Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/64794b70-91e0-3127-ba73-1c57c202bdcb.roa
File:                     64794b70-91e0-3127-ba73-1c57c202bdcb.roa (raw, json)
Hash identifier:          DB9qynVZJjPMFo/otOsWbO7RNVbz5ohlV6uQA77juEw=
Subject key identifier:   AB:AA:3C:4A:DB:31:83:6B:4B:AA:68:36:42:07:82:F8:D0:02:72:47
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B434C58A7E53F4FEBE6C97900
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/64794b70-91e0-3127-ba73-1c57c202bdcb.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        161.69.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:58:a7:e5:3f:4f:eb:e6:c9:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=8e99184b-aa4d-4f01-b411-75e23049af7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:07:d7:5b:31:cb:79:6c:12:77:b7:b8:0e:
                    b3:3b:bf:ed:c6:3b:4d:da:1a:95:4e:23:8c:f6:72:
                    8b:aa:b4:f2:25:31:11:4e:b4:20:62:51:01:68:87:
                    32:6e:a5:88:c2:33:e5:15:e5:af:ef:f2:2b:70:05:
                    b3:ce:7e:94:66:93:87:91:0b:a0:dc:99:67:37:29:
                    37:19:b8:f9:91:33:a8:2a:4a:35:2e:2f:4d:de:cd:
                    04:9c:8e:5f:ac:bb:8b:f5:fd:56:40:bd:ac:db:f2:
                    6e:68:7a:46:cf:9c:49:68:07:31:9e:3e:06:f1:9e:
                    24:0b:cb:bc:c4:55:f6:dc:9a:67:64:e8:22:8b:d3:
                    c0:84:99:e2:32:98:08:e9:bb:e0:c0:8a:a4:83:64:
                    06:8a:d5:87:84:9e:3f:08:7e:3b:2b:c7:b1:28:7c:
                    c5:9e:bf:42:00:7b:96:95:36:b5:4c:09:4f:38:23:
                    4a:db:cb:50:4e:3f:6f:46:07:2a:24:06:9f:14:65:
                    d2:7b:84:42:54:51:ec:b5:1d:f1:35:f6:2c:93:3b:
                    1a:47:8f:06:f7:c6:15:04:d9:a0:86:86:4e:cb:3c:
                    a3:4b:3d:b3:23:53:a3:b0:a3:40:c6:de:91:2c:51:
                    5a:aa:bd:36:4e:eb:8d:71:44:be:3c:52:2e:40:3b:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:3C:4A:DB:31:83:6B:4B:AA:68:36:42:07:82:F8:D0:02:72:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/64794b70-91e0-3127-ba73-1c57c202bdcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:db:68:c8:84:a8:3d:6f:f2:9a:54:7f:75:fc:b4:be:eb:6b:
         87:67:01:a7:a4:85:96:4b:32:85:58:e2:d1:fd:c1:a3:8e:5c:
         36:c8:54:33:f7:0f:67:f1:68:a0:d5:3c:10:40:d1:97:b7:a5:
         68:9b:df:16:95:a3:e8:48:23:9a:d0:40:78:44:33:fa:03:c2:
         98:03:83:3d:97:d8:84:b5:b9:02:31:96:e8:9b:45:dd:ed:09:
         0f:86:31:28:10:ab:37:16:28:f0:50:fd:91:0b:e3:88:d3:d7:
         22:de:62:fa:07:70:f7:36:32:32:7b:89:6b:fa:68:a8:0f:6e:
         3a:fb:16:96:2f:04:ae:b9:fd:ee:b2:14:e3:10:67:ab:4e:00:
         56:bb:09:bb:61:92:a6:e2:4d:92:7a:8e:a7:0b:27:0f:0e:5a:
         78:fb:7e:72:c1:41:a8:e3:66:fd:c5:8d:60:1e:02:78:ca:3f:
         a3:01:4f:d4:fd:60:3d:ba:02:d8:e5:b1:81:a8:30:78:da:96:
         39:64:d7:12:34:b1:fe:50:19:4f:7a:63:55:16:6d:3c:f1:7d:
         2f:6d:41:a6:86:3f:cb:06:93:36:9f:f5:16:a0:48:d8:67:27:
         88:43:f4:62:57:c6:96:89:8f:91:ae:24:be:a6:76:e1:f2:b0:
         5d:77:e4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:58:35 2025 by rpki-client