Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/41518b64-6a9b-3ec3-9c91-ec6dc2885d43.roa
File:                     41518b64-6a9b-3ec3-9c91-ec6dc2885d43.roa (raw, json)
Hash identifier:          hZT0VvVClQpOVM8B+nhhpeTyGNw0KF9VkeF6XfbPY40=
Subject key identifier:   9C:BD:23:47:59:45:E5:91:18:39:CD:3B:E7:3D:99:13:6C:6A:2E:A1
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765CCBABFAA4669246E0180
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/41518b64-6a9b-3ec3-9c91-ec6dc2885d43.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     203724
IP address blocks:        161.69.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cc:ba:bf:aa:46:69:24:6e:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=7a39b1ec-0ea9-46bc-bed5-7ec6d9710be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:a5:35:fc:a3:a2:2a:d2:88:2d:39:cf:3d:
                    bc:8d:ed:f8:f9:bd:c3:7e:64:9f:1f:fc:5c:b1:2b:
                    2d:06:67:67:6c:68:ab:91:76:e1:be:cf:6c:b1:73:
                    71:c8:2d:b0:32:4f:ce:23:d8:78:97:ca:bc:2a:38:
                    ca:8f:46:64:23:e8:fb:25:64:ac:75:71:82:61:11:
                    9a:7a:a1:41:b2:ee:7e:2a:14:aa:90:cb:d5:99:1e:
                    58:b5:d3:49:2b:5e:2d:ed:c1:58:a3:2e:17:12:3e:
                    ed:76:fd:e4:9c:b7:ee:43:d0:25:cb:1f:dc:ed:64:
                    c6:0a:5a:b8:6c:73:a3:7e:68:61:c8:ff:38:0a:3a:
                    64:f9:19:65:1b:e8:19:c6:3a:c9:9f:8b:7b:73:82:
                    6a:9f:f2:eb:bd:fd:d2:c9:df:15:13:55:0e:5e:ff:
                    2c:e0:ee:f0:fc:4c:ae:0b:78:84:8e:48:81:72:c2:
                    65:14:55:56:6a:aa:95:45:3d:4e:70:78:83:69:4e:
                    c5:53:57:03:a1:ed:31:c1:53:5b:cc:34:5a:16:a4:
                    31:a2:e0:bd:02:82:05:cd:75:ea:14:07:83:6d:d0:
                    92:a4:d3:f5:8e:f3:9a:01:ea:1f:60:7a:40:c5:99:
                    92:50:2b:bc:77:45:6d:f5:c3:db:c7:4b:0b:ae:26:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BD:23:47:59:45:E5:91:18:39:CD:3B:E7:3D:99:13:6C:6A:2E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/41518b64-6a9b-3ec3-9c91-ec6dc2885d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:65:d9:29:bb:e4:48:10:db:16:5c:b4:95:4b:05:26:0f:9c:
         52:36:63:5b:20:81:6f:c2:43:dc:b5:c2:9c:86:23:88:4d:1a:
         ae:7e:fd:4d:42:c0:81:e7:f2:da:2d:79:13:80:fb:61:08:ff:
         a0:f9:24:cf:02:e4:85:fc:e2:9b:aa:fe:24:66:48:90:e5:2e:
         80:45:27:78:bc:30:02:0a:19:61:c7:53:1f:fd:25:4e:1d:6d:
         c2:ff:77:2a:cf:d3:63:ae:3d:50:28:aa:72:e1:1c:e9:a1:d3:
         35:3a:b8:47:dd:41:23:b7:75:06:95:08:56:92:27:86:bf:41:
         5a:2d:84:05:35:9c:ae:b6:26:6e:80:67:5b:63:1c:83:aa:c2:
         84:66:14:9c:59:28:0c:1b:1b:6f:38:2c:e3:5f:d1:7c:5a:2a:
         0b:be:2c:50:d1:11:e4:6c:a6:06:86:13:2d:70:db:0d:c7:6d:
         33:65:bb:d2:db:6e:cf:1f:7f:39:13:58:c3:13:39:91:23:21:
         49:65:0b:b8:54:9c:b8:3a:b0:12:84:c2:46:29:20:29:fa:95:
         33:03:28:22:10:82:93:da:2e:89:f4:1c:34:6a:0f:47:41:93:
         34:7a:f0:09:11:a1:3d:55:49:7c:87:82:d4:79:58:16:d2:6c:
         b8:de:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:30:26 2025 by rpki-client