Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa
File:                     aae72d5b-9be8-3703-913c-329e57bf9b39.roa (raw, json)
Hash identifier:          RS5saIvG/gvKiOyIJefPlcrReeTRs/ddn+9dEZkPTd0=
Subject key identifier:   3E:75:BE:56:5A:F1:9C:02:E9:E1:7F:65:39:08:F3:75:E5:37:29:B5
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B38219A2ABF58E757C3A7E600
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9a:2a:bf:58:e7:57:c3:a7:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=69a2c2c0-d2af-4fa9-a01b-18bc4b092004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:8a:c5:35:7e:f9:85:03:e8:f9:5a:39:5d:
                    e4:0d:25:fb:25:73:4a:5a:e0:f0:52:6a:7d:59:97:
                    7c:98:a0:3a:22:0d:83:cb:11:51:b7:40:63:a4:cb:
                    8c:28:d1:04:51:91:48:9c:51:86:8d:e4:71:e0:89:
                    2b:f6:3b:ba:5d:63:64:c5:f4:a8:2a:60:f5:68:21:
                    33:7c:49:62:65:9d:6b:00:fc:66:e9:31:75:46:85:
                    c7:ea:ab:05:5c:15:f0:2b:af:20:e1:d1:f9:2d:ea:
                    6a:c7:69:74:1e:d3:43:dc:da:74:d3:b9:40:21:99:
                    58:60:e5:19:2f:36:c3:13:3d:48:19:42:0b:c9:26:
                    0f:2f:ee:85:d3:38:c0:0e:a7:db:4a:0e:1b:66:0c:
                    ee:fb:e2:5c:f0:7c:81:6b:5e:5e:86:71:c5:cc:32:
                    0e:99:34:4f:e3:a4:0c:4b:f8:a3:08:54:fe:52:0f:
                    6a:a2:3f:44:8f:7c:2b:63:bb:fc:e6:cd:03:49:d8:
                    fd:29:3f:57:cb:73:7b:08:a5:d3:b5:cd:a8:63:4a:
                    10:5d:c8:fa:0c:aa:cb:e6:58:ae:1f:0a:09:d7:ce:
                    1c:51:d0:b1:41:32:54:fc:21:4a:3a:c2:85:35:4b:
                    be:93:a0:77:d3:fa:a3:59:ed:37:6f:6a:9f:cd:50:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:BE:56:5A:F1:9C:02:E9:E1:7F:65:39:08:F3:75:E5:37:29:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:22:24:a3:68:3d:51:24:cd:22:07:ff:4b:4e:fe:a4:8e:
         0f:0b:07:01:4f:57:df:35:50:e7:a8:77:e1:6c:e5:25:6f:d3:
         aa:4c:1f:21:5c:bd:bc:66:5b:a1:26:3e:14:4a:9c:44:e6:df:
         d7:2c:36:c4:af:3a:9a:7a:9c:b5:15:b3:37:27:67:56:31:f6:
         ec:66:88:8d:34:e4:ae:6f:4a:62:83:36:cb:ef:a1:07:a1:63:
         bb:08:66:9e:9a:8a:f0:7f:b5:ab:fe:94:52:8f:29:2b:42:4f:
         dd:44:f7:7c:fa:c3:69:96:36:9b:c5:50:75:9d:d7:fe:c5:5f:
         62:f3:ad:d4:21:2b:5f:83:87:79:33:53:ef:cb:61:b4:cc:2f:
         d3:99:61:c9:fa:89:61:2b:6b:c1:21:90:bd:c4:33:e4:63:cf:
         83:82:44:57:98:54:bd:82:8d:f0:4c:79:fe:d2:3d:d1:29:f6:
         dd:dc:f6:aa:73:ab:e0:1d:78:91:cc:dd:a5:12:df:88:e3:02:
         52:5b:26:b3:5d:7a:39:d4:0c:79:13:d3:36:f7:29:af:5c:1c:
         2f:5d:df:a6:45:82:1d:db:6c:fd:11:42:fc:10:45:b6:13:c9:
         7b:25:2c:13:fe:b5:22:70:d7:3d:e0:aa:67:6b:d2:27:c8:8b:
         81:93:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:39 2025 by rpki-client