Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9c6000df-7276-377a-b84a-1bbca075bf9a.roa
File:                     9c6000df-7276-377a-b84a-1bbca075bf9a.roa (raw, json)
Hash identifier:          GknL6nfmffoF3Vep1t5UrBwHQlbrznrrm2lhChjtQ/A=
Subject key identifier:   7A:9A:3A:E1:27:84:A2:A2:5D:F5:7A:28:36:C7:5E:AC:C6:36:9E:A4
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858495C242B5FE7264FED8038F300
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9c6000df-7276-377a-b84a-1bbca075bf9a.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     31898
IP address blocks:        161.69.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:2b:5f:e7:26:4f:ed:80:38:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=c5cae396-8aa3-4bcb-8372-abd77cbae7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:80:ca:5d:b8:95:74:01:d6:79:83:0d:be:
                    ad:1c:ea:f7:7c:b7:43:a4:ad:9e:d4:32:cd:b4:91:
                    94:b3:1b:e2:e9:b1:f0:c5:8c:2e:00:89:6a:18:e5:
                    a9:e2:1b:85:ce:db:59:13:67:71:fe:04:82:1f:1a:
                    d9:1a:67:00:ce:c5:75:5a:ca:f1:f6:04:10:da:9b:
                    74:ef:40:b2:5f:70:5a:fd:46:02:c8:7b:f2:15:ca:
                    46:5f:e2:dd:0f:ee:d2:b3:31:39:20:82:5e:fe:ed:
                    85:10:13:96:5a:66:df:a1:78:0d:0f:91:81:d6:60:
                    6a:13:33:43:ca:61:35:7b:51:1f:24:d7:f3:21:c3:
                    df:71:84:c5:ee:76:70:59:d5:92:27:a5:93:7c:f3:
                    1c:af:14:a1:96:d1:79:91:b2:70:2e:2a:53:a8:aa:
                    ea:46:12:a8:55:b2:eb:36:8f:b3:90:d1:78:a4:6d:
                    c1:93:9e:ec:6e:c5:48:e0:31:cb:da:69:00:b9:d8:
                    4a:8f:49:fa:27:e1:11:c1:ae:1f:82:58:e8:79:14:
                    b5:cf:df:63:64:20:92:25:4c:63:24:33:51:a0:e0:
                    d4:09:fe:77:49:18:88:3b:ae:34:1e:de:76:3a:a2:
                    34:72:d6:16:67:54:2d:fa:3b:bc:ad:11:8c:d4:fa:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9A:3A:E1:27:84:A2:A2:5D:F5:7A:28:36:C7:5E:AC:C6:36:9E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9c6000df-7276-377a-b84a-1bbca075bf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:4a:3e:67:a6:84:29:70:49:96:db:8e:44:45:e4:4d:26:
         51:e3:74:7e:17:80:c4:94:cd:8e:58:e7:43:9f:65:42:25:0f:
         d4:e8:96:59:de:35:f9:00:aa:25:2b:a9:f3:99:db:81:4d:9c:
         86:31:e0:32:4c:e8:aa:25:54:a4:f7:2a:3e:62:d9:ea:8f:95:
         d0:8b:b1:94:43:43:8f:11:86:55:67:71:ec:65:2b:fb:e1:c5:
         46:22:d1:10:26:4d:a6:6e:a9:e8:f3:3f:cd:8b:30:3c:d5:27:
         58:38:68:1d:8d:69:f8:30:99:67:04:7e:92:69:45:ff:cc:0e:
         d0:5d:c9:85:3e:9a:43:c4:da:2d:0b:4a:72:d5:a8:e5:df:c0:
         7e:d2:ec:42:61:6b:fb:98:29:bc:80:fc:99:41:8a:c5:5c:cc:
         5e:92:59:da:d1:cc:68:02:5e:fa:c4:6d:28:c5:78:05:3e:4b:
         58:33:41:a1:f4:93:c0:8a:bb:91:1b:af:0a:b2:05:05:38:4a:
         d0:59:cb:49:ec:f3:c6:10:6b:e9:31:4c:f1:56:09:f2:b2:a1:
         c9:d0:5c:ac:cb:a8:a0:03:cf:4c:41:89:17:bf:3d:bb:9e:7e:
         56:ef:36:f5:ef:90:d4:98:42:48:58:20:3d:6e:a3:88:77:26:
         ca:eb:37:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJCtf5yZP7YA48wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
YzVjYWUzOTYtOGFhMy00YmNiLTgzNzItYWJkNzdjYmFlN2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb+Ayl24lXQB1nmDDb6tHOr3fLdDpK2e1DLN
tJGUsxvi6bHwxYwuAIlqGOWp4huFzttZE2dx/gSCHxrZGmcAzsV1Wsrx9gQQ2pt0
70CyX3Ba/UYCyHvyFcpGX+LdD+7SszE5IIJe/u2FEBOWWmbfoXgND5GB1mBqEzND
ymE1e1EfJNfzIcPfcYTF7nZwWdWSJ6WTfPMcrxShltF5kbJwLipTqKrqRhKoVbLr
No+zkNF4pG3Bk57sbsVI4DHL2mkAudhKj0n6J+ERwa4fgljoeRS1z99jZCCSJUxj
JDNRoODUCf53SRiIO640Ht52OqI0ctYWZ1Qt+ju8rRGM1PrlHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqaOuEnhKKiXfV6KDbHXqzGNp6kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvOWM2MDAwZGYtNzI3Ni0z
NzdhLWI4NGEtMWJiY2EwNzViZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAfSj5npoQpcEmW245EReRNJlHjdH4XgMSUzY5Y50OfZUIlD9Tollne
NfkAqiUrqfOZ24FNnIYx4DJM6KolVKT3Kj5i2eqPldCLsZRDQ48RhlVncexlK/vh
xUYi0RAmTaZuqejzP82LMDzVJ1g4aB2NafgwmWcEfpJpRf/MDtBdyYU+mkPE2i0L
SnLVqOXfwH7S7EJha/uYKbyA/JlBisVczF6SWdrRzGgCXvrEbSjFeAU+S1gzQaH0
k8CKu5EbrwqyBQU4StBZy0ns88YQa+kxTPFWCfKyocnQXKzLqKADz0xBiRe/Pbue
flbvNvXvkNSYQkhYID1uo4h3JsrrN8Y=
-----END CERTIFICATE-----
Generated at Mon May 5 07:09:51 2025 by rpki-client