Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/386ae6d5-0cb1-3b1d-b422-3f9af0afb5d9.roa
File:                     386ae6d5-0cb1-3b1d-b422-3f9af0afb5d9.roa (raw, json)
Hash identifier:          UdROfvhNKANPN8BfXgcad3Vria1ncaqMNXBKtaNTn44=
Subject key identifier:   85:09:05:53:F0:B9:BD:D4:EF:48:AF:F7:C7:8C:42:0B:40:8B:14:40
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A3B7AFCC4F73ACB581FEEEC90
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/386ae6d5-0cb1-3b1d-b422-3f9af0afb5d9.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     31898
IP address blocks:        161.69.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fc:c4:f7:3a:cb:58:1f:ee:ec:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=c4429629-7826-43db-a4f9-fac027fb438c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:ae:0e:10:6e:27:49:a6:a1:1b:15:81:51:
                    97:53:4f:8e:02:7c:9e:9f:65:e7:83:fa:ec:d7:f5:
                    cd:49:50:0c:44:de:aa:81:49:4e:62:80:10:ab:d9:
                    69:9b:5d:41:50:28:b6:00:15:ed:28:c1:b9:c8:99:
                    a2:2a:30:9b:33:aa:fa:70:34:d2:f2:cd:2f:7f:78:
                    59:b9:ae:b5:8c:7d:a4:3c:bb:e6:81:5d:43:c9:c2:
                    42:60:e2:b0:77:f4:50:2f:fc:08:de:21:10:6b:6c:
                    fd:8a:8e:d4:0d:bc:be:6f:1a:e4:e9:83:84:d9:a9:
                    da:a1:0a:9e:01:52:48:32:b0:eb:6c:07:15:41:f4:
                    0a:11:6b:4d:0b:cd:e1:f9:f0:a1:14:25:ae:15:99:
                    eb:8b:84:cf:ed:39:01:ae:f8:96:dd:e2:0b:10:6e:
                    b4:10:be:82:f8:18:ce:30:97:c0:ad:33:15:7e:55:
                    a6:78:ee:ee:64:73:70:ae:f3:f5:5b:52:3f:3e:3b:
                    bf:fa:84:91:76:e0:e5:d9:aa:aa:e9:2b:e9:d8:33:
                    14:cb:ef:69:81:e2:f1:cc:ee:f3:1e:43:96:68:f2:
                    2b:9d:0e:15:bf:3a:c5:74:08:77:e5:e3:70:3a:e9:
                    60:6b:7b:cf:37:2c:4a:d0:e6:09:0e:41:e6:73:7f:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:09:05:53:F0:B9:BD:D4:EF:48:AF:F7:C7:8C:42:0B:40:8B:14:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/386ae6d5-0cb1-3b1d-b422-3f9af0afb5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:6b:73:31:30:cc:16:4a:58:79:a4:37:cc:ff:1c:99:ac:
         7c:4d:8e:02:e4:1a:4f:3f:10:82:aa:fb:49:9a:43:26:66:5d:
         bc:f9:7d:45:9f:bb:3c:75:cd:db:d0:d1:14:3c:36:6f:20:ed:
         48:40:95:bc:2d:0a:1d:2e:0d:7e:43:c7:f6:7d:d2:f9:ba:42:
         08:8a:49:9f:e8:d6:93:99:1b:98:49:a6:e5:1c:64:0f:50:3d:
         31:00:e2:4a:f8:a5:95:cc:89:e6:2e:13:de:75:2e:2d:54:b6:
         3d:23:b7:fa:6c:a1:50:e1:4e:1f:f9:25:66:3e:e1:bb:27:41:
         2f:78:cf:8a:b5:37:9e:7f:35:c6:e8:7b:cb:fd:6e:8d:7e:6e:
         d9:d1:e5:58:5a:89:37:8e:e2:bd:16:56:2d:4d:4d:2b:88:cf:
         83:76:4d:6f:71:d1:07:38:2a:7b:2f:d4:cd:26:d7:70:61:cc:
         41:cc:9b:05:d3:ff:90:36:34:26:dd:61:70:80:38:ba:9f:22:
         06:bd:40:77:04:05:32:f6:fd:d2:69:2b:de:dc:6e:f0:c8:34:
         2f:85:34:57:a0:37:3c:20:ad:84:8f:1c:ca:97:3f:4a:51:45:
         72:48:75:7f:f5:e5:f8:1a:27:8b:a8:e4:5f:37:1b:4c:6d:94:
         5e:b8:5f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:43:51 2025 by rpki-client