Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c067990c-2cac-356d-926a-9fe19dcfde30.roa
File:                     c067990c-2cac-356d-926a-9fe19dcfde30.roa (raw, json)
Hash identifier:          FIhIydQ5/9cA+H8M8R48EP43FNXgbwtziAgFWoSKZtM=
Subject key identifier:   4C:26:28:6C:48:41:B4:3D:52:E2:2C:A5:D2:A6:B0:8B:4C:E7:E2:D3
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B382199749A58A66A2E0AC0E0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c067990c-2cac-356d-926a-9fe19dcfde30.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        161.69.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:99:74:9a:58:a6:6a:2e:0a:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=52dbfba6-3957-43db-8eab-ee1a836f8d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:d7:29:8f:27:20:f1:a7:50:55:45:4a:c3:
                    ea:d0:2a:8c:97:96:a5:3b:46:6a:8e:44:8f:2e:47:
                    2d:db:fd:72:7a:29:9c:f4:f5:f8:7b:59:20:95:de:
                    99:5f:5d:fd:55:aa:88:5b:fc:e2:6f:96:af:65:7a:
                    a5:aa:96:32:d2:8f:b4:bc:fd:0b:97:3c:fd:5a:49:
                    2a:d5:fe:2b:3e:10:88:b8:10:3c:50:39:47:82:a3:
                    51:66:60:5c:18:a9:9f:f7:11:d7:cf:71:ae:35:9a:
                    c8:f3:e5:6f:55:c8:55:bd:da:f4:1e:29:0f:d9:2d:
                    c3:17:28:f9:0e:48:b2:a3:89:40:03:d0:e0:44:be:
                    11:9e:8b:55:df:dc:73:2d:45:c9:c2:9c:7a:c7:92:
                    3e:ed:01:55:2c:e4:5e:65:ef:18:54:c6:6c:9d:bc:
                    22:af:93:4c:7c:93:f4:d6:09:70:25:49:58:a4:6b:
                    02:ea:9b:11:18:93:a6:33:17:4d:6b:2a:5b:61:7e:
                    53:ab:29:94:5b:80:4c:b0:bb:b7:96:0e:f7:5d:63:
                    b9:ef:cf:96:d2:de:1f:b5:a7:05:5f:7c:41:16:d5:
                    a6:57:d8:f2:d5:2d:97:b2:83:a2:34:fa:c8:47:0f:
                    14:03:94:db:fe:ae:ba:b7:3e:2d:26:e0:b3:31:66:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:26:28:6C:48:41:B4:3D:52:E2:2C:A5:D2:A6:B0:8B:4C:E7:E2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c067990c-2cac-356d-926a-9fe19dcfde30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:ee:24:40:45:8e:08:66:8f:eb:46:6c:e1:bb:e2:46:8a:
         96:88:f6:67:2c:56:1e:f9:62:99:c3:55:dc:1c:9b:71:4b:77:
         34:18:2f:5b:6a:4f:07:fc:84:3a:91:94:f9:e8:83:33:29:f1:
         ca:a2:dd:10:66:6c:02:b0:36:45:73:68:c0:00:3a:17:e2:a5:
         25:53:95:d7:8b:4b:4b:17:d8:48:5a:9a:19:15:f6:78:23:69:
         e3:7c:8a:db:36:1c:9c:07:4b:80:8f:aa:e6:64:21:ec:ab:35:
         ac:a7:71:fa:f0:d3:64:96:e1:a2:96:6f:04:20:80:12:73:0e:
         da:3d:14:ca:83:af:04:b7:be:b8:69:08:bb:65:f8:c7:bd:ca:
         bc:45:aa:df:e3:db:c2:0c:10:25:f5:08:e4:b7:6b:b5:17:23:
         77:99:19:5e:55:12:32:30:d8:c1:7e:74:e1:e4:c8:af:f9:6d:
         41:76:2a:a1:cf:8b:3b:4f:22:d6:de:59:59:a1:1e:34:5a:72:
         b6:b5:93:6c:fd:84:be:40:76:06:2b:6c:03:86:26:50:60:c6:
         1a:dc:a9:60:17:72:35:44:12:53:40:0b:b8:7d:5a:b4:38:3c:
         7e:07:a4:c4:82:09:6a:be:3e:b2:ac:0e:d3:a5:de:d1:eb:ca:
         71:41:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:51:43 2025 by rpki-client