Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa
File:                     16b192af-4e6b-3d27-84c1-f5a3af373424.roa (raw, json)
Hash identifier:          fp8YY0TWZwUS6hyLNUjLIKl967EfeAbEe8+NYzQ9G+c=
Subject key identifier:   BA:A6:03:B2:A3:4C:B7:C3:E1:0F:40:85:45:CC:67:60:E2:F1:83:2C
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B38219989BE72F28E803F2E60
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     205272
IP address blocks:        161.69.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:99:89:be:72:f2:8e:80:3f:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=af560663-413c-47cf-9261-4943c4851529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:b8:89:49:1e:27:e0:e8:e2:23:46:a2:60:
                    62:c8:da:5d:bf:3d:f6:83:5e:df:6a:a5:cd:78:e1:
                    32:22:3f:23:cb:ae:44:d1:d3:c3:2b:f6:c9:d8:f0:
                    ae:f0:14:e9:ee:6c:8a:65:c7:68:98:b1:ab:e0:2c:
                    17:7a:1c:1b:cc:07:a0:41:0c:30:e6:dd:05:ff:99:
                    3f:15:ff:80:b3:8b:ae:fa:84:e1:47:8b:62:46:4d:
                    d5:50:1b:1f:f2:f9:63:b2:b3:7b:73:a2:9c:21:72:
                    62:0c:6b:7c:c3:a9:91:b9:6e:57:9a:c5:86:6d:b7:
                    d0:cb:75:0c:49:8a:5b:07:76:a4:27:fa:4b:22:cf:
                    47:16:6f:e4:a7:70:74:cf:40:bb:8f:6f:82:77:e9:
                    53:1c:84:29:8a:d1:2a:d3:10:ae:76:fc:e0:a9:61:
                    97:fd:b2:47:dc:a4:98:36:7c:f2:2a:ee:54:a8:ce:
                    29:a9:df:2f:af:a0:ae:9e:2c:e1:57:65:e0:1e:8c:
                    39:5f:0f:4b:ca:ec:91:66:cf:55:1c:e7:bc:fb:79:
                    c5:e7:f5:f2:25:ce:32:dc:ca:ee:19:42:8f:7c:e2:
                    25:08:ef:40:82:ed:8b:47:b6:a1:a8:04:ce:68:17:
                    88:54:5f:9c:59:be:a6:1c:f8:b9:6c:ee:dd:41:df:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A6:03:B2:A3:4C:B7:C3:E1:0F:40:85:45:CC:67:60:E2:F1:83:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:00:b3:7b:45:73:b1:c0:1d:d2:f1:59:0d:31:95:12:b0:
         06:55:5a:57:82:4c:38:fd:86:22:24:9f:77:b7:e6:ec:32:93:
         58:76:ea:20:2c:69:e5:73:ab:e1:ce:ff:6e:88:ed:f4:a1:b5:
         32:b8:26:90:24:70:da:87:43:5e:ee:cb:e7:ed:20:c0:6a:0c:
         79:ea:d1:6f:a6:f2:07:c3:bd:74:15:ad:97:a6:b3:bb:bd:a3:
         89:39:4e:3b:70:10:29:82:0c:f8:e6:7e:fc:6d:22:31:9d:79:
         aa:56:2e:10:31:8c:eb:02:2a:9c:89:a1:8a:4f:90:44:b9:e3:
         0b:fc:10:c7:b3:c2:22:73:ec:41:d0:a5:eb:f9:6d:89:ed:f1:
         5b:6a:40:3b:d8:0c:74:ff:f9:3f:b3:7b:14:ea:d9:55:08:37:
         e7:1f:6e:71:0a:ce:aa:a3:7f:0f:c5:61:19:04:54:13:be:a1:
         6a:bb:ee:f3:fb:5a:66:a9:fa:a0:2e:2e:ff:cd:45:39:b7:1a:
         16:25:34:82:2c:91:7e:31:4e:b7:19:b0:11:d1:81:a3:8e:9e:
         2f:2a:31:d4:37:cb:81:5a:4d:76:a1:7c:c0:ae:11:40:be:95:
         39:f1:00:ba:01:ec:13:e0:a4:d2:f6:ff:5a:61:65:0c:ec:87:
         6b:76:d6:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZmJvnLyjoA/LmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
YWY1NjA2NjMtNDEzYy00N2NmLTkyNjEtNDk0M2M0ODUxNTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV24iUkeJ+Do4iNGomBiyNpdvz32g17faqXN
eOEyIj8jy65E0dPDK/bJ2PCu8BTp7myKZcdomLGr4CwXehwbzAegQQww5t0F/5k/
Ff+As4uu+oThR4tiRk3VUBsf8vljsrN7c6KcIXJiDGt8w6mRuW5XmsWGbbfQy3UM
SYpbB3akJ/pLIs9HFm/kp3B0z0C7j2+Cd+lTHIQpitEq0xCudvzgqWGX/bJH3KSY
NnzyKu5UqM4pqd8vr6CunizhV2XgHow5Xw9LyuyRZs9VHOe8+3nF5/XyJc4y3Mru
GUKPfOIlCO9Agu2LR7ahqATOaBeIVF+cWb6mHPi5bO7dQd8s8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqmA7KjTLfD4Q9AhUXMZ2Di8YMsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMTZiMTkyYWYtNGU2Yi0z
ZDI3LTg0YzEtZjVhM2FmMzczNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCyALN7RXOxwB3S8VkNMZUSsAZVWleCTDj9hiIkn3e35uwyk1h26iAs
aeVzq+HO/26I7fShtTK4JpAkcNqHQ17uy+ftIMBqDHnq0W+m8gfDvXQVrZems7u9
o4k5TjtwECmCDPjmfvxtIjGdeapWLhAxjOsCKpyJoYpPkES54wv8EMezwiJz7EHQ
pev5bYnt8VtqQDvYDHT/+T+zexTq2VUIN+cfbnEKzqqjfw/FYRkEVBO+oWq77vP7
Wmap+qAuLv/NRTm3GhYlNIIskX4xTrcZsBHRgaOOni8qMdQ3y4FaTXahfMCuEUC+
lTnxALoB7BPgpNL2/1phZQzsh2t21qE=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:23:33 2025 by rpki-client