Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3381e410-5050-3295-b0fa-e4f36ad0b8ba.roa
File:                     3381e410-5050-3295-b0fa-e4f36ad0b8ba.roa (raw, json)
Hash identifier:          4z+DHyG+1BYCXjsEeaS9ekc5Lo5zpxbCUspfSqGK2XQ=
Subject key identifier:   6F:EE:EA:16:84:A1:E0:B5:13:65:05:1B:F5:C1:CA:0A:39:C7:86:CA
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765C782FA2D67C77A555B40
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3381e410-5050-3295-b0fa-e4f36ad0b8ba.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        161.69.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c7:82:fa:2d:67:c7:7a:55:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=dba7a776-faff-4baa-b74a-d8ebb8611917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:82:c7:39:86:e2:3e:4b:87:70:2c:27:34:
                    6f:ce:e2:34:14:d8:ed:10:5c:12:0a:25:09:5c:6d:
                    e5:c0:3e:5e:dc:76:ea:23:87:b6:0c:7b:c5:59:6b:
                    82:1c:8a:ff:4e:c7:8f:57:31:88:89:fc:20:1e:d9:
                    62:5c:82:0f:1b:96:89:98:ce:71:95:c2:7c:6d:cd:
                    da:2a:3c:7f:17:a6:2d:0a:b7:a7:31:c1:a7:58:b7:
                    a0:59:67:77:b7:3c:c0:bd:e2:0b:07:22:cf:bf:ee:
                    33:c8:7d:1a:89:3c:80:62:6a:83:db:03:c3:6a:22:
                    e5:c5:5e:69:08:b0:7e:ca:00:46:6a:88:85:67:43:
                    02:3f:ee:b7:16:98:32:49:7b:fb:a1:15:1e:84:3b:
                    86:18:64:c5:1e:dc:87:e6:0a:fd:ff:c4:50:8c:72:
                    f7:ad:3d:7d:5f:89:83:59:b4:60:e4:b3:dc:70:c2:
                    3d:e7:a8:5f:22:67:aa:7c:f4:02:65:7d:f8:7a:ea:
                    6c:f3:cc:e4:13:65:0a:69:45:10:53:89:42:5a:80:
                    48:95:ff:a4:2a:94:61:e2:a9:da:7a:6b:d1:09:a0:
                    57:61:c4:85:d2:29:b8:7d:95:f0:c2:17:78:06:6e:
                    a1:96:f9:c3:15:1d:de:10:cf:b0:6a:85:ea:71:7c:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EE:EA:16:84:A1:E0:B5:13:65:05:1B:F5:C1:CA:0A:39:C7:86:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3381e410-5050-3295-b0fa-e4f36ad0b8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:53:39:5f:95:21:b4:ea:4d:6c:6d:2e:ed:e1:c5:4f:d8:
         0c:8c:29:f0:6f:e1:0f:de:70:af:34:eb:80:9e:20:f4:d3:f5:
         85:bf:9f:6b:37:b1:a6:58:79:91:7e:48:44:4a:8e:0d:03:8b:
         de:65:80:74:f5:d1:f5:e4:48:80:64:1d:f7:eb:ae:9c:90:14:
         93:7d:7d:91:12:6f:08:3e:22:2d:ed:30:f9:e3:d8:c2:5c:90:
         2b:4b:d1:cb:d6:c7:a2:20:1f:5d:72:79:1e:64:39:47:4f:9f:
         86:f8:5a:ff:15:08:78:47:37:d3:55:30:24:fa:ae:61:a1:b1:
         7b:3a:24:d1:b3:40:08:0e:92:bf:a2:cc:f1:59:98:5b:56:5b:
         0b:ad:47:f1:d9:8d:77:7a:1d:6d:cc:55:31:3d:54:42:40:2e:
         a1:92:7e:f9:06:b0:58:cd:2b:a2:0e:aa:db:03:c3:46:9b:9d:
         f5:57:2e:79:71:99:ca:08:da:f6:8d:03:28:a7:e8:f7:73:b7:
         dc:e1:5b:30:c3:df:b9:e0:c7:9c:e1:9d:73:1d:28:68:09:01:
         1c:12:ca:8a:b2:29:87:c9:9c:6e:53:00:25:ff:b6:45:37:6f:
         42:f9:f7:0f:f7:48:ac:69:de:73:09:bd:20:ff:09:81:16:ef:
         eb:9d:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:57:18 2025 by rpki-client