Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa
File:                     b382ef6d-a70e-34fc-a854-25e1353abdf6.roa (raw, json)
Hash identifier:          G7pjEOjvc8//dRjEUxpQ4BZ6RDWODk9Sa6OPoIYSfWs=
Subject key identifier:   84:84:30:62:5D:F1:C2:FA:3D:46:3A:60:DE:D5:E2:65:A4:C3:8A:FA
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B382192B2C6824A31C189F200
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        161.69.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:92:b2:c6:82:4a:31:c1:89:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=73815458-53c6-496d-bce2-588cd389f2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3f:f8:2c:f5:88:ab:90:e3:28:b4:ee:64:2a:
                    67:83:5c:b8:78:89:75:28:1c:a0:1c:47:8d:40:63:
                    95:4d:24:2a:31:95:c2:b6:b7:e3:73:38:95:44:cd:
                    87:82:b8:2b:c2:ba:75:e9:b1:b7:82:10:65:e5:bf:
                    a0:2d:b3:6e:cc:55:9d:cf:a1:69:0c:75:7a:6f:64:
                    3e:f5:e3:dd:a5:b6:5d:49:ea:0b:88:7e:1b:bb:7b:
                    3c:76:88:fb:1b:5d:78:23:c6:7a:09:41:af:29:b2:
                    15:5a:65:93:47:01:b9:7f:76:1e:47:39:37:01:34:
                    ae:9e:43:fb:bf:e3:78:9a:a4:41:52:4c:94:1b:9c:
                    ad:50:f5:ea:3f:7c:4d:5f:61:2f:0e:ef:fb:6f:c0:
                    25:9c:9b:64:68:05:3b:3d:d9:8c:0c:a0:92:2b:4b:
                    91:9f:a3:c7:84:4f:6d:20:7f:63:dc:b3:b2:ed:56:
                    39:fb:1a:60:3f:ed:c3:82:65:c3:7f:e9:fe:82:3a:
                    ee:99:e8:d3:e7:d3:e5:02:f7:ef:02:1c:26:89:30:
                    49:70:a1:bf:12:9c:39:04:94:23:a0:a2:c3:f5:7b:
                    e2:b8:32:3a:55:3f:cf:b2:cc:c4:92:18:f1:dc:00:
                    34:af:ae:09:e7:21:60:18:b3:56:68:32:8b:e4:f8:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:84:30:62:5D:F1:C2:FA:3D:46:3A:60:DE:D5:E2:65:A4:C3:8A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:82:78:54:5e:b7:83:f5:d4:83:ca:e6:e8:0b:8f:e7:b4:
         20:e5:82:d9:ae:53:ad:a4:82:66:c0:b7:e9:d5:a0:79:89:09:
         7b:35:b2:ef:b1:7c:a1:ae:5f:44:79:39:2f:53:6f:b9:01:da:
         20:d7:60:89:23:4c:ed:21:12:34:31:e1:45:3b:c6:a4:1e:52:
         44:73:91:c6:f7:e4:f2:23:82:00:36:7f:2c:d3:2c:c9:cd:02:
         5a:d4:df:04:27:e3:5b:16:e4:ce:3f:1c:31:c4:ff:66:bd:2a:
         0c:3a:ab:7f:8d:0f:1e:a2:c2:37:9e:57:23:d6:df:cf:a1:ac:
         ca:b7:fc:29:97:e2:fa:a5:58:92:aa:08:82:e2:27:88:b3:97:
         a7:c1:f4:24:6b:65:48:28:37:4f:7b:c1:33:29:e3:06:47:13:
         a2:92:c4:f2:78:57:56:40:f6:c4:c7:99:ef:99:82:a9:bd:93:
         88:df:d5:7d:68:b1:5b:05:97:fa:55:37:c5:99:de:fb:5e:87:
         22:41:07:3a:99:3e:84:66:3d:be:f7:a9:2e:63:77:1f:15:1f:
         80:a9:f8:37:fe:3a:f0:fd:92:1b:66:1d:a2:e3:4a:c5:95:cc:
         33:14:74:aa:b8:f1:49:65:3b:13:f4:4c:f2:a2:38:9a:c7:be:
         1e:ce:a2:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZKyxoJKMcGJ8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
NzM4MTU0NTgtNTNjNi00OTZkLWJjZTItNTg4Y2QzODlmMmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj/4LPWIq5DjKLTuZCpng1y4eIl1KBygHEeN
QGOVTSQqMZXCtrfjcziVRM2Hgrgrwrp16bG3ghBl5b+gLbNuzFWdz6FpDHV6b2Q+
9ePdpbZdSeoLiH4bu3s8doj7G114I8Z6CUGvKbIVWmWTRwG5f3YeRzk3ATSunkP7
v+N4mqRBUkyUG5ytUPXqP3xNX2EvDu/7b8AlnJtkaAU7PdmMDKCSK0uRn6PHhE9t
IH9j3LOy7VY5+xpgP+3DgmXDf+n+gjrumejT59PlAvfvAhwmiTBJcKG/Epw5BJQj
oKLD9XviuDI6VT/PsszEkhjx3AA0r64J5yFgGLNWaDKL5PiDoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISEMGJd8cL6PUY6YN7V4mWkw4r6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjM4MmVmNmQtYTcwZS0z
NGZjLWE4NTQtMjVlMTM1M2FiZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFd+gnhUXreD9dSDyuboC4/ntCDlgtmuU62kgmbAt+nVoHmJCXs1su+x
fKGuX0R5OS9Tb7kB2iDXYIkjTO0hEjQx4UU7xqQeUkRzkcb35PIjggA2fyzTLMnN
AlrU3wQn41sW5M4/HDHE/2a9Kgw6q3+NDx6iwjeeVyPW38+hrMq3/CmX4vqlWJKq
CILiJ4izl6fB9CRrZUgoN097wTMp4wZHE6KSxPJ4V1ZA9sTHme+Zgqm9k4jf1X1o
sVsFl/pVN8WZ3vtehyJBBzqZPoRmPb73qS5jdx8VH4Cp+Df+OvD9khtmHaLjSsWV
zDMUdKq48UllOxP0TPKiOJrHvh7OoqI=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:02:04 2025 by rpki-client