Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/63bde973-d629-3989-9ce1-af9b09d4a78f.roa
File:                     63bde973-d629-3989-9ce1-af9b09d4a78f.roa (raw, json)
Hash identifier:          38GK+IN/8dVe22bFvSgYDQdTD8OV1ACLBiAazdoV528=
Subject key identifier:   9A:64:B1:0E:73:06:EE:12:6E:17:AA:8E:59:E4:D9:42:C8:23:8F:99
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B3821926AAE9B9E91CAB46F00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/63bde973-d629-3989-9ce1-af9b09d4a78f.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        161.69.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:92:6a:ae:9b:9e:91:ca:b4:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=1b89a6bd-c9b0-4d13-892d-36bff095ca6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4d:56:ad:0a:71:dd:1d:b0:b7:65:b9:a5:dd:
                    f8:b6:12:a4:15:69:97:55:75:95:76:e7:db:d0:d6:
                    a4:82:f0:3a:26:d1:12:af:dd:b9:45:a5:49:02:cb:
                    06:ae:a0:d3:7c:94:98:bd:51:08:e1:04:79:63:b6:
                    26:fa:0f:5e:ba:ed:50:9c:70:6d:a9:8f:39:c4:3a:
                    c3:b8:c3:ce:ac:43:8f:eb:c1:72:bc:00:14:29:02:
                    5f:7d:dc:3b:cb:b8:b3:af:fa:90:cb:3d:03:19:c4:
                    b9:1e:76:8d:14:03:17:02:7b:07:f8:78:5f:bc:98:
                    c7:3a:eb:51:5e:d3:01:01:34:6b:2d:0a:8c:0d:97:
                    c8:dd:8a:12:c4:5f:df:ee:95:37:36:d2:75:ba:29:
                    08:f6:60:d4:0e:a5:cb:4e:84:46:93:6f:c3:c8:bc:
                    7b:21:84:c5:64:08:b1:3e:cb:20:bf:79:6a:60:88:
                    9b:32:f5:ad:fa:73:76:15:1f:d4:ce:12:61:2b:d6:
                    f9:d5:23:a3:a5:f0:b9:66:c8:fd:2f:1e:69:a0:2c:
                    b1:45:63:0a:1a:fb:12:c4:97:14:2e:35:d1:95:ba:
                    28:33:8a:2a:a5:6b:8f:36:a5:e3:16:9c:ca:7e:84:
                    3b:b4:c7:ef:4f:eb:01:5e:a2:0d:3d:ed:ec:78:75:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:64:B1:0E:73:06:EE:12:6E:17:AA:8E:59:E4:D9:42:C8:23:8F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/63bde973-d629-3989-9ce1-af9b09d4a78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:90:0f:2b:15:47:0a:fe:3c:25:b0:ec:15:a2:9f:c2:c1:
         75:73:20:21:6a:88:e7:80:4d:c3:8b:f3:ea:14:2c:0b:ba:1a:
         41:5b:6a:d7:d7:1f:27:0b:e1:d3:b9:13:4c:7c:0a:71:3a:f0:
         a2:7d:a6:52:a7:3d:86:2e:71:ff:37:c9:a7:66:ab:c6:55:f6:
         51:f3:81:61:fe:1e:ff:b1:0a:bb:d1:0d:79:01:9f:6f:4a:dd:
         8f:ba:0d:82:84:85:32:2b:8a:6f:40:34:26:65:e6:a2:36:33:
         67:1d:80:dd:74:61:b9:9e:46:a0:4a:a3:2d:d0:f7:db:41:1b:
         73:3d:05:2c:b4:83:42:17:25:04:6d:00:2f:6a:35:23:11:da:
         77:78:d0:c0:e0:4a:0a:97:b4:ec:9f:c3:c4:5a:c9:78:cf:b4:
         f1:99:00:6b:b1:63:4d:33:fd:64:10:01:85:64:c1:21:d1:5d:
         29:86:5a:7f:62:d1:50:5e:8d:38:95:a8:b9:47:70:03:ed:17:
         8d:28:e9:50:08:92:97:f7:d0:57:7d:d2:e2:dd:c6:4a:41:87:
         13:bc:d2:3e:3a:24:6b:1c:35:c7:66:61:57:10:3a:05:75:ac:
         f0:a7:ea:ea:08:3f:5e:bd:a7:c3:84:10:4b:10:3e:98:d6:b5:
         ba:90:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:56:15 2025 by rpki-client