Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa
File:                     20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa (raw, json)
Hash identifier:          ln4tL/xQhsFTd/27VaeAI8pAhDhrHPMXL0j3oKCiDNc=
Subject key identifier:   43:E6:E9:C9:5C:83:6B:EC:7E:84:84:6B:C0:80:C5:EB:67:BE:D8:E3
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B3821994829C07ABC85455640
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        161.69.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:99:48:29:c0:7a:bc:85:45:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=6ff4e634-c5ff-4eaf-9218-a24ac6f9957a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:67:a5:aa:00:0b:dc:ad:24:7a:9c:e2:9b:
                    0d:34:23:75:ef:5b:34:40:5f:66:04:2b:e3:6f:56:
                    da:bf:44:a8:de:b0:d6:95:cc:01:60:ef:5e:29:e5:
                    3c:ef:06:2b:c3:ed:31:ec:ff:9c:db:9e:fb:7e:77:
                    05:9b:61:ac:70:c1:66:e6:72:2a:69:a6:f6:b1:d1:
                    8e:bf:2e:75:1f:a5:13:73:39:76:d5:af:83:35:29:
                    38:95:76:a4:2d:f8:b6:29:7d:81:aa:3a:d8:90:9f:
                    eb:a3:7c:5b:31:69:7c:e0:d2:66:71:d5:f5:e1:0b:
                    9f:41:34:a2:92:71:2e:2b:3f:69:40:f5:0b:6d:6c:
                    63:0c:21:f5:4c:d8:4e:a2:05:bd:d9:bd:b2:7f:03:
                    a4:9d:2b:9a:bc:1f:74:29:2b:a5:ff:19:82:0a:43:
                    c2:bb:42:ab:ae:20:89:23:5a:35:f7:91:67:a0:1e:
                    cd:02:95:f7:15:80:7e:2f:d3:52:66:9c:cf:c2:b4:
                    d1:a0:53:e3:f0:45:9d:5c:9d:06:42:74:a4:51:b2:
                    0c:bb:d1:75:e8:4c:1a:49:db:57:09:af:76:45:8c:
                    db:5d:b8:c9:19:56:fb:d5:4a:e7:93:ae:30:b2:7a:
                    8f:41:e4:28:09:7f:c0:85:a5:d1:99:09:db:b4:bc:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E6:E9:C9:5C:83:6B:EC:7E:84:84:6B:C0:80:C5:EB:67:BE:D8:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e2:3d:14:fc:92:b9:81:64:a7:24:90:2b:bc:c1:34:66:00:
         12:d5:b8:f5:86:0f:a3:dc:09:de:55:e8:f4:9b:37:86:b2:b5:
         8f:97:51:52:51:34:9c:0e:25:55:0c:36:f9:50:1a:71:49:8d:
         c8:91:0b:79:02:1f:c7:8e:cf:e1:1b:51:9a:9a:9b:c4:7b:3c:
         7d:72:39:1d:b6:1a:02:31:e2:89:44:f4:dc:5b:01:87:09:8e:
         16:7f:1f:90:9f:44:50:e6:14:ec:3b:b7:bf:eb:7f:d4:bf:56:
         cb:dd:ad:81:91:0b:7a:c2:b6:43:96:88:83:8c:6a:e7:68:4c:
         97:aa:a3:61:41:ab:bc:be:f8:34:6a:61:f8:84:5f:0a:5d:9a:
         51:8f:2e:8a:ab:c4:c8:0c:99:76:35:42:6b:0a:02:2b:6f:dc:
         21:7d:e3:e6:c8:2a:96:a4:c2:12:b8:43:0a:6f:6f:3c:1a:e5:
         1c:07:b1:0e:e3:41:bc:05:e8:86:a5:bb:37:4f:a5:37:c4:bc:
         87:68:46:6f:0f:30:fb:68:4b:57:44:22:10:0d:69:5c:df:d3:
         f4:cb:26:2a:4e:fe:d7:32:0e:bd:a6:e0:12:ca:b5:c3:f7:98:
         b2:61:9e:e1:97:e6:3a:67:4a:f8:59:da:41:73:76:00:a4:94:
         7c:73:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:02:04 2025 by rpki-client