Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa
File:                     dc98a4c9-b167-347d-b53a-d1d1192777fa.roa (raw, json)
Hash identifier:          /5s62NxVKcr+tpGpzoT6Hcfpi4rldPh5/0AgxHruqNU=
Subject key identifier:   3F:38:DE:9F:7E:34:C6:37:55:AD:C2:88:DB:31:73:92:7A:7F:5B:FB
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765CBB7988DDE9920F78000
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     203724
IP address blocks:        161.69.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cb:b7:98:8d:de:99:20:f7:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=5420431f-5274-408d-bb29-4cd0e9591af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:17:18:66:2b:0b:58:5e:da:34:1a:35:57:
                    ca:87:3a:63:3d:4b:0e:01:dd:30:77:d8:f5:f4:48:
                    49:eb:79:0e:cb:83:69:bd:41:6d:75:d9:50:c8:ca:
                    77:69:51:84:a9:7b:41:b3:d3:e9:a6:6b:22:71:2a:
                    84:3f:41:74:f8:36:c8:83:17:ae:19:3d:9c:e7:a3:
                    09:88:e5:18:3f:e8:88:c6:90:8b:53:f2:05:63:14:
                    bc:60:7b:0d:b1:d1:35:d4:c9:78:fa:16:ad:e7:94:
                    ff:6b:1f:73:74:83:8a:e2:d3:5d:86:35:5d:9d:b6:
                    bd:59:9b:5b:b8:61:d7:69:6d:a2:3c:74:35:25:6f:
                    90:d7:3f:a5:36:38:1e:9c:be:ac:48:85:e1:bd:a4:
                    cb:8c:4f:30:ca:69:06:b2:48:cd:0c:bf:4c:05:3a:
                    60:47:55:2e:30:e7:e4:20:d4:13:5a:3b:cf:c9:4a:
                    22:a0:d6:77:79:94:f3:2d:e0:3d:59:ca:17:59:e8:
                    7c:38:57:9d:59:24:82:41:44:a0:3d:c0:fa:14:32:
                    94:bf:25:45:33:c1:2c:bf:c3:64:97:85:b9:ce:61:
                    e0:f8:27:05:69:11:8d:bc:8e:3a:56:42:bc:41:1a:
                    df:07:b5:4c:f1:62:54:a4:20:5e:b2:be:bb:de:e6:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:38:DE:9F:7E:34:C6:37:55:AD:C2:88:DB:31:73:92:7A:7F:5B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:36:84:95:51:97:a9:98:c3:80:d8:07:0f:5d:b1:81:52:
         d3:8c:1e:67:73:64:b5:e4:c4:41:9b:e7:b0:18:b8:ac:0b:77:
         5d:f3:bd:4d:b8:1a:29:70:af:fa:2d:fd:a0:99:04:63:6c:14:
         06:dc:95:c5:63:cd:72:03:b5:a9:1d:33:de:92:95:78:89:e7:
         99:63:f7:6f:24:f5:f2:63:3a:87:c3:70:0f:81:53:5f:17:ca:
         9b:d6:2e:8f:7b:7f:ef:d0:e6:0e:e8:1f:15:85:e1:36:a1:f3:
         c9:e5:43:f1:f5:7f:72:5e:89:c1:7c:c3:7d:8e:ef:78:da:c4:
         a4:bc:a4:45:05:40:64:97:9b:c7:10:aa:c1:0f:8b:ad:e2:6a:
         fa:d2:19:84:3a:0e:98:cd:ff:c1:d4:29:c6:1d:da:d6:84:99:
         fc:66:ca:60:f3:7d:83:f3:39:90:8d:69:fa:0f:c5:2b:ff:1c:
         06:51:fb:7c:59:c7:86:de:30:ce:d6:b1:5c:9e:2e:d6:30:66:
         01:ee:2e:e3:82:82:36:0c:6f:71:9c:f1:87:c9:bb:61:92:ae:
         77:58:95:49:a8:82:1b:12:91:27:e7:96:b4:6e:eb:ae:5e:16:
         db:f1:ad:d5:09:11:c2:e6:51:68:eb:59:36:ed:20:39:e1:cf:
         5e:6a:32:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:18:48 2025 by rpki-client