Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2105513-e6a0-39e7-87ef-62e8cf8a83dd.roa
File:                     d2105513-e6a0-39e7-87ef-62e8cf8a83dd.roa (raw, json)
Hash identifier:          VbyZPdrrn6E32UNsPqWDhcGdbaziCZorxA1tm6mY78U=
Subject key identifier:   1D:CB:C9:DC:B3:B8:C9:78:1F:2E:63:AF:05:DA:AC:C2:A0:BC:43:B3
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584AD0D644DB06A6D1403AC0C440
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2105513-e6a0-39e7-87ef-62e8cf8a83dd.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     7754
IP address blocks:        161.69.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:44:db:06:a6:d1:40:3a:c0:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=6139059b-90a2-4afb-bc11-a3ab5f12731d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:3e:9f:57:bd:79:ea:69:a5:c1:3c:e7:3a:
                    4c:cd:ba:92:51:2d:96:32:fa:84:53:7d:af:49:f3:
                    ee:bf:19:f9:c0:06:b6:c2:68:81:72:3f:b0:dc:41:
                    be:f7:a3:3e:0c:4f:3e:88:43:cd:0b:15:f9:ef:ae:
                    25:d2:0c:f9:86:e3:3c:5e:0f:58:59:e4:02:3c:0b:
                    af:3b:63:b8:06:b4:31:8a:05:fd:65:a3:09:c9:f4:
                    3b:ee:c4:11:95:5b:bf:97:9b:41:30:0c:ff:56:5d:
                    b7:45:a1:55:0c:ec:43:39:37:69:59:e9:78:1c:f4:
                    c3:1b:24:a9:67:f0:b1:b0:3e:a7:69:d8:b4:3e:a8:
                    c6:a4:3a:c1:9d:e3:23:c1:54:90:b3:d3:26:7c:e3:
                    61:93:95:9a:96:ab:84:30:96:3d:4d:f4:79:8f:95:
                    5e:0c:88:17:92:53:a3:b0:34:2c:eb:60:04:b7:3a:
                    64:c3:e3:48:78:62:5f:65:57:a6:14:4a:b9:b8:39:
                    7a:6c:8f:8d:08:4d:e8:28:4d:8f:b9:a2:c1:b9:89:
                    3f:2e:ba:b5:e9:d1:20:b0:1b:c1:b3:00:eb:9a:83:
                    e2:aa:d3:2c:1f:6f:14:07:72:87:7d:25:01:6c:58:
                    d1:6b:81:f2:d4:b5:d4:b0:e0:ce:17:2d:26:33:4b:
                    4b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CB:C9:DC:B3:B8:C9:78:1F:2E:63:AF:05:DA:AC:C2:A0:BC:43:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2105513-e6a0-39e7-87ef-62e8cf8a83dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:67:93:74:8b:9b:4a:95:1f:64:ec:ac:22:97:07:db:47:fb:
         c5:6e:af:c4:8d:13:9c:ed:5a:12:c2:54:b2:3d:8a:9c:d1:54:
         bd:89:03:59:29:c9:1f:e4:9c:03:6d:d4:bf:65:18:e3:13:d3:
         70:a7:fc:84:20:04:5a:77:03:20:e5:a2:7d:ed:5a:39:aa:cd:
         7d:0c:e4:a8:19:57:14:04:6c:51:f0:98:9c:54:05:c9:25:f8:
         e3:47:c4:ea:08:79:70:fe:ff:d6:92:26:24:b4:53:fb:21:29:
         93:1a:07:c8:19:fd:66:1b:29:2b:19:07:d2:e4:07:fe:da:39:
         5f:40:11:bc:d4:42:0a:29:7b:cf:fe:df:7f:73:43:2a:6b:75:
         c5:e9:bd:12:71:36:6d:3f:66:06:4a:af:70:fe:04:2b:42:a1:
         8e:5b:63:34:2f:1a:7e:9e:be:57:8b:bb:9e:8a:ca:d9:b7:58:
         7e:36:b5:ac:ab:46:ec:c3:6f:d3:09:63:bd:b0:c7:cb:00:99:
         c6:c2:b3:b5:fd:7f:cc:e0:10:12:a1:a6:74:24:9a:c9:55:0d:
         75:56:5f:4c:fc:c0:c9:ea:7c:07:6e:18:61:2a:9e:34:a9:47:
         4d:46:ea:87:75:1d:bd:87:ec:d7:b2:ae:74:15:c9:db:c6:74:
         a4:1b:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:00:32 2025 by rpki-client