Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/77fa526f-7c17-3055-a646-b6cf40b10ecd.roa
File:                     77fa526f-7c17-3055-a646-b6cf40b10ecd.roa (raw, json)
Hash identifier:          COzMMthgbUjOzMjj4JwBBSJauJ5C/78wDIf3TyzahXM=
Subject key identifier:   03:31:95:CD:06:D4:8F:00:DC:6F:A7:81:1A:5D:83:4F:38:CE:21:84
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B382193B075EE334657D3D9A0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/77fa526f-7c17-3055-a646-b6cf40b10ecd.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:93:b0:75:ee:33:46:57:d3:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=4b2a6006-37f8-4488-874d-7e859095543b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:ab:8a:37:0f:54:29:0c:c1:ee:97:ca:da:
                    b7:8b:d1:43:0e:4d:15:2b:83:82:87:59:dc:0e:59:
                    bd:47:d3:26:38:4f:9c:34:a4:f1:a1:85:ff:8d:c6:
                    3b:bd:e3:25:7b:1f:a8:49:68:d9:d5:0c:da:6c:70:
                    82:0a:2f:7d:81:f1:67:22:53:33:c0:f2:c5:5a:b4:
                    5c:ea:0e:d7:48:f6:1b:76:73:3a:55:83:16:0f:36:
                    3d:99:fa:df:33:37:3a:1a:20:53:49:a2:bc:a0:93:
                    7e:a4:fc:40:e3:39:0b:44:08:0d:fd:d0:45:29:4e:
                    38:87:7e:1f:35:ae:7d:b7:11:02:94:c8:40:19:90:
                    f5:21:d9:3f:5d:b5:a8:3b:47:9f:c4:f2:7f:2e:93:
                    25:b7:9b:b6:12:75:d8:1c:74:0c:96:12:5c:50:43:
                    ec:63:78:ea:b4:f0:51:75:ab:2d:13:a2:fd:41:07:
                    c1:ba:6e:59:b0:61:05:ee:f2:d1:b1:4f:26:13:36:
                    61:83:79:c9:fe:f1:ff:37:f6:d0:90:5b:fd:0a:ed:
                    33:e6:ef:94:8f:78:da:94:71:e8:95:40:ee:a8:1d:
                    56:15:4f:eb:0a:98:3d:86:00:eb:b7:f8:dc:fe:ac:
                    be:a2:07:5e:3a:62:d6:fb:46:7b:49:d0:ea:c9:d0:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:31:95:CD:06:D4:8F:00:DC:6F:A7:81:1A:5D:83:4F:38:CE:21:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/77fa526f-7c17-3055-a646-b6cf40b10ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b8:16:72:8f:43:fe:75:14:15:b4:ab:35:04:9b:c7:57:2f:
         68:5f:88:a9:a5:8d:d6:df:aa:ac:0a:20:cf:a3:a9:97:d0:a3:
         62:44:1c:d6:bf:45:6b:2c:ae:25:a3:d6:15:a2:05:c8:ca:60:
         d3:fb:b3:bb:92:dd:7e:9b:dd:5f:c1:c9:93:95:20:c8:19:74:
         9e:05:73:b4:87:b3:fa:ae:79:66:8f:36:7a:9b:83:df:c2:cf:
         06:f0:87:b6:3d:1d:36:d4:08:0e:2b:df:66:a3:e9:f9:48:23:
         c6:6b:84:ca:76:ee:34:4c:8e:88:f0:dd:08:cf:d6:72:f4:df:
         58:9c:7c:fb:91:8f:f1:bc:12:8b:64:52:f2:6b:2a:39:b7:8f:
         d5:ea:0b:90:01:6d:b4:f8:b1:28:90:cb:48:3c:7a:c9:0e:84:
         95:3c:13:a2:c6:93:46:f3:98:8a:e5:01:cb:6d:7c:d4:3e:e2:
         40:ab:df:ff:ee:6b:f5:e3:2d:73:e3:a5:20:d2:44:6d:68:f8:
         30:4b:f0:89:f8:e7:34:a6:e1:6d:70:c6:1e:65:64:2e:ad:1f:
         ce:7a:6a:c6:0c:4f:2e:3d:0c:e3:6d:44:f2:c4:af:9b:a8:aa:
         0b:64:05:11:58:2d:37:ec:f8:28:f7:42:fe:2d:b2:6a:29:8d:
         d6:21:ef:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:41 2025 by rpki-client