Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa
File:                     401073da-de78-3d31-84e4-3349facc1d23.roa (raw, json)
Hash identifier:          mESon+DdzpzPuW4C9roS4NmDvgpk4iq6pkey2B2INgE=
Subject key identifier:   86:64:63:AD:38:E1:9D:82:2F:FA:7D:C9:74:E7:CC:4B:EC:FC:87:9C
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B382191A7854EB53372D52880
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:91:a7:85:4e:b5:33:72:d5:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=9efebb73-a366-4fbc-98b8-b00384d870bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:a1:12:02:ba:28:56:95:55:be:84:df:c8:
                    33:ea:84:0b:1c:68:93:52:6a:93:a5:ad:66:69:2f:
                    c1:e0:f0:8c:cc:9c:9c:b6:55:a4:ac:09:5d:8e:37:
                    e9:bf:3a:88:cd:bc:95:8a:a3:94:c6:45:bf:ad:6c:
                    1a:19:a0:be:ba:b8:24:7e:0a:5e:94:16:4c:02:c0:
                    11:a6:3d:cd:b9:dd:e4:ba:9d:f7:41:26:12:dc:7b:
                    6b:af:a5:6e:08:48:5e:4c:54:9f:7b:75:d1:17:11:
                    3b:75:d8:21:9f:1d:f7:0f:7f:ef:52:e3:35:88:af:
                    98:31:69:8d:a0:19:81:83:04:5e:77:8f:15:6e:a6:
                    91:82:38:d3:15:e6:58:41:a1:3b:f3:c6:bb:c4:86:
                    f3:7b:02:03:36:2e:e2:c5:99:b1:fa:d6:77:58:db:
                    cb:07:82:42:05:c1:b9:cb:ef:5a:2d:ff:0a:e7:77:
                    3d:50:b2:d3:73:f7:bf:3d:ee:91:30:83:ed:6a:1d:
                    a8:78:7d:fc:d5:90:f5:84:b8:a3:50:3e:e4:18:fb:
                    30:2e:c3:61:c1:3a:b2:c3:c8:75:1a:a0:06:71:f4:
                    2d:9e:61:3a:f3:da:3d:b8:8a:eb:00:b9:ea:46:b0:
                    9d:7e:61:66:a7:5b:17:ec:a3:16:50:32:d1:f7:9f:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:63:AD:38:E1:9D:82:2F:FA:7D:C9:74:E7:CC:4B:EC:FC:87:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3d:d6:6f:3e:d9:34:62:ae:db:fe:f6:5a:2c:87:e9:14:99:
         b7:d5:b1:9f:50:a8:d1:8f:29:af:d0:b3:9c:35:15:76:5e:89:
         47:82:a0:e2:f8:ee:0b:7a:2a:12:39:6e:57:a8:75:18:b1:6c:
         eb:0e:ca:62:c5:c4:68:be:a4:60:c1:17:be:d7:90:bc:ad:b9:
         e6:1f:24:d0:ed:1f:d9:1a:cc:cf:14:8c:a9:dd:7e:73:26:0f:
         18:c0:b9:1a:11:a3:e0:43:b9:3a:86:40:41:ba:ed:ee:0d:09:
         8e:05:c3:7d:67:c4:4a:b2:7a:20:18:2b:17:e8:6b:6a:4f:52:
         2a:d3:d6:c0:82:6d:85:9e:ec:fa:e0:0d:ce:dd:1b:2e:f1:fb:
         bb:56:f9:8c:f4:ab:a5:71:83:ab:39:62:10:43:0e:d4:3c:2f:
         e0:63:fa:13:2a:1f:d4:ad:89:d4:4b:81:7a:5e:f9:b2:83:7e:
         ff:5c:d1:a5:24:69:84:7c:c2:97:dd:bc:32:14:b1:ae:98:d4:
         b0:56:37:47:7f:12:9d:ff:e6:55:38:40:98:70:1a:31:50:9b:
         c1:a9:48:da:a1:f6:31:eb:06:b7:ce:0e:06:c4:8f:c6:a4:1e:
         a9:c3:23:d0:15:b3:48:f9:35:b6:b9:84:94:9f:bb:c3:06:06:
         cd:7b:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:18:26 2025 by rpki-client