Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa
File:                     d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa (raw, json)
Hash identifier:          Zy74aXbCY+l6tHF6eaO44aou3oAXTNN+tW36f8QAyO4=
Subject key identifier:   AF:79:BE:3D:6B:E6:92:B8:80:D8:F3:FE:88:78:8A:C3:40:91:3B:7A
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584AC2E0E7F428DD4104E3625400
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     52347
IP address blocks:        162.217.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e7:f4:28:dd:41:04:e3:62:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=10e16a07-f30b-46c0-a14c-bec8822b11c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:de:3c:53:7e:bb:43:89:8d:a0:2f:c8:d5:
                    f7:b5:df:03:df:ee:ac:2e:f1:d4:6d:e0:fc:62:9d:
                    55:67:bd:43:40:3a:68:78:56:06:61:7d:f9:d5:eb:
                    0d:7b:1f:e3:73:04:4d:d1:a2:7a:6b:76:f6:26:c9:
                    bc:b4:1f:28:56:fb:1a:85:83:ca:c4:19:76:15:a9:
                    13:6b:37:08:2b:7c:f8:9a:96:b4:d8:95:04:14:91:
                    76:ff:42:4f:d5:8f:17:76:50:64:0f:4d:76:a2:13:
                    3c:d4:73:b9:31:5b:2f:a3:9a:ea:9b:80:b5:03:4a:
                    1c:75:4d:5b:6e:b9:13:60:3f:13:9b:ac:0e:5d:b3:
                    e4:00:8d:9c:16:98:70:3b:52:4a:b5:3f:29:f7:a2:
                    98:c1:60:57:b8:2d:45:4c:21:28:d9:6b:27:86:b1:
                    45:45:24:28:cb:fc:5f:c6:32:87:e4:33:f4:ce:02:
                    02:bc:e6:76:e1:a1:25:2f:dc:49:f1:e2:f1:1a:29:
                    ea:98:78:6d:87:70:95:c3:2d:4e:67:28:05:61:f0:
                    b4:f2:a2:89:fa:9c:8e:26:ff:2c:9e:47:91:c1:c6:
                    19:a6:53:74:c8:13:65:af:73:72:e9:64:96:85:8a:
                    a9:7d:84:49:a4:3e:7a:c4:14:05:65:01:34:16:82:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:BE:3D:6B:E6:92:B8:80:D8:F3:FE:88:78:8A:C3:40:91:3B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:d2:63:33:16:f6:fb:ea:35:79:74:3c:db:15:ce:07:a2:3f:
         b1:6c:12:39:04:c6:23:0b:3a:51:1b:ee:ef:62:70:fe:a1:23:
         86:35:82:e6:d9:5d:04:d7:ae:52:e6:05:ae:76:81:5c:75:6c:
         aa:07:b1:67:b2:b0:0e:85:2b:6b:8c:e9:f2:05:b4:c5:fe:58:
         82:9a:ff:12:4b:ae:70:8b:38:1c:e4:ac:b7:06:e1:41:b5:62:
         46:92:5a:1a:b0:57:32:ae:5c:1c:fd:ff:60:5e:b3:d7:61:7a:
         fd:e8:1c:e7:ac:73:24:1e:dd:23:d4:35:53:5d:51:62:13:42:
         ed:8f:4d:32:86:ef:c8:63:27:42:c1:3f:1f:5f:3c:b0:40:33:
         2e:07:54:4e:09:bc:a7:79:f0:ce:c5:7f:9c:4d:b1:9b:3a:04:
         4c:49:9c:ac:40:18:e5:e2:dd:65:3a:b1:e8:fc:73:43:34:22:
         09:b2:01:a5:14:97:ac:97:5b:27:4c:22:5c:91:8a:67:21:7f:
         bc:9e:e6:eb:b4:16:06:e2:2d:1e:49:69:ed:bb:e1:bc:de:f4:
         8b:68:33:38:c3:a7:c6:71:ce:e4:47:49:3f:51:10:31:7a:38:
         bf:b9:8a:a1:6f:77:e4:50:86:fe:f3:75:f5:63:64:17:0f:5e:
         49:f8:4e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:55:50 2025 by rpki-client