Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa
File:                     401073da-de78-3d31-84e4-3349facc1d23.roa (raw, json)
Hash identifier:          jo/JwZ6Fpbx8RyJWFMChA8fsB7/k/daZgYWMaW3Laxc=
Subject key identifier:   87:B1:9A:E9:D5:10:32:54:FE:B4:10:1C:E5:9B:B8:3C:A8:A8:9E:D1
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765C52EAA6D4408BBF2B6A0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     203724
IP address blocks:        161.69.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c5:2e:aa:6d:44:08:bb:f2:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=faf628b5-ffbc-4e9f-a44c-742245a65d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a0:b1:de:85:c5:48:ce:eb:29:70:4e:9d:14:
                    bb:3e:4b:97:ac:55:0d:28:8d:8d:11:ea:52:80:3a:
                    90:17:ef:ec:83:cb:3d:21:94:c7:37:81:87:15:73:
                    91:2d:10:e9:9d:e6:3c:1c:e8:46:53:a5:4d:50:ef:
                    92:d8:a3:f4:c1:5e:45:4a:6b:0c:eb:d0:37:3b:c2:
                    d5:17:50:b7:77:c9:a8:c2:18:4b:22:7a:84:7d:35:
                    81:ce:98:e7:0b:5f:8b:e4:fd:70:7e:b6:98:fe:a9:
                    82:5c:12:01:52:3c:16:67:2a:e4:ad:37:51:21:e2:
                    d5:fd:9b:d4:08:36:6e:90:90:93:30:68:38:9c:b1:
                    0e:36:58:77:5a:78:ef:33:10:98:98:4b:4e:bd:0e:
                    96:77:2c:82:46:64:e6:81:fc:8f:3f:a7:d6:72:8b:
                    a7:dc:35:c5:03:fb:1d:b5:a6:33:2e:10:04:0f:d5:
                    dd:54:cb:77:a4:76:6f:4f:c9:56:ad:3d:29:f9:50:
                    c0:fd:52:6c:c3:f3:8d:ff:4b:bc:d9:17:ca:d6:44:
                    ce:d1:d1:61:93:e1:55:e4:92:88:e3:35:4f:47:f2:
                    40:81:67:3d:96:43:82:39:99:80:39:09:83:53:bf:
                    ee:27:24:33:0e:b7:31:d4:cf:70:9f:f8:42:5f:f0:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B1:9A:E9:D5:10:32:54:FE:B4:10:1C:E5:9B:B8:3C:A8:A8:9E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:eb:d1:c6:37:57:80:f5:7a:be:16:fe:8a:a1:4c:73:72:c7:
         e6:34:74:1f:fd:8d:1e:9f:54:85:38:4f:b7:78:25:23:5d:9c:
         07:ee:5b:5b:0a:2c:8a:e1:f5:d7:da:9f:aa:24:0f:3e:e8:2f:
         6b:19:d6:34:2b:e2:31:33:38:c7:bd:f6:bf:c6:4f:4b:f1:92:
         45:94:ee:33:2c:40:80:39:1f:aa:54:50:58:51:7e:35:b0:57:
         19:be:5f:d8:d6:24:19:1d:2f:d9:cb:b0:45:07:09:c9:57:6f:
         20:ff:35:67:43:1b:86:74:d4:e7:9b:3d:9c:cb:03:86:f9:ae:
         d9:5a:c8:5a:4e:a6:dd:0b:67:fc:71:68:94:4d:90:bb:1e:dc:
         f1:2c:6e:df:b9:8a:35:f8:95:ac:73:e6:03:b3:ea:e1:73:57:
         f7:88:bd:14:b6:80:5d:39:54:63:39:aa:e4:c4:40:d7:ff:63:
         ab:f0:48:63:44:f5:84:d2:09:aa:3f:24:48:11:d7:f7:ef:28:
         4f:a5:76:a1:13:23:c0:86:53:4d:44:cc:c7:a8:6a:22:a4:9a:
         71:40:f9:e9:6b:df:ae:17:26:77:ea:3c:66:a8:04:8b:ac:be:
         14:ce:ec:23:f1:27:7c:81:25:49:a7:83:d1:f2:02:e8:24:62:
         91:79:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:04:12 2025 by rpki-client