Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b113abf5-a91e-3133-91db-cd50df2fd750.roa
File:                     b113abf5-a91e-3133-91db-cd50df2fd750.roa (raw, json)
Hash identifier:          RYWjPIEuhfV84+oc82Mwnf/pBLZgC7gJNQrcIK165IU=
Subject key identifier:   A4:BF:A2:43:4B:E5:B2:CA:AA:70:87:1D:27:88:88:1C:D2:BA:A5:77
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765C384113B0923AAE05900
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b113abf5-a91e-3133-91db-cd50df2fd750.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        161.69.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c3:84:11:3b:09:23:aa:e0:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=bb6d36bc-e014-4413-8524-4ba355ffdd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:fc:00:5d:17:eb:eb:72:67:a8:e1:da:da:
                    42:fb:42:cb:c7:2e:e2:e1:a1:80:eb:c6:d8:e6:56:
                    b5:ac:3b:05:f2:36:76:9e:4e:28:9c:bd:c9:a1:69:
                    aa:1d:88:56:fc:aa:89:a9:b1:87:23:52:fb:25:6b:
                    8b:02:27:73:15:95:4a:2d:2e:a1:52:6a:50:92:2c:
                    4c:00:ce:19:07:56:fc:12:e2:35:a4:91:f1:c6:6f:
                    af:19:fb:74:e6:70:e9:03:cc:4e:6b:d6:08:5c:c6:
                    19:06:74:0f:e5:cd:8f:a4:dc:01:61:24:f3:32:da:
                    03:63:b7:5b:f2:b7:5f:79:62:43:93:27:ad:af:71:
                    df:e6:17:2e:28:d0:6e:2c:e8:68:40:93:82:c9:07:
                    1a:df:80:fd:a1:e0:c0:27:40:7d:5a:4f:7d:c5:e4:
                    f1:6a:e1:88:46:c6:c3:4c:c4:56:b0:61:17:1d:a1:
                    08:2f:9a:30:75:a7:23:d0:55:32:03:cc:c9:5c:c7:
                    3c:e7:c8:2e:9a:a4:3f:6e:be:39:8f:c1:d0:51:2a:
                    60:43:6b:b1:6b:c5:ac:bf:88:2c:7a:c8:59:5e:8a:
                    3e:30:12:7b:19:34:84:8a:09:a5:7c:9d:73:c3:1c:
                    01:3b:a0:be:fc:f6:52:0d:a9:67:23:72:59:34:84:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BF:A2:43:4B:E5:B2:CA:AA:70:87:1D:27:88:88:1C:D2:BA:A5:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b113abf5-a91e-3133-91db-cd50df2fd750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:2f:ff:31:77:5c:64:d7:3c:8b:db:24:b1:df:59:20:c0:e4:
         1f:22:f7:45:ff:c6:bf:63:f5:b8:a2:1b:14:40:09:e6:2f:06:
         5a:0e:4e:cf:f8:19:cc:46:90:99:49:ba:59:56:ae:72:96:fa:
         57:4f:85:fc:9a:8c:22:f9:a4:ec:94:ec:93:44:2c:0c:fc:60:
         9f:c2:b5:f4:20:d6:6a:bc:57:61:7e:d1:f3:0c:1f:8b:6d:59:
         b0:fd:d8:4e:bf:d6:f9:a4:5f:04:bf:c6:a2:b2:b7:a3:02:1e:
         27:76:01:db:96:2a:cf:06:28:ee:e8:f9:7a:58:fd:4d:ea:94:
         34:45:76:33:ec:3e:4d:b4:89:4f:3f:5b:2a:6b:b9:54:fb:6c:
         fa:ea:6e:d0:ea:24:a7:42:8d:4d:92:f4:e4:b3:24:99:5a:57:
         32:5d:04:07:63:55:e4:50:50:c2:0b:a8:52:35:71:c9:35:4c:
         a5:44:f6:97:af:87:65:e0:b4:47:52:23:5b:e8:2d:90:2d:0c:
         99:71:89:5f:3d:c3:ee:c5:ad:ac:89:8c:f6:9a:e6:72:e8:ab:
         9b:37:14:64:86:81:bb:5a:90:3a:87:74:ae:4f:b4:b5:b7:f3:
         2b:8c:23:6d:95:5f:8b:25:1e:82:b6:4a:1f:f3:d8:62:4e:c8:
         6b:6e:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:42:28 2025 by rpki-client