Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa
File:                     15d788a4-7d75-34f3-8f99-0b197da91520.roa (raw, json)
Hash identifier:          dpEFvZMB2Fgjimo97s/DZR4JbP3hK0zMzHuvk/D4pG4=
Subject key identifier:   BC:6D:06:93:CE:61:C2:97:71:E0:6C:C2:4F:27:AC:26:1E:1B:63:9A
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765CB1E315F631648A5B700
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     203724
IP address blocks:        161.69.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cb:1e:31:5f:63:16:48:a5:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=0a668a17-a853-4faf-93a6-553725d484fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:50:9f:91:0e:97:63:66:26:a9:55:8b:b1:
                    c8:b1:d0:00:63:aa:96:54:cd:1b:80:de:32:af:64:
                    0a:57:70:b4:ef:34:bd:f1:5c:0e:b8:5f:1d:3f:83:
                    3b:07:84:78:62:58:ff:7c:a6:4e:9a:59:14:37:c0:
                    36:0a:59:d1:60:27:35:0b:97:08:2e:53:68:f3:65:
                    2a:85:da:46:31:b7:b0:24:b4:82:be:eb:59:95:71:
                    ed:32:f0:04:1a:0c:39:99:f6:de:9c:ea:07:0e:44:
                    cd:26:ac:09:93:dc:7a:a7:46:c7:22:e7:e4:3d:b1:
                    ce:e4:4b:0c:7a:27:5d:b4:1d:4f:5c:ca:ac:cb:57:
                    52:4e:e6:18:e9:f9:a7:c6:4b:19:a2:60:c2:20:69:
                    4f:0c:7e:b4:d6:a2:3c:c1:8b:0c:80:63:5d:3a:2c:
                    bc:ef:25:4e:bc:70:df:72:94:1e:86:53:ff:7d:1a:
                    e6:08:63:fc:03:fb:95:33:95:31:0f:a1:fd:8d:57:
                    62:4d:6d:5b:a9:21:da:98:74:d6:78:49:fc:c9:b6:
                    6c:05:4e:a7:c3:b3:6d:c7:c1:d5:a3:30:ec:27:9e:
                    da:31:30:c8:6c:1c:77:ef:ee:1a:f8:ca:a3:b6:b7:
                    18:11:60:41:af:cd:f7:19:01:62:81:88:b3:5a:03:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6D:06:93:CE:61:C2:97:71:E0:6C:C2:4F:27:AC:26:1E:1B:63:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5c:3d:ee:93:90:94:66:6b:7e:6e:a3:2c:32:fd:c5:00:0d:
         30:6d:c8:f2:14:fd:db:88:5c:66:00:d0:5b:5b:bd:fa:a6:70:
         03:5f:b8:de:07:0e:87:94:a8:00:e7:45:b5:7f:33:cc:de:a4:
         f2:6c:89:1d:70:2c:fe:fe:34:45:97:78:82:2f:ea:bb:dc:15:
         12:ef:ea:d6:6f:5c:68:83:77:ba:90:47:85:a6:b2:54:a5:1f:
         af:c9:30:08:91:07:9c:c5:0d:fd:b1:a9:02:6d:32:e2:42:d2:
         1e:0a:d7:ef:c6:7a:c1:c7:da:3c:55:fd:f3:87:0c:50:49:2c:
         b8:d3:81:07:75:09:76:e8:dc:6b:64:a1:80:39:8c:b0:24:17:
         11:e9:71:c9:d0:c0:a7:89:e3:22:72:b5:63:09:f3:be:19:a1:
         a3:37:ce:27:5c:2b:24:84:8e:b8:5f:d1:be:16:cb:8a:d0:8d:
         e7:83:d6:7c:3e:16:9f:f6:7e:94:9c:3d:41:eb:da:8f:f1:99:
         7f:a3:25:a1:08:2c:5a:7a:52:85:48:16:a2:94:c6:dc:b9:d5:
         b6:3b:dc:39:58:a5:e7:6b:c7:ae:67:c1:33:4e:53:60:c9:f7:
         31:43:81:5a:a6:62:1a:cc:e8:88:34:54:6f:bf:89:42:28:d1:
         ca:1a:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:35:56 2025 by rpki-client