Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa
File:                     f7446f61-44be-35d2-94ba-fd19dd446575.roa (raw, json)
Hash identifier:          fG5E0K4dIXbBM0hRMrGrHbLW6NbzhDuxQDWeRyU4n44=
Subject key identifier:   DC:E1:70:E6:BC:5E:85:0D:DB:FD:38:BB:D9:4B:14:E0:E4:56:74:D4
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B38219A7AFC4BDE5270759F00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        161.69.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9a:7a:fc:4b:de:52:70:75:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=d5e3478d-03cd-4aab-8267-e3c34ce1c365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:d4:5c:b7:eb:ab:63:74:d6:a6:9d:2c:4f:
                    04:2e:e7:9a:5e:0b:1c:55:6c:1e:5b:23:4d:9e:a4:
                    02:50:05:1b:73:11:f6:21:db:c3:08:95:82:77:65:
                    82:bb:22:1c:bf:bc:a0:f6:1f:75:80:24:62:50:cb:
                    d7:ea:81:1d:4a:aa:56:06:81:8b:b8:78:f5:51:cd:
                    1a:f9:0d:c9:f5:8f:d5:0c:25:27:8e:2d:cf:11:60:
                    0a:2c:ea:ef:db:b8:13:97:20:1f:c4:fc:25:8a:f0:
                    5c:1b:4d:9d:cf:b4:78:7b:56:c4:07:c3:af:a4:1f:
                    0c:a3:ae:e8:09:e3:17:c4:5f:99:14:b8:60:8f:3b:
                    72:db:a3:02:fa:d3:df:1a:41:71:13:fb:42:b6:13:
                    88:c7:ce:2e:65:ef:05:f9:1a:c8:c4:44:b0:01:8c:
                    a4:a1:be:92:69:a3:02:ec:ec:88:ea:4a:03:f0:dc:
                    7f:ab:ac:d3:16:51:1f:62:30:8b:f5:e1:d6:a7:b5:
                    f4:e6:97:1d:83:ab:31:2b:44:27:b8:8e:65:c0:51:
                    71:3c:34:d3:ba:ca:f9:d4:5a:f8:45:c9:57:d4:5c:
                    f9:d7:c0:b6:f8:e4:91:88:eb:04:0e:eb:c2:2d:20:
                    04:49:06:60:64:15:d7:bd:b3:44:68:06:09:02:30:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:70:E6:BC:5E:85:0D:DB:FD:38:BB:D9:4B:14:E0:E4:56:74:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:73:aa:b6:58:cc:08:07:34:55:21:49:2f:c8:16:ef:0d:
         b3:1c:8f:9d:12:8a:d0:09:57:2f:a4:8a:38:8a:17:b8:01:80:
         0c:2f:3e:36:85:95:ac:59:8e:2e:e8:57:5d:fa:fb:3b:83:c2:
         db:35:54:f7:92:7b:16:e1:74:e2:7d:3e:2e:64:7c:83:88:1b:
         b8:f4:a1:a0:ba:72:e2:90:0c:81:fc:b4:5c:03:5f:7d:af:4f:
         7b:91:8d:da:d1:c0:a1:2f:8e:2e:6b:02:78:41:39:db:a9:d4:
         06:c3:f9:53:36:9b:63:b0:52:fb:95:fe:fd:59:5e:f5:f4:b3:
         28:4a:c7:64:08:a4:ac:8d:3d:d6:2f:31:52:4c:ec:4c:86:cb:
         c3:57:b9:4a:bb:b9:e2:d1:2a:24:d7:3d:ba:b7:0e:6a:b6:95:
         ac:8d:ec:87:80:d7:92:6d:94:32:6f:67:b1:6f:e5:f1:72:4b:
         45:85:05:79:07:fd:9d:2b:0b:a6:98:14:63:0b:09:ad:d1:fd:
         38:0d:8c:7c:f5:b6:7d:0c:ee:73:a2:bb:ca:31:17:3b:25:c2:
         df:ce:89:9b:71:c2:9e:3e:91:d6:94:5e:77:a4:b8:57:9b:99:
         59:fd:6d:f5:99:b9:46:b9:1b:48:80:a3:f9:2c:11:33:6e:71:
         83:c8:b7:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZp6/EveUnB1nwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZDVlMzQ3OGQtMDNjZC00YWFiLTgyNjctZTNjMzRjZTFjMzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibfUXLfrq2N01qadLE8ELueaXgscVWweWyNN
nqQCUAUbcxH2IdvDCJWCd2WCuyIcv7yg9h91gCRiUMvX6oEdSqpWBoGLuHj1Uc0a
+Q3J9Y/VDCUnji3PEWAKLOrv27gTlyAfxPwlivBcG02dz7R4e1bEB8OvpB8Mo67o
CeMXxF+ZFLhgjzty26MC+tPfGkFxE/tCthOIx84uZe8F+RrIxESwAYykob6SaaMC
7OyI6koD8Nx/q6zTFlEfYjCL9eHWp7X05pcdg6sxK0QnuI5lwFFxPDTTusr51Fr4
RclX1Fz518C2+OSRiOsEDuvCLSAESQZgZBXXvbNEaAYJAjCP6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzhcOa8XoUN2/04u9lLFODkVnTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjc0NDZmNjEtNDRiZS0z
NWQyLTk0YmEtZmQxOWRkNDQ2NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHv6c6q2WMwIBzRVIUkvyBbvDbMcj50SitAJVy+kijiKF7gBgAwvPjaF
laxZji7oV136+zuDwts1VPeSexbhdOJ9Pi5kfIOIG7j0oaC6cuKQDIH8tFwDX32v
T3uRjdrRwKEvji5rAnhBOdup1AbD+VM2m2OwUvuV/v1ZXvX0syhKx2QIpKyNPdYv
MVJM7EyGy8NXuUq7ueLRKiTXPbq3Dmq2layN7IeA15JtlDJvZ7Fv5fFyS0WFBXkH
/Z0rC6aYFGMLCa3R/TgNjHz1tn0M7nOiu8oxFzslwt/OiZtxwp4+kdaUXnekuFeb
mVn9bfWZuUa5G0iAo/ksETNucYPIt3A=
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:32 2025 by rpki-client