Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa
File:                     b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa (raw, json)
Hash identifier:          4c2/0oBQ2BwrsK4qLCJej7p4czur7kMLEHRBIzRcNs8=
Subject key identifier:   19:81:23:2E:18:4C:E8:6F:EF:A8:16:FB:BD:65:98:AB:1F:DB:38:7D
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B382193E3F3D4320069FB9310
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:93:e3:f3:d4:32:00:69:fb:93:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=8de83e16-716f-4bb4-a899-89983616e5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2b:c5:08:88:9f:54:2b:bb:44:af:d4:02:b6:
                    8b:71:4b:96:c9:6b:3c:25:73:9b:cf:ef:53:16:f5:
                    bb:dd:5c:60:67:11:14:72:3c:3d:5f:89:f8:63:f3:
                    95:b9:63:70:d0:8d:6b:86:27:34:2a:f2:17:46:a0:
                    75:de:9f:b1:f1:38:cb:29:26:d8:67:bc:61:b7:6d:
                    95:36:a3:c2:6f:60:66:cf:70:d8:ca:01:15:8e:f4:
                    f0:ef:69:c2:e7:18:ea:95:bb:2e:9b:23:e5:11:fe:
                    29:3b:3d:1b:a6:6d:4d:a9:92:d0:f6:e2:e0:cb:94:
                    5e:53:7a:5f:1a:50:71:09:92:33:45:09:63:f4:18:
                    e4:b0:81:04:a3:cf:84:81:4d:49:bb:0f:74:b4:73:
                    52:0a:78:13:50:88:66:c6:6f:93:94:9d:34:e9:d2:
                    70:db:f7:92:20:16:92:3e:5c:01:8d:cf:30:0b:67:
                    99:5c:82:4d:7c:85:29:d5:ed:24:2d:03:61:c9:c8:
                    03:8e:50:98:08:f6:72:d5:dc:27:82:18:2a:d5:fa:
                    fb:c5:0f:72:4d:f0:3e:66:d1:ee:70:b3:18:9b:28:
                    84:a9:ea:85:42:02:e8:50:c0:c4:5a:b5:4b:8f:bd:
                    a3:2e:16:00:53:02:03:a0:df:3d:b7:24:dd:8c:a9:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:23:2E:18:4C:E8:6F:EF:A8:16:FB:BD:65:98:AB:1F:DB:38:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e9:c3:19:04:89:98:0f:61:47:a9:f5:36:95:b1:f3:28:2c:
         6e:49:af:71:31:98:4c:ff:22:64:2e:db:44:a3:c6:13:fd:14:
         fe:54:36:e6:c1:f8:3e:64:6c:29:d1:13:61:6c:60:9f:26:61:
         26:30:91:a0:72:b0:5a:7f:a9:d6:14:aa:1d:5b:ed:7e:d5:c9:
         f3:bb:6b:56:dc:60:d5:cb:61:99:09:14:12:72:6c:38:9b:2d:
         2f:a5:40:ca:2a:6d:a3:f5:1f:df:85:51:74:c7:35:8f:00:ee:
         69:36:68:20:01:73:e7:1e:47:ba:a2:32:0f:3f:ba:a2:fb:23:
         28:75:e0:0f:da:ba:b5:73:f3:9f:eb:96:f4:f5:2b:ec:9c:b8:
         fd:9f:92:67:c1:89:f2:31:d8:29:8c:13:17:bd:3f:4a:50:b8:
         6c:25:af:cd:bf:99:12:86:c5:ff:e5:65:2f:c2:0e:df:04:a2:
         e5:10:1b:a9:6a:52:58:93:af:29:8d:e6:8c:d4:9d:85:bd:03:
         4a:82:f7:d5:5a:a7:37:9e:8c:5c:f2:d3:fd:be:bb:72:5e:70:
         c2:fa:3b:05:71:d2:c8:e0:65:11:51:b5:d9:dd:f9:6d:0e:67:
         65:de:9f:3c:09:3a:24:2c:14:b8:91:73:b6:35:a6:4a:46:d6:
         5b:3b:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:57 2025 by rpki-client