Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/afd0f3ca-32c4-3aec-b7f7-703c244707cf.roa
File:                     afd0f3ca-32c4-3aec-b7f7-703c244707cf.roa (raw, json)
Hash identifier:          aToaTw5iNvKWX/5FlSk8qg5Hlq+AlCd23i1M3GGRuMA=
Subject key identifier:   EA:F3:21:29:DF:02:D2:79:DE:29:03:B5:5A:21:0E:98:EE:52:C2:60
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B1C36C9C78267AF1626C73A00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/afd0f3ca-32c4-3aec-b7f7-703c244707cf.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c9:c7:82:67:af:16:26:c7:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=dbf786d7-7554-4178-a0ec-db0f21cc3c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:b3:4c:c5:ed:fe:5b:8b:95:3d:bf:3d:dc:
                    87:07:74:ce:9a:56:25:b0:1e:a5:40:09:a5:8d:4f:
                    ea:91:9c:85:b3:24:4f:a1:48:04:40:97:19:e7:f2:
                    21:7a:f3:33:49:53:20:96:85:6b:c6:8d:70:ba:f1:
                    09:dc:46:5e:89:51:88:a6:c1:cc:ea:ed:96:04:58:
                    a6:1c:f7:21:b8:37:01:0c:a1:87:d7:b2:15:76:d9:
                    d9:82:0d:25:c0:24:bc:a8:51:60:a2:ee:8c:8a:d5:
                    e2:98:6b:8b:ed:7d:58:8d:88:b8:da:89:64:9c:cf:
                    af:f1:77:41:dc:ab:1d:fd:78:5f:98:67:5c:71:d0:
                    49:ef:d3:e3:f2:50:9f:4c:96:c3:a8:7c:c7:3a:e9:
                    be:b2:f9:42:3a:03:d8:d8:80:cb:18:74:86:54:0d:
                    df:61:8e:6c:0c:7f:65:67:d7:56:3c:05:b5:e6:ca:
                    cf:fc:1a:92:f1:ef:dd:da:bb:b2:1a:54:cc:43:36:
                    3b:89:af:a4:b1:44:82:6f:3b:23:7a:92:f9:bb:6c:
                    f1:ed:0e:f4:c9:e4:7a:df:7e:f9:83:d7:47:46:23:
                    9c:13:61:cf:13:b9:7e:60:9c:b1:bd:f5:bc:44:30:
                    50:61:98:c2:7a:35:d6:db:80:eb:24:84:07:65:89:
                    38:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:21:29:DF:02:D2:79:DE:29:03:B5:5A:21:0E:98:EE:52:C2:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/afd0f3ca-32c4-3aec-b7f7-703c244707cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:33:55:ec:d0:9a:54:d0:ed:40:6a:5d:99:d4:50:12:fc:
         62:03:9d:82:aa:43:5f:08:a7:4b:7c:08:ba:40:fc:f3:3a:07:
         f1:83:45:83:af:b3:21:e0:ff:db:5f:90:86:6c:d8:70:92:bd:
         d6:d6:c0:83:9c:e8:d6:07:4a:21:3c:1d:37:aa:50:3c:18:5a:
         c2:55:2a:8b:68:7a:94:c9:79:de:46:2e:97:1f:9c:37:4a:f2:
         c5:d9:16:35:5e:20:a6:db:0c:09:28:fa:ce:f5:aa:ac:79:2b:
         2c:ce:ea:65:ba:a4:83:6a:ed:0a:96:2b:c3:84:df:df:6a:68:
         fd:0e:86:c9:2b:a4:49:7c:74:b0:00:1c:44:9c:0a:a8:9e:68:
         ba:fc:e5:af:e3:ac:c3:e0:2d:70:64:cd:14:c3:e6:7f:1d:0d:
         90:3a:a0:61:0a:91:bc:54:31:a4:01:6f:79:a0:d4:08:b7:e2:
         ad:8b:9c:bc:11:1c:a1:d1:45:38:3b:da:84:bf:c3:d3:55:c0:
         0e:b4:26:35:00:c4:98:e7:db:ac:99:8a:d6:04:78:cd:99:f2:
         5a:fd:88:81:56:21:6e:d4:16:71:62:6c:b7:6f:df:7e:d4:42:
         bb:52:77:72:5f:80:8a:b9:cf:5f:5f:f4:89:86:48:4d:07:d1:
         c6:a4:1a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:35 2025 by rpki-client