Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4c0346e5-8fd4-33b2-b08d-b1037ef8b8a5.roa
File:                     4c0346e5-8fd4-33b2-b08d-b1037ef8b8a5.roa (raw, json)
Hash identifier:          JvxSLqtr6Nb+tX24GAO1aHxj91oOOdXxkX7hzxUhJhI=
Subject key identifier:   5C:30:8B:CA:3B:C2:74:0C:87:E1:26:BE:57:99:2B:F9:B1:61:C7:98
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765C4E46D442C85F69F9100
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4c0346e5-8fd4-33b2-b08d-b1037ef8b8a5.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     203724
IP address blocks:        161.69.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c4:e4:6d:44:2c:85:f6:9f:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=a3adfd20-922a-43ac-a0c9-06ee57df61dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:a2:1b:4d:13:63:fa:68:a5:d5:9c:be:67:
                    52:29:5d:ef:74:44:91:88:37:d6:47:a7:97:92:c1:
                    ba:11:0c:9a:4f:6c:7b:cb:92:d8:ca:c1:20:9d:02:
                    b5:fd:e1:a9:a6:db:9d:c2:13:90:0c:f5:03:13:3c:
                    bb:f3:00:82:dd:5a:bc:20:86:bb:d9:83:47:99:9b:
                    94:11:29:52:b3:b8:be:bd:6a:64:81:fc:ac:fc:30:
                    3f:46:9e:a6:9a:81:c8:5b:d4:8f:21:3c:a5:a9:50:
                    69:ba:db:55:3d:ed:e5:71:bd:37:94:2e:87:22:2c:
                    72:eb:ba:ce:fd:6b:d9:72:55:d8:0a:cc:56:78:11:
                    e6:57:bb:b8:74:39:2c:e4:4f:30:74:2d:f3:32:aa:
                    74:01:0f:f2:ba:e2:d4:e4:c2:12:48:3d:9c:e7:ac:
                    d7:a6:4b:3f:c4:77:14:0f:4b:56:e2:d6:61:a6:96:
                    c4:90:45:33:1b:15:1f:d8:5b:fc:a2:c3:2a:9d:5f:
                    86:ea:87:60:c2:12:c8:9a:da:e4:f4:31:17:df:33:
                    38:1f:cd:3b:3f:a1:07:9f:2d:f0:78:9a:a2:f0:07:
                    a5:71:5a:d3:5c:e1:dd:61:86:80:bb:ab:48:14:70:
                    75:34:48:8f:e8:35:ed:f6:94:8c:cf:8f:3c:d5:50:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:8B:CA:3B:C2:74:0C:87:E1:26:BE:57:99:2B:F9:B1:61:C7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4c0346e5-8fd4-33b2-b08d-b1037ef8b8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:99:d7:b5:c0:05:e5:c1:cb:c7:46:b5:2e:a0:4e:93:5e:
         85:ae:7d:c3:2b:03:57:7f:45:8f:7b:16:c4:93:36:2f:5d:87:
         c9:7a:e1:6a:ad:c4:ae:55:d5:d0:f9:7e:e6:49:ea:fd:7a:e2:
         36:27:36:25:6e:d3:4c:45:5e:ff:52:34:e9:55:3f:5a:dd:58:
         ae:3a:72:46:08:ad:42:88:7f:fa:9f:23:5b:9f:5f:68:3b:40:
         c2:08:c4:1a:d0:af:51:8b:28:53:04:b6:8c:9c:f8:3e:92:03:
         8f:16:d5:42:01:02:c1:27:4f:1f:22:41:b1:b1:f1:d3:b7:6f:
         d5:57:49:78:6c:14:58:bd:80:a9:6c:db:fd:76:35:b5:47:8e:
         db:b7:93:77:63:c2:46:2d:13:93:40:11:da:f6:26:59:54:5e:
         1b:06:49:3e:3d:54:01:43:33:83:66:56:f0:23:ce:a2:d9:15:
         f1:99:ef:68:bf:38:6e:97:7c:47:a8:3c:ed:73:61:45:1d:41:
         94:1c:da:8f:17:98:9b:57:4a:ed:30:ca:e5:8f:95:e1:24:87:
         06:13:60:03:97:17:06:e3:75:05:d6:a8:56:e0:ce:67:b1:3b:
         93:f7:25:2e:fd:16:eb:0c:92:e5:ab:b2:e4:20:74:66:5e:75:
         26:fe:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:28:40 2025 by rpki-client