Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
File:                     bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa (raw, json)
Hash identifier:          2j++YBJPpVohvjmMdpZGayEuJgIEFOFq9NLBFWvfL9c=
Subject key identifier:   CA:9B:36:D5:05:2C:65:6C:04:75:54:23:78:39:2B:8D:0E:A1:F4:DF
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B38219EC29A75A45DAFC82600
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9e:c2:9a:75:a4:5d:af:c8:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=32f963c1-0116-4049-bab1-50a61a8ea58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:b9:87:dd:85:3c:45:d3:a7:54:8c:71:ad:
                    6f:35:21:3f:59:0a:46:12:45:40:54:da:39:f2:08:
                    3d:26:c8:45:90:1a:f5:24:13:15:87:42:b0:58:a9:
                    d9:e9:db:b4:4d:36:5e:16:c8:e4:b6:b5:ea:3b:e3:
                    e7:be:3f:a4:53:ac:8d:59:6b:d5:32:59:a3:3a:34:
                    b3:21:14:bd:e6:ca:d1:5e:f0:bb:4d:63:41:ff:c1:
                    d1:f3:64:04:5b:ce:0a:b5:5f:17:05:d4:a6:9d:9d:
                    98:cd:be:fb:72:14:5e:cb:ae:f7:4c:b2:0c:92:45:
                    b8:a1:ec:ab:68:db:a8:22:1c:71:78:4a:db:45:80:
                    fc:f4:9d:cb:50:fb:66:8c:0f:78:24:26:39:b8:3b:
                    51:7d:fc:31:b8:00:cc:7f:16:00:94:49:e9:35:f7:
                    62:b7:30:01:19:41:60:21:f5:e1:80:c9:7c:4b:3b:
                    f7:f3:2e:69:f6:f6:f8:67:a5:d2:73:92:21:22:f3:
                    a1:e6:fd:06:ab:cd:29:93:fd:57:e1:ba:4e:e9:93:
                    1c:64:1d:83:60:f2:52:37:15:a3:40:96:23:99:d6:
                    c0:ab:69:60:0e:07:ef:72:de:b1:9f:3b:1c:15:68:
                    c0:f4:42:3c:ec:e5:10:5f:6d:4e:b7:16:ad:2f:a1:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:36:D5:05:2C:65:6C:04:75:54:23:78:39:2B:8D:0E:A1:F4:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:a3:fa:83:f6:d9:b3:ac:a3:da:ad:0f:0b:1d:5f:07:51:
         fe:3f:1f:0b:ca:6d:7f:8d:77:70:ce:ab:6a:9f:5e:eb:70:90:
         77:6b:1d:75:c0:f1:ed:6b:01:ff:26:72:98:15:fb:79:e3:06:
         91:bb:a8:d9:36:e5:16:d2:cf:c3:c4:39:6f:b2:4e:58:0b:2e:
         ff:1b:a3:16:41:80:03:95:9e:7e:a5:34:f6:1b:48:8f:bc:35:
         32:74:6b:1d:c7:77:30:e5:c1:da:71:cc:fb:b9:1f:3f:15:10:
         f9:12:f8:4d:b1:1b:6c:d3:48:c6:9d:d7:66:83:39:13:4a:eb:
         3d:01:e1:63:a6:7d:02:67:3f:32:1f:39:db:9d:af:97:be:ae:
         30:51:b7:fe:aa:78:6b:b4:bf:1a:61:00:60:b3:58:0a:9b:c9:
         82:3c:44:31:b6:a4:70:98:c1:a2:89:49:da:55:37:5c:6f:1b:
         dc:28:37:1e:82:1a:2f:6b:a2:45:ae:0c:4e:25:1b:63:e5:64:
         2f:31:86:57:e5:fc:91:62:13:bc:25:72:d5:b2:c1:b1:9d:d8:
         9d:be:f1:96:99:6a:37:22:5e:38:e9:5a:33:1e:e6:69:4c:af:
         ae:fa:4e:c1:8a:40:2f:d4:bb:29:91:93:bd:93:54:fb:a0:95:
         5d:61:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:33 2025 by rpki-client