Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa
File:                     f7446f61-44be-35d2-94ba-fd19dd446575.roa (raw, json)
Hash identifier:          YCjTeIFL2OrWcp8dS+BzBdkQMSPFzr3X0haliXlT9lA=
Subject key identifier:   84:9E:92:4D:56:64:5F:AD:2F:0A:99:F1:5D:DD:53:E3:2A:1E:BB:7E
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765CCE01D33D52FDEB5DA10
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        161.69.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cc:e0:1d:33:d5:2f:de:b5:da:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=0e4775d6-5344-4196-9bb4-6166b06e1ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:c6:81:d7:db:2e:24:9f:df:52:d0:d3:78:
                    64:a0:bb:84:55:d9:c9:d5:8c:77:c5:34:70:ef:e2:
                    a4:86:69:49:f9:56:c6:c7:7e:6c:26:c3:dd:0c:a3:
                    27:83:eb:a3:47:91:c3:71:6c:8c:3e:99:7e:17:f7:
                    53:e7:89:65:40:04:f9:7d:a8:cc:3b:28:f9:84:96:
                    16:89:cf:50:10:d6:e8:76:d5:1d:26:51:33:35:03:
                    f4:3d:b9:a4:67:99:91:45:e0:f6:2a:6b:82:49:c3:
                    3f:a5:72:ef:0b:f0:0d:d3:81:df:a4:ef:2e:aa:9b:
                    24:b3:f2:0d:8a:b7:32:d7:1d:19:4f:85:1b:ee:4a:
                    aa:09:e2:4c:a1:5f:b7:6c:cc:f7:1d:0d:23:b5:0c:
                    34:ec:ee:c2:ff:ea:a3:b9:43:d9:f9:a7:4f:44:f9:
                    d5:8f:37:e7:f6:3a:5f:18:07:f5:64:98:9f:eb:e9:
                    52:d0:37:86:eb:d2:bd:aa:53:9b:a1:1f:ce:18:59:
                    1b:dc:ed:90:f4:58:f3:75:5f:7d:a4:ec:f9:11:8c:
                    b7:8e:48:ef:aa:ed:5f:a1:c6:60:16:60:0f:8b:af:
                    b3:45:f1:8f:ec:af:31:6d:04:5f:97:10:66:e6:f9:
                    ef:04:5b:5d:ee:d1:03:15:24:52:b0:14:4a:b2:48:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:92:4D:56:64:5F:AD:2F:0A:99:F1:5D:DD:53:E3:2A:1E:BB:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f8:1e:f7:2e:61:ed:07:03:46:e8:9a:de:3e:8f:08:6c:8e:
         45:48:1e:8b:d6:81:2c:b2:ca:b3:68:38:64:f8:9e:13:50:d6:
         07:79:19:d0:cb:c1:67:e4:11:b5:0e:18:ea:46:18:cb:7e:6d:
         47:9f:e3:f8:af:1f:13:a2:e3:2c:e1:d4:99:e9:79:57:46:16:
         42:cd:94:c5:ab:3c:34:61:90:37:28:28:ed:92:fa:5a:d8:37:
         c8:5d:06:51:79:d1:8a:33:0c:59:5d:a3:48:30:78:1b:a9:07:
         2d:69:83:ef:7a:5e:1a:b7:7e:97:ea:3c:c7:27:1f:d4:c6:5e:
         f4:1e:fc:28:df:c9:35:24:68:4c:a1:79:4a:df:44:62:48:3d:
         70:bf:e8:64:56:85:62:ed:0a:a7:f9:16:f5:88:1d:ca:6e:8f:
         4a:ea:95:52:f8:d7:c2:95:00:4e:3a:54:c6:a6:81:fb:c4:00:
         61:6d:46:44:a1:a6:38:b5:16:13:81:d1:b7:23:51:4d:65:b4:
         41:75:d1:c4:ad:c4:81:78:56:f6:f0:85:b4:a7:2c:e8:e1:53:
         f9:66:29:41:52:3b:d8:46:99:95:39:25:f3:86:8e:02:e7:e7:
         38:32:7e:d4:03:58:07:98:b7:91:45:44:68:c8:b6:f6:53:af:
         26:26:2d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:56:11 2025 by rpki-client