Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68320441-0273-362f-8fc5-d90fe6eba8ac.roa
File:                     68320441-0273-362f-8fc5-d90fe6eba8ac.roa (raw, json)
Hash identifier:          DFS+fUFr24xJjd7/mR2a4/xqiEnZLNio1bLqaR9MwRg=
Subject key identifier:   B5:19:8B:39:6B:5F:77:DC:25:D1:DB:DF:F0:37:B7:24:69:DE:B5:A9
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B1806D6BDA4038DE05DB45040
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68320441-0273-362f-8fc5-d90fe6eba8ac.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        161.69.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d6:bd:a4:03:8d:e0:5d:b4:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=8d7a7844-727f-42dd-bfdb-4076eb861b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:bf:ed:e3:54:13:67:71:44:c8:9c:14:6c:
                    bc:b9:ac:3f:d7:87:2a:ba:e3:40:9e:a2:cb:57:7c:
                    61:9c:95:c9:01:7e:97:65:66:46:78:b7:73:b3:37:
                    02:47:f1:05:b1:e7:bb:1a:b8:a8:01:e8:08:fd:f6:
                    c8:65:86:0c:28:dc:4a:85:e7:d7:0a:a2:c2:03:b9:
                    87:de:8d:e1:9e:13:e3:44:de:7c:26:ba:fe:d6:2d:
                    f7:0f:95:5f:95:ae:38:e6:66:5d:97:32:43:fa:ac:
                    cc:65:1c:2c:a3:1e:fb:a5:cb:25:ba:a1:5f:62:6e:
                    41:c4:ae:f4:98:43:ca:c2:51:47:c6:7d:3e:59:c7:
                    a5:cc:6e:5a:5f:da:f5:cc:01:cb:0f:1d:be:c2:d6:
                    14:cf:77:4e:db:0f:24:eb:4e:64:6a:fd:f7:7a:04:
                    8f:a4:23:29:19:c3:1b:67:0b:47:9d:16:8a:fe:39:
                    d8:9c:66:81:16:e2:48:22:ed:b3:02:84:be:7e:2b:
                    3c:66:80:d9:bd:21:f0:d0:c5:f6:f3:ea:aa:d0:0f:
                    2d:fe:89:f4:25:4b:66:84:1a:12:96:ed:fc:99:94:
                    2d:52:4d:cd:d0:e9:0c:0d:28:9f:b4:26:2c:a3:7a:
                    c3:34:43:62:60:8e:38:78:7e:14:3e:a7:f4:4a:93:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:8B:39:6B:5F:77:DC:25:D1:DB:DF:F0:37:B7:24:69:DE:B5:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68320441-0273-362f-8fc5-d90fe6eba8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:31:cf:fb:a1:e4:92:6a:6a:39:1a:02:96:f1:c9:a1:aa:cb:
         b0:bc:90:2e:17:12:34:bd:c4:de:b0:36:c4:87:15:95:9c:c8:
         95:5a:08:46:55:d2:27:da:83:f0:4a:ad:df:30:ba:0a:75:f4:
         fe:63:6b:c3:63:ae:4d:38:90:31:f0:0a:7e:0b:5b:be:37:40:
         9e:77:8f:56:db:75:dd:d4:62:de:9b:e7:ca:91:fa:c0:bb:ae:
         13:b2:6d:10:03:33:96:ef:2b:85:9c:dd:eb:f0:cc:0d:45:cf:
         58:c2:af:a4:bd:63:a7:ea:89:15:56:9b:06:61:b4:85:c7:e9:
         74:5e:4f:8b:36:59:c2:1a:8d:a5:fd:8f:03:2e:56:fd:e4:7f:
         ae:70:bf:4d:1f:60:e4:41:bc:2a:ec:6f:58:d1:14:27:a4:35:
         28:3a:06:d2:2e:8d:2e:5d:9c:61:8d:f2:9c:a1:56:40:92:39:
         fa:ba:c3:d7:41:b9:aa:bd:60:64:9c:f3:18:7a:be:ec:fa:46:
         f8:5c:9b:ad:d8:be:3f:a2:f8:5f:7a:77:3c:e5:6a:7c:56:1c:
         ab:44:fa:ec:2f:9f:60:fd:0c:a9:42:93:56:13:e4:9c:41:0a:
         16:32:c1:e9:a8:00:e9:ed:c9:c6:d3:92:f4:62:78:d7:e8:d5:
         71:47:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:22 2025 by rpki-client