Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e409aa55-cfee-3015-8016-8d4c25b4543b.roa
File:                     e409aa55-cfee-3015-8016-8d4c25b4543b.roa (raw, json)
Hash identifier:          5lPEoHGKKzaevu6npMzfuAgBzs8GXb2khfHU+j0S1Vg=
Subject key identifier:   47:02:5A:34:3F:61:22:F0:63:6A:E9:57:6F:6B:F4:98:CF:67:46:79
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765C64B4D9BD7CD6A626400
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e409aa55-cfee-3015-8016-8d4c25b4543b.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     203724
IP address blocks:        161.69.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c6:4b:4d:9b:d7:cd:6a:62:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=cc2c8711-9de8-441f-bbc6-b06a9919e65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:ce:d6:78:c1:50:a1:25:3b:a3:29:45:fe:
                    49:4f:90:9d:d9:71:19:a5:0c:2a:9a:a7:6b:13:b2:
                    b3:b9:5a:1a:4a:4b:b0:60:41:2e:96:33:75:44:2c:
                    46:fa:1e:04:88:b0:bf:6a:e4:8f:27:4b:97:95:b0:
                    7a:66:dc:ab:b0:5f:eb:2e:b8:e8:39:56:3a:12:62:
                    9a:be:f1:3d:6c:6b:35:0c:05:9c:aa:56:2e:31:a0:
                    08:42:96:56:eb:24:c8:63:3f:f8:e6:79:55:1c:e9:
                    ed:56:1e:52:33:aa:93:5a:6e:0f:a1:dd:73:85:d5:
                    cc:94:41:00:99:1b:83:58:9b:26:5b:56:e5:fd:63:
                    55:fb:3d:03:60:1c:a0:df:80:20:83:f2:eb:c4:ca:
                    1d:18:9e:d3:d5:72:06:62:ca:3a:06:e6:5d:a7:6e:
                    76:7c:1a:bb:e8:16:05:fc:78:3e:52:a5:13:a8:e3:
                    b8:9a:38:48:c5:d3:0b:25:5d:00:04:a2:a6:94:e1:
                    a7:45:b6:a8:f6:d1:3c:8e:58:42:87:68:bd:fd:ef:
                    f1:3c:c2:f5:28:b8:a6:0c:eb:1b:25:b7:66:ea:f3:
                    a9:cb:d8:17:1a:f7:9d:78:1a:00:65:6e:9b:7d:29:
                    b5:fa:e4:5d:3a:a6:c4:d1:9c:2d:dc:6a:a8:90:a7:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:02:5A:34:3F:61:22:F0:63:6A:E9:57:6F:6B:F4:98:CF:67:46:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e409aa55-cfee-3015-8016-8d4c25b4543b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:03:06:fd:d3:32:b8:9e:85:9b:e7:63:02:7e:37:b0:ce:07:
         08:17:ba:42:90:74:d8:6e:c3:8f:95:35:2a:2c:60:ac:38:c5:
         b5:26:e3:d3:da:a0:a8:d7:8a:82:70:c1:01:24:1b:c0:9e:4b:
         a2:90:ab:b2:6b:a9:dd:46:48:c0:90:43:69:22:36:e4:ad:7b:
         8d:6b:19:0f:81:e1:64:59:32:10:c4:82:e7:32:70:4d:3b:94:
         35:ec:03:13:31:3d:d8:63:3b:6b:5e:fc:30:53:24:d7:a7:50:
         a0:7f:ce:c3:b0:bd:70:ba:86:93:74:8e:8c:4f:c4:33:a6:ca:
         db:e8:e8:8d:c5:84:80:7d:59:79:6c:f7:74:aa:cc:de:fe:bf:
         82:14:71:a4:2e:0a:6e:43:91:97:03:bc:f2:63:10:8e:50:23:
         a0:d5:04:9a:08:d5:41:e8:d5:6e:54:96:0d:27:b9:13:11:ce:
         70:18:96:3e:7b:92:a9:40:b5:74:d6:45:b2:9c:85:77:26:b3:
         72:1c:70:d1:a0:bd:7c:87:75:f9:70:9b:2e:6e:3a:ff:1f:b1:
         af:25:f7:80:57:c8:8e:e5:03:30:50:70:20:ea:55:8b:00:a2:
         ae:8a:b1:3a:46:0a:12:44:7b:0c:a1:60:6f:41:21:10:ed:9e:
         f5:ed:63:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcZLTZvXzWpiZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk
Y2MyYzg3MTEtOWRlOC00NDFmLWJiYzYtYjA2YTk5MTllNjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf/O1njBUKElO6MpRf5JT5Cd2XEZpQwqmqdr
E7KzuVoaSkuwYEEuljN1RCxG+h4EiLC/auSPJ0uXlbB6ZtyrsF/rLrjoOVY6EmKa
vvE9bGs1DAWcqlYuMaAIQpZW6yTIYz/45nlVHOntVh5SM6qTWm4Pod1zhdXMlEEA
mRuDWJsmW1bl/WNV+z0DYByg34Agg/LrxModGJ7T1XIGYso6BuZdp252fBq76BYF
/Hg+UqUTqOO4mjhIxdMLJV0ABKKmlOGnRbao9tE8jlhCh2i9/e/xPML1KLimDOsb
Jbdm6vOpy9gXGvedeBoAZW6bfSm1+uRdOqbE0Zwt3GqokKehBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEcCWjQ/YSLwY2rpV29r9JjPZ0Z5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZTQwOWFhNTUtY2ZlZS0z
MDE1LTgwMTYtOGQ0YzI1YjQ1NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkDBv3TMriehZvnYwJ+N7DOBwgXukKQdNhuw4+VNSosYKw4xbUm49Pa
oKjXioJwwQEkG8CeS6KQq7Jrqd1GSMCQQ2kiNuSte41rGQ+B4WRZMhDEgucycE07
lDXsAxMxPdhjO2te/DBTJNenUKB/zsOwvXC6hpN0joxPxDOmytvo6I3FhIB9WXls
93SqzN7+v4IUcaQuCm5DkZcDvPJjEI5QI6DVBJoI1UHo1W5Ulg0nuRMRznAYlj57
kqlAtXTWRbKchXcms3IccNGgvXyHdflwmy5uOv8fsa8l94BXyI7lAzBQcCDqVYsA
oq6KsTpGChJEewyhYG9BIRDtnvXtYzU=
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:54:41 2025 by rpki-client