Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6b63ba95-527a-315a-959b-351bdb8b6339.roa
File:                     6b63ba95-527a-315a-959b-351bdb8b6339.roa (raw, json)
Hash identifier:          pK0ITXaONKnj/PoP03BBSfEOZ4k4KWhQEmS9ZncZRyo=
Subject key identifier:   76:4F:01:B4:EF:09:87:72:D8:DF:EA:70:D6:BE:B5:53:1C:B7:25:25
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765C67731DDE62C01F5D000
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6b63ba95-527a-315a-959b-351bdb8b6339.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     203724
IP address blocks:        161.69.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c6:77:31:dd:e6:2c:01:f5:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=f5126480-af6b-4aea-a674-0276909d3ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:d0:d1:ae:88:a5:f2:e6:f9:02:58:1b:73:
                    6f:ee:ec:4d:c6:d1:f3:9e:ab:8a:5f:6c:53:ed:97:
                    ee:ad:9d:9c:ad:c0:52:1e:2f:5a:09:03:c6:30:7b:
                    6e:b9:8b:19:91:6e:ee:06:34:d3:cf:db:19:49:15:
                    fb:a4:d0:ab:59:9e:35:14:2c:2c:ae:59:81:37:5e:
                    23:e4:97:45:6c:ce:cf:ca:ed:2c:84:7d:58:6c:a2:
                    7b:67:87:1b:c3:ca:f1:e2:70:38:08:54:21:f4:47:
                    01:19:1d:25:37:a5:4a:98:07:48:78:8e:92:61:21:
                    4e:6f:be:f4:42:70:de:49:65:ae:e9:4a:5d:4b:57:
                    0e:bb:a0:b5:71:ec:fd:85:c7:b5:ee:92:ce:6c:01:
                    60:8a:16:eb:a7:ae:ee:a3:a9:3a:e0:dc:00:0a:a1:
                    b2:2b:76:b2:0a:44:ff:aa:eb:16:5e:fa:e5:b6:ca:
                    72:bc:55:38:30:fb:1f:5e:7e:b8:3a:34:4f:52:93:
                    10:bf:fd:ea:fb:62:1b:12:7f:a9:38:8d:c7:2b:3a:
                    7e:ed:44:75:02:b6:26:56:fd:84:1b:3d:84:71:d1:
                    36:31:4c:4a:fd:b5:ce:79:2f:6f:d3:c8:f1:4b:8c:
                    91:ba:01:b7:16:b3:7d:53:14:f8:34:d0:3c:4d:95:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4F:01:B4:EF:09:87:72:D8:DF:EA:70:D6:BE:B5:53:1C:B7:25:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6b63ba95-527a-315a-959b-351bdb8b6339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:fd:f5:90:99:16:e6:d3:2d:ba:42:48:51:a2:56:e8:f0:
         a2:16:67:55:81:22:9d:f7:ad:e4:33:48:94:12:e0:ce:b6:8b:
         a5:95:5e:f7:06:03:89:f1:5a:9e:5e:ca:fb:81:81:a8:21:7b:
         24:5f:1d:2c:cc:35:90:ac:fa:21:03:44:9f:ae:a7:bd:91:04:
         1f:86:c8:4b:69:20:7b:f3:5b:f7:f0:8e:ee:b4:05:7b:f8:c7:
         dd:35:41:be:c4:5e:26:cb:a7:82:d2:2d:12:f5:fc:91:f4:76:
         51:1c:29:e1:d9:2d:f7:e0:49:6e:81:68:6e:b2:a1:46:31:7e:
         ce:a0:c8:dc:28:bb:aa:ce:da:1a:9d:6f:3f:e2:4d:5e:81:c6:
         f6:86:1d:e4:7f:1e:dc:b9:42:f2:41:16:4f:cb:01:f0:f3:f4:
         8a:ff:1e:78:52:fe:55:db:62:c4:70:d0:b5:c2:78:8a:a1:a3:
         a0:e3:f3:bf:52:ea:31:46:5e:ae:03:74:aa:74:f7:c5:04:e1:
         f4:e1:43:8d:d7:0e:0d:e4:d8:6d:67:fb:b7:90:5b:c3:09:14:
         33:83:20:ba:11:0f:bd:42:09:68:5f:69:b1:a5:36:be:69:4b:
         64:73:f2:b1:f3:ff:c8:50:3f:83:19:ef:4a:bf:4f:f1:15:dc:
         70:67:f2:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcZ3Md3mLAH10AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk
ZjUxMjY0ODAtYWY2Yi00YWVhLWE2NzQtMDI3NjkwOWQzY2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZfQ0a6IpfLm+QJYG3Nv7uxNxtHznquKX2xT
7ZfurZ2crcBSHi9aCQPGMHtuuYsZkW7uBjTTz9sZSRX7pNCrWZ41FCwsrlmBN14j
5JdFbM7Pyu0shH1YbKJ7Z4cbw8rx4nA4CFQh9EcBGR0lN6VKmAdIeI6SYSFOb770
QnDeSWWu6UpdS1cOu6C1cez9hce17pLObAFgihbrp67uo6k64NwACqGyK3ayCkT/
qusWXvrltspyvFU4MPsfXn64OjRPUpMQv/3q+2IbEn+pOI3HKzp+7UR1ArYmVv2E
Gz2EcdE2MUxK/bXOeS9v08jxS4yRugG3FrN9UxT4NNA8TZWL9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZPAbTvCYdy2N/qcNa+tVMctyUlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNmI2M2JhOTUtNTI3YS0z
MTVhLTk1OWItMzUxYmRiOGI2MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+//fWQmRbm0y26QkhRolbo8KIWZ1WBIp33reQzSJQS4M62i6WVXvcG
A4nxWp5eyvuBgagheyRfHSzMNZCs+iEDRJ+up72RBB+GyEtpIHvzW/fwju60BXv4
x901Qb7EXibLp4LSLRL1/JH0dlEcKeHZLffgSW6BaG6yoUYxfs6gyNwou6rO2hqd
bz/iTV6BxvaGHeR/Hty5QvJBFk/LAfDz9Ir/HnhS/lXbYsRw0LXCeIqho6Dj879S
6jFGXq4DdKp098UE4fThQ43XDg3k2G1n+7eQW8MJFDODILoRD71CCWhfabGlNr5p
S2Rz8rHz/8hQP4MZ70q/T/EV3HBn8kg=
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:13:27 2025 by rpki-client