Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c93a9bfe-081d-3edb-93f5-945fbeae9332.roa
File:                     c93a9bfe-081d-3edb-93f5-945fbeae9332.roa (raw, json)
Hash identifier:          1fydUBmqoFdx8y7CBYU2huZ0Pq84WKHOP4VTV8KeKUc=
Subject key identifier:   42:4F:22:8D:C7:DD:DE:F9:4D:85:DE:DC:27:E7:29:4F:0B:21:26:55
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A35E58A008AF1784200B3D580
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c93a9bfe-081d-3edb-93f5-945fbeae9332.roa
Signing time:             Mon 16 Jun 2025 13:01:03 +0000
ROA not before:           Mon 16 Jun 2025 13:01:03 +0000
ROA not after:            Sun 14 Sep 2025 13:01:03 +0000
asID:                     203724
IP address blocks:        161.69.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:e5:8a:00:8a:f1:78:42:00:b3:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 16 13:01:03 2025 GMT
            Not After : Sep 14 13:01:03 2025 GMT
        Subject: CN=abce9530-4a6f-47b8-b4f4-bdd5ae27de1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:d7:98:c1:92:a9:76:7d:43:f5:ec:09:bf:
                    d3:e9:f1:b7:e2:5b:3d:46:a6:ae:4e:f6:a1:7c:db:
                    77:d4:1a:e8:10:a6:d7:53:c6:e6:6b:57:e7:fb:4c:
                    8e:4c:26:c0:38:6b:5d:bd:0a:9f:61:fe:0c:95:45:
                    00:f3:20:9d:1e:3b:ca:21:e8:03:2e:e9:bb:f3:0c:
                    65:8e:02:44:a7:5c:10:23:f8:a1:ea:66:73:4d:e9:
                    0c:90:7e:e8:c1:62:39:39:2b:58:80:14:2c:b9:54:
                    0e:cb:50:5c:9c:0b:3e:75:87:31:db:24:79:16:b2:
                    cc:2e:d5:73:a2:e6:01:17:cd:59:d3:00:8c:2d:c5:
                    5f:a0:02:ca:dc:3c:5b:1d:72:aa:5f:c0:80:72:c9:
                    dc:98:12:62:c0:d9:4f:74:f0:50:0d:76:e9:83:5d:
                    74:3a:e9:82:52:69:2d:25:aa:45:01:d2:cc:21:d2:
                    87:da:a3:df:15:ad:38:8f:29:86:a2:5b:1c:cc:57:
                    07:fb:1a:51:27:05:90:3b:41:3f:cd:a3:e6:96:3b:
                    55:1e:c4:78:42:04:0e:af:a4:ee:a7:60:ba:6c:2b:
                    7b:ab:8e:c1:92:6b:70:69:27:3d:0d:85:8b:ba:e2:
                    41:26:a4:f2:e7:3f:84:81:93:51:83:04:cc:b1:a4:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4F:22:8D:C7:DD:DE:F9:4D:85:DE:DC:27:E7:29:4F:0B:21:26:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c93a9bfe-081d-3edb-93f5-945fbeae9332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:10:07:8b:96:e6:08:41:80:70:8a:72:84:38:2c:8e:e4:d7:
         68:96:96:57:22:4c:c4:43:f4:70:6e:5b:87:86:9e:9e:d9:1a:
         f7:da:81:e3:cb:7d:41:98:2f:32:0d:0d:c8:a9:98:99:8f:4c:
         a3:e7:e6:d8:39:5a:77:a5:d0:42:04:2b:2b:e0:7e:41:0a:f7:
         7a:90:5f:88:de:8f:da:aa:91:74:58:ae:7f:dc:30:9b:99:75:
         f9:a3:72:25:15:1e:83:3a:e1:96:f7:51:a0:30:17:72:00:bf:
         90:6a:e2:28:b1:ba:e9:c9:ff:5e:fe:3c:82:d4:a4:f6:a5:f8:
         dd:0b:e8:1e:98:ea:7e:19:0b:8f:92:1b:24:09:dd:78:f7:5e:
         6a:1e:4a:d0:58:d5:86:80:58:0c:bf:34:cf:56:cc:33:c2:c9:
         39:5a:6b:6b:39:a1:37:1b:9a:81:98:a8:78:30:51:c9:f1:1c:
         db:36:c5:b6:4f:c5:5d:c8:e0:89:01:1a:7f:40:0a:9f:31:df:
         07:a3:ae:2a:ad:4b:11:eb:93:0d:ba:25:12:de:e3:74:8e:4b:
         45:00:bb:57:50:74:3c:4e:39:fa:7a:c2:39:4d:f4:ce:6d:ab:
         57:3a:1e:fa:a8:ad:4e:34:45:d9:34:6a:75:47:77:05:25:e3:
         17:3f:91:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15YoAivF4QgCz1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk
YWJjZTk1MzAtNGE2Zi00N2I4LWI0ZjQtYmRkNWFlMjdkZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim3XmMGSqXZ9Q/XsCb/T6fG34ls9RqauTvah
fNt31BroEKbXU8bma1fn+0yOTCbAOGtdvQqfYf4MlUUA8yCdHjvKIegDLum78wxl
jgJEp1wQI/ih6mZzTekMkH7owWI5OStYgBQsuVQOy1BcnAs+dYcx2yR5FrLMLtVz
ouYBF81Z0wCMLcVfoALK3DxbHXKqX8CAcsncmBJiwNlPdPBQDXbpg110OumCUmkt
JapFAdLMIdKH2qPfFa04jymGolsczFcH+xpRJwWQO0E/zaPmljtVHsR4QgQOr6Tu
p2C6bCt7q47BkmtwaSc9DYWLuuJBJqTy5z+EgZNRgwTMsaTCHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJPIo3H3d75TYXe3CfnKU8LISZVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYzkzYTliZmUtMDgxZC0z
ZWRiLTkzZjUtOTQ1ZmJlYWU5MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAQB4uW5ghBgHCKcoQ4LI7k12iWllciTMRD9HBuW4eGnp7ZGvfagePL
fUGYLzINDcipmJmPTKPn5tg5Wnel0EIEKyvgfkEK93qQX4jej9qqkXRYrn/cMJuZ
dfmjciUVHoM64Zb3UaAwF3IAv5Bq4iixuunJ/17+PILUpPal+N0L6B6Y6n4ZC4+S
GyQJ3Xj3XmoeStBY1YaAWAy/NM9WzDPCyTlaa2s5oTcbmoGYqHgwUcnxHNs2xbZP
xV3I4IkBGn9ACp8x3wejriqtSxHrkw26JRLe43SOS0UAu1dQdDxOOfp6wjlN9M5t
q1c6HvqorU40Rdk0anVHdwUl4xc/kXQ=
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:36:05 2025 by rpki-client