Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa
File:                     15d788a4-7d75-34f3-8f99-0b197da91520.roa (raw, json)
Hash identifier:          Hs1gVTUngg9WfbHF1v1rWC42NXF7JQAHNbH4/h8q950=
Subject key identifier:   75:77:DD:4C:8D:90:87:A6:4F:5F:F6:F0:65:09:2C:3F:8D:45:75:3F
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B382198321501BA7F4D97FC80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:98:32:15:01:ba:7f:4d:97:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=a10fe302-6680-4d16-a953-4a07831ffdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:83:a5:1a:4d:9f:f5:71:b9:f4:b4:b2:23:
                    00:15:2b:e7:fb:d5:a6:98:90:94:59:36:62:72:36:
                    13:27:ec:d5:d7:c4:6f:59:2d:e8:bf:a1:70:a4:a4:
                    e4:06:f6:ca:3d:34:4f:72:cc:aa:9a:c0:d1:07:d5:
                    49:30:a8:fc:47:92:c2:b0:0b:ec:9d:15:c1:70:e9:
                    d6:bb:34:6e:6a:6d:95:bc:85:f5:ce:4f:de:3c:11:
                    55:f2:1b:a3:04:b2:b1:73:d3:45:f5:5e:27:dc:c5:
                    b4:7e:3e:53:a1:20:16:bc:74:73:37:19:28:66:c7:
                    f3:b0:5d:e1:87:9b:fc:a3:18:ad:3c:7b:c0:ce:4d:
                    64:c0:47:d0:3b:aa:e3:3d:96:e2:1a:30:07:32:9f:
                    20:f8:43:d3:58:2a:ee:51:1b:a9:d8:c6:50:a4:2f:
                    7b:73:23:1b:46:83:a0:7d:d5:64:c8:c7:88:a4:87:
                    ed:af:d0:73:0d:76:26:a5:a3:1a:4e:bd:07:fa:50:
                    0a:30:c1:5b:d3:dc:86:a4:07:83:20:b3:93:c8:4a:
                    8c:40:ce:87:37:8d:ad:d0:11:fb:d9:aa:c5:60:92:
                    3e:e4:bb:8c:bb:50:e6:d0:66:0d:31:86:49:31:f9:
                    be:5c:7a:94:6c:9b:fc:99:09:3c:b1:ad:95:a6:a0:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:77:DD:4C:8D:90:87:A6:4F:5F:F6:F0:65:09:2C:3F:8D:45:75:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:e0:3a:da:44:47:b4:22:3c:65:9e:09:64:31:11:01:74:
         7c:28:e1:b3:45:5e:2c:f9:9d:27:34:e5:fd:74:f0:a9:de:19:
         4f:a8:20:b5:9e:96:f1:57:07:2b:05:1b:c7:74:52:8a:d5:05:
         4a:52:29:4d:d8:6f:03:a8:f3:6f:e5:a5:50:63:5d:89:c7:50:
         2a:00:51:e0:22:83:24:1e:5c:e6:f0:fa:55:61:e1:28:6e:6f:
         13:75:02:97:d9:56:bf:d9:c6:90:f5:32:33:18:32:a0:66:26:
         5b:98:ab:57:57:9a:39:d2:aa:dc:38:95:dd:06:73:85:85:f7:
         dc:85:ce:fe:c4:51:f0:98:a6:af:71:bc:b8:3e:b9:fe:07:c0:
         85:0c:c5:e8:69:5e:08:e2:53:a9:31:6c:6d:3c:da:21:32:da:
         1b:82:e8:6e:4d:96:34:8c:68:68:83:61:28:4f:fa:55:45:d8:
         99:fe:10:2e:25:3c:13:70:70:be:53:2a:eb:47:60:95:02:1f:
         71:c1:fd:a7:36:76:85:b5:57:2b:74:1a:f9:03:be:ae:d4:0f:
         fc:04:2a:76:54:14:a7:c2:e6:6a:8d:50:f3:7f:c2:28:40:ff:
         2a:cc:48:25:e6:00:7c:44:d6:d6:13:39:54:b9:e4:34:3d:ad:
         3c:15:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:51 2025 by rpki-client