Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
File:                     e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa (raw, json)
Hash identifier:          BiUWn5YIngSiKa18/8HNaXBEBly6gtemEEnyYfGyo70=
Subject key identifier:   DE:A4:D3:D9:4D:1E:06:0C:C4:F6:A6:7D:93:13:CB:FC:A7:B8:9C:A5
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F4328584B2A2C256925157F2FCDB61980
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     8030
IP address blocks:        161.151.112.0/21 maxlen: 24
                          161.151.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:25:69:25:15:7f:2f:cd:b6:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=1665e9ce-f464-4f3c-9512-f8593108c25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9f:6f:93:25:73:14:b6:02:41:65:7a:fc:d5:
                    3c:ca:82:83:2f:d4:68:e0:8c:64:e5:65:f8:ca:14:
                    c8:b8:53:d2:ee:b1:66:96:cf:e3:5b:21:03:2a:95:
                    09:ca:4e:8b:5c:b2:7f:89:bf:49:0b:4f:21:cb:31:
                    bf:83:ae:9a:3e:5c:23:ac:82:07:15:f8:39:22:2f:
                    af:ef:bd:b8:9c:70:00:85:b4:1b:7a:91:46:27:f0:
                    cb:3d:ce:00:80:3e:3b:04:5b:dc:a8:e2:51:b5:e6:
                    81:01:fc:71:16:86:d6:85:d1:81:ac:85:84:0d:3e:
                    37:fd:c6:c2:78:94:75:18:0e:6f:49:f7:3c:ee:ae:
                    3b:84:dd:ea:5f:7e:32:08:8f:94:ab:ee:c7:3c:44:
                    f5:7b:ba:ff:37:74:ed:24:e2:60:71:c5:34:08:3c:
                    bc:72:1a:fd:c0:04:c8:0b:68:b3:e9:de:db:4a:fb:
                    64:af:19:b2:61:80:a8:b3:b7:92:aa:8d:37:3c:5d:
                    56:f2:b0:9a:68:f8:6f:d8:9a:68:da:39:0e:7d:f3:
                    91:90:2b:9a:86:36:69:01:0c:36:33:5e:c5:da:3e:
                    0e:c1:b9:d0:8f:d5:bf:67:3d:14:40:c0:db:cd:9c:
                    5e:13:6d:d1:d6:05:ce:b7:67:ba:78:d7:32:6c:86:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A4:D3:D9:4D:1E:06:0C:C4:F6:A6:7D:93:13:CB:FC:A7:B8:9C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.112.0/21
                  161.151.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:1d:0f:5a:a8:48:aa:95:a3:fd:7e:38:34:fb:f5:bb:f0:
         6c:fc:d2:3c:97:0a:fc:71:09:31:c1:2f:98:bb:be:7b:1e:a3:
         39:03:f8:54:ef:41:13:0f:e6:77:6f:77:05:7c:ed:8c:75:58:
         aa:bb:e0:db:a2:c6:11:8d:b7:a3:dd:ac:db:46:8b:d8:35:35:
         df:1c:c4:46:fd:c6:65:57:32:18:9c:c1:ad:44:d4:f9:54:87:
         62:87:47:a5:3d:a7:11:57:db:18:5b:de:da:eb:f4:d6:b3:4c:
         78:9d:4d:9f:58:b4:ff:a3:43:b7:de:26:ef:28:3c:81:6b:e2:
         24:2b:b6:97:2a:0b:75:79:f1:c7:bf:21:39:d8:f0:22:bb:35:
         89:df:62:cc:30:18:b5:38:d3:10:38:48:e0:94:86:7d:82:01:
         d7:ef:59:bc:53:88:e3:73:a4:fe:3e:53:e0:f2:13:f1:68:30:
         ed:20:cb:51:aa:67:6a:19:a3:38:78:03:d9:77:56:cd:65:5a:
         72:db:bd:23:ee:c2:07:fe:8a:35:88:6c:7e:a5:e4:62:64:b4:
         0d:65:58:ad:0d:7c:35:55:a4:ab:8e:64:c1:4a:06:62:1e:63:
         92:7e:a6:47:a2:b8:02:08:f4:18:0a:26:6c:7c:63:88:38:78:
         16:ea:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:36 2025 by rpki-client