Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa
File:                     72bb6754-f471-332a-a025-ab3fa6d56c90.roa (raw, json)
Hash identifier:          +D16wZUGrJSSdF5kwJ5ODl0fPgFvkxVS5TBAFmI3CDs=
Subject key identifier:   04:D6:7F:03:80:4B:14:19:F8:D1:6F:6A:3A:B8:77:18:16:3E:DB:28
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B80B7515A96BB5B6515651E10
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     203724
IP address blocks:        161.69.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:51:5a:96:bb:5b:65:15:65:1e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=f7e3ec63-5b99-44d0-b765-4897786b2c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:58:ff:9d:ae:23:0c:01:d0:3c:4f:2a:b9:
                    fb:08:ac:ba:0c:1d:90:fb:1b:95:3e:7b:aa:96:61:
                    44:94:3f:27:2b:a9:b1:3e:51:90:de:07:c6:0b:42:
                    1b:9a:ff:00:16:ac:28:6e:8a:f6:f8:53:55:df:43:
                    ce:20:d7:49:d3:03:a8:41:79:1f:fe:27:96:0b:0e:
                    a6:4c:21:7b:47:68:20:07:41:d5:7a:2a:95:08:44:
                    24:37:49:e9:76:21:31:66:20:0d:ca:d8:64:5c:6c:
                    67:8f:80:47:70:bc:4c:90:5d:0c:fa:16:fd:26:50:
                    6f:f7:59:99:65:e4:bf:07:3c:f2:ac:86:2e:26:2a:
                    3d:9b:69:82:ea:03:3d:6f:97:85:22:b6:60:28:76:
                    ec:00:d5:b1:6f:0c:14:1a:6f:70:9e:bf:32:a1:21:
                    10:7e:dc:06:22:4c:db:0a:e9:26:22:63:7f:59:ae:
                    8e:e0:54:01:6a:d8:bd:fd:e7:2f:73:05:a5:46:80:
                    fa:4a:02:31:0c:b5:18:7d:6f:32:36:21:44:f4:7d:
                    d4:3e:e5:d2:06:25:26:e1:e0:94:6c:79:0c:cc:3f:
                    36:15:43:46:00:8b:eb:77:f7:1d:a8:16:c5:bc:25:
                    57:54:31:f0:43:f5:eb:87:49:b4:9c:67:1d:ac:14:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D6:7F:03:80:4B:14:19:F8:D1:6F:6A:3A:B8:77:18:16:3E:DB:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bd:fe:09:a5:f9:2d:1b:04:e0:be:b0:74:a4:77:06:fc:fe:
         8b:a7:00:ea:eb:ea:47:d3:d1:75:3f:49:16:c5:17:6c:08:c1:
         2d:eb:29:a9:04:46:32:06:c4:54:f9:06:da:fd:f1:40:40:fa:
         5a:70:49:8d:80:5f:ac:0a:09:9a:b9:5e:61:ff:aa:fb:ab:31:
         eb:46:21:64:a7:e5:d9:c4:00:39:81:54:6f:d9:36:e8:7f:44:
         e8:77:95:78:74:a8:23:71:51:58:4d:4a:ad:14:8e:58:1e:72:
         f0:71:d7:25:24:c2:47:0d:d7:54:ca:cd:b8:a0:4c:39:23:d8:
         38:25:2b:c0:a9:1a:11:60:a3:18:65:17:b8:4b:60:5b:65:fb:
         51:7e:85:64:bb:b7:e2:af:b0:f5:e1:23:19:1a:ed:8a:f1:04:
         fb:d2:59:0b:03:4a:f4:1f:21:48:80:5f:ab:4d:76:ed:83:8c:
         d1:98:39:d5:e0:05:9a:47:20:03:7f:88:20:f9:cc:df:fd:b2:
         01:3e:43:0e:e6:99:87:34:2e:98:be:37:a9:a7:3d:37:93:b7:
         f4:b0:ee:01:46:d4:de:c2:ee:f2:d4:b8:86:c6:30:e9:f9:cb:
         4f:a7:76:5e:36:dc:ea:0c:d4:0d:a1:12:2f:fa:ca:19:4e:24:
         ef:c4:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:40 2025 by rpki-client