f3:3a:35:b3:72:aa:2a:e5:73:08:0b:b7:96:7b:ae:bc:13:4b:
         67:6d:85:0b:4b:b7:59:ab:51:c4:2a:f0:f8:04:43:ca:2c:72:
         14:6d:2a:17:3b:52:4d:c5:b7:50:05:37:15:4b:c7:ac:47:c4:
         60:e7:8b:a0:24:46:94:de:9e:7d:03:20:3d:48:c9:75:4f:84:
         5e:e2:0a:a1:b5:9e:27:a5:38:5e:90:a3:36:bf:15:aa:85:5b:
         3f:a7:3e:77:10:f9:32:4d:b6:f3:8d:1f:e4:0d:14:30:35:bc:
         b6:7b:5e:46:16:2c:06:4b:af:e3:f1:f8:2c:17:b0:7c:38:f4:
         7a:4b:c3:e3:a3:7e:1f:79:9b:ad:f8:64:0c:d0:30:a5:39:55:
         71:9f:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:41 2025 by rpki-client