Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa
File:                     67d064b2-9899-36ce-80d6-ef6fd43df579.roa (raw, json)
Hash identifier:          zszb49r/+5YhkFYn/d9rIvSaz1bSttviHlpCsTGmGpg=
Subject key identifier:   A8:E1:4F:DA:E3:91:DC:80:AB:26:AE:F6:02:8A:62:6D:EA:D0:F5:F2
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B382190E8207CB63A9421C090
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:90:e8:20:7c:b6:3a:94:21:c0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=b1ca8e39-f364-4749-8db4-764ae101b1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:f4:f8:b2:f1:58:c2:b4:e2:9a:f6:c1:33:
                    09:d9:9f:17:e0:8c:1e:6a:d4:84:8a:9b:b2:f6:7d:
                    b6:b8:07:cc:9e:d7:ff:cd:86:37:5d:b2:d0:60:fa:
                    42:46:62:2a:38:db:6d:e8:7d:b6:80:dc:2b:c8:12:
                    e9:37:37:e6:9b:bc:de:97:ec:8a:20:02:ca:22:77:
                    11:0d:d5:e5:26:3a:df:b0:38:1b:d5:77:8c:cf:79:
                    b9:cd:be:7e:93:2c:e7:34:11:75:ea:4d:ce:1c:e3:
                    81:e1:18:38:43:35:ae:77:b8:e3:d5:24:cf:f0:ad:
                    0e:06:da:d9:9c:04:d4:0a:0d:73:f9:d9:70:3a:d6:
                    f1:d6:b4:7a:a6:7b:b0:1e:61:2d:54:c9:5f:df:e8:
                    35:01:fb:66:78:35:6c:dd:7b:3a:37:22:6e:dd:b0:
                    42:bf:7e:eb:d6:8d:c3:da:2c:a0:7b:ef:08:47:51:
                    14:de:b2:55:52:d8:c3:d3:28:4c:ce:b8:77:c8:bf:
                    0a:2d:53:07:2b:93:af:50:3f:bd:e0:55:74:69:64:
                    98:61:b8:76:35:75:cb:06:7f:2a:e2:71:3d:ca:67:
                    87:59:ec:9e:7a:c0:81:f7:32:62:9b:0e:79:d9:3f:
                    81:4b:56:4d:7f:f5:56:26:de:a3:7e:9a:2c:70:c0:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E1:4F:DA:E3:91:DC:80:AB:26:AE:F6:02:8A:62:6D:EA:D0:F5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b8:09:7c:58:6d:4d:d9:be:d2:09:94:2f:6a:06:a4:af:be:
         28:87:40:92:29:75:72:31:80:b1:2f:e2:b4:5b:21:a0:d2:7a:
         5b:ed:1d:16:32:49:03:0e:5d:49:dc:b0:3c:48:cd:46:32:ee:
         c5:22:29:8a:dd:26:5a:8f:f1:86:ec:76:22:35:b0:ef:3a:38:
         13:2e:44:c6:52:c0:d8:d8:7d:80:c7:a5:bc:9d:5d:a9:88:ae:
         b2:61:c9:f4:16:d9:30:d3:89:80:0c:4b:2c:ab:14:66:6f:c6:
         4a:00:0c:ee:57:8c:59:21:1f:0d:ca:be:58:07:fa:d4:65:ac:
         6e:6e:e7:7d:03:89:b4:75:4a:59:e3:78:d7:36:e2:9f:3a:b0:
         8b:9e:13:4f:e9:11:39:04:db:d4:7e:52:5f:e7:3e:81:b2:a5:
         77:1c:dc:f1:6f:50:1a:fc:18:6d:82:75:2a:40:c8:41:32:a5:
         a6:85:6d:5b:f1:5b:20:90:b0:eb:a2:bd:f4:63:95:0b:9a:2c:
         a7:1c:18:53:a8:91:85:be:79:54:7a:24:3d:2d:cf:49:a9:11:
         cd:3e:dc:c0:70:11:e3:eb:71:f2:ee:85:d0:49:ce:44:8d:7e:
         e9:00:fc:5c:57:8f:74:c0:b5:97:1d:39:c5:bb:75:54:96:01:
         48:07:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:32 2025 by rpki-client