Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ad8f74b7-8586-3a65-9fe2-dfcf575b7bb7.roa
File:                     ad8f74b7-8586-3a65-9fe2-dfcf575b7bb7.roa (raw, json)
Hash identifier:          +bbzvIbpWjvkr3qg3kwiUu9dNZOOHdjncafFwK9Ynvs=
Subject key identifier:   70:D8:80:77:24:AD:C6:D5:54:3D:09:36:5A:2A:39:A7:F8:43:B8:D8
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B3821918B5676E82185A16B80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ad8f74b7-8586-3a65-9fe2-dfcf575b7bb7.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:91:8b:56:76:e8:21:85:a1:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=8f95b011-4dbc-426a-8139-e71b13813d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:18:81:b2:9b:c3:a0:78:aa:d0:46:3c:b6:
                    3e:29:e1:fc:cf:c1:59:86:64:96:78:2e:02:79:bb:
                    f2:07:30:61:2c:a0:c1:9e:6d:9b:fe:b0:43:ea:01:
                    42:08:a1:cd:45:e7:d9:94:21:bb:5e:63:16:2c:6b:
                    ad:bd:ca:fc:fb:2f:76:10:0a:04:03:6a:33:70:18:
                    a6:50:40:ff:88:f3:98:36:a2:ec:00:ca:ad:c6:60:
                    60:c1:73:25:89:c7:22:70:f9:a6:99:79:1c:7b:82:
                    da:65:d7:f2:47:94:ac:c2:11:bc:cf:57:b4:68:81:
                    86:01:c3:2d:13:fe:0c:00:99:af:e2:70:7d:b9:81:
                    dd:4d:71:b4:85:49:08:9b:f3:2c:8c:c3:a1:7c:1c:
                    be:98:6e:d1:e4:c7:f0:aa:b8:cb:c3:7a:b5:bb:42:
                    d3:cc:cb:cf:18:77:56:26:0c:12:e1:0b:10:da:4c:
                    93:a3:e3:fa:b9:d6:cb:a1:40:a0:16:36:fe:5a:e0:
                    af:71:28:6b:79:58:a3:29:98:73:aa:9b:8c:2c:b7:
                    83:ed:d9:15:31:a7:ce:1c:16:5c:20:10:b5:47:48:
                    1e:b0:52:80:8e:29:94:a9:51:a6:df:29:3f:15:3d:
                    7e:bd:ed:ee:49:5e:c1:2c:86:a6:16:8e:56:48:f7:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D8:80:77:24:AD:C6:D5:54:3D:09:36:5A:2A:39:A7:F8:43:B8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ad8f74b7-8586-3a65-9fe2-dfcf575b7bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c3:c3:f5:eb:c6:06:14:38:d4:c7:91:5d:9e:34:a7:b4:bc:
         b8:43:8b:a5:a3:99:da:42:16:6c:e4:eb:6e:2a:d0:70:d5:aa:
         b5:b2:bd:4b:28:93:11:ac:f1:b4:0c:5c:97:12:00:ef:82:98:
         62:2e:f6:55:93:0b:ce:38:7e:48:cc:db:6e:e3:98:02:b5:71:
         fe:81:f8:24:84:20:97:01:4b:30:e1:2d:8e:ca:ea:55:66:49:
         d8:7e:aa:4f:38:2d:fe:66:f3:39:08:83:fd:5b:e5:08:70:72:
         18:41:e0:6f:b9:40:cf:bf:4f:34:04:39:d7:98:c2:1d:b0:73:
         ce:cc:02:bc:18:49:1b:d3:db:f3:0c:ea:d6:e7:c4:d2:30:ce:
         21:af:32:d3:f2:1c:45:2c:a7:52:53:ff:48:95:1b:c2:97:ab:
         a0:55:56:03:dd:c2:e4:82:d1:54:4d:88:73:b4:7a:5b:45:93:
         a5:0e:20:f9:b9:1f:8d:ed:13:58:66:bb:63:31:ab:49:b2:c3:
         7e:83:e2:19:80:d6:b7:ab:ca:ac:b0:a4:45:58:d6:b9:04:ef:
         b0:61:68:d1:65:23:3c:9a:bb:7f:03:e4:b4:ed:ef:85:d8:d9:
         53:f7:9a:62:6c:20:5f:b1:1d:e6:34:8a:dc:a3:f9:3d:3a:b3:
         95:75:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:37 2025 by rpki-client