Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c8249a73-16dc-3eac-acad-deceaef86a1b.roa
File:                     c8249a73-16dc-3eac-acad-deceaef86a1b.roa (raw, json)
Hash identifier:          36D6kWHzE6BACUDInL9Wf+wBEo5l0VJTPcspid9DO48=
Subject key identifier:   EC:45:F7:11:FE:91:FF:9B:27:BC:54:55:19:C6:49:32:F1:09:B9:A2
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B59A1C7FBBCAA69E58B231E80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c8249a73-16dc-3eac-acad-deceaef86a1b.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        161.69.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c7:fb:bc:aa:69:e5:8b:23:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=59c40ed2-d90c-49d9-affc-207700d89d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:e8:af:70:be:2e:92:db:f3:45:77:1e:ba:
                    0e:cc:91:50:ee:9f:aa:6d:48:8f:72:37:fb:74:91:
                    e6:18:e8:3b:73:e4:52:78:ea:f7:ae:58:64:26:22:
                    bb:0c:02:ca:9e:9d:ea:95:0a:76:dd:44:5e:ef:5d:
                    2e:4f:2d:d3:65:e9:3b:2e:2b:cd:1f:7f:a9:db:88:
                    1d:1c:5d:fc:64:c4:18:2f:e6:6e:f2:ac:75:ed:e8:
                    36:b9:8a:77:d2:17:2d:fe:be:9a:c8:99:c9:25:8b:
                    0d:27:00:57:fe:6d:35:50:8f:b0:a0:f8:0d:a5:2e:
                    01:0f:ce:9f:d5:86:be:4a:d2:8f:5a:12:5b:d2:3b:
                    91:6e:19:e4:93:d0:0d:bb:53:17:7b:5c:e2:e0:22:
                    13:25:f6:54:56:65:26:47:e1:76:26:81:69:12:fb:
                    44:5a:cd:87:00:8a:09:4e:e2:58:c8:a2:0b:48:3d:
                    c3:a0:ee:cd:60:67:ab:f7:79:25:05:db:e1:7e:42:
                    9c:49:8e:bf:7e:5d:6a:1f:62:65:fc:19:02:9f:49:
                    52:0d:61:2c:ac:8b:99:a9:99:b9:21:0e:04:27:cf:
                    af:ea:fe:c7:32:3e:d0:23:06:8b:f4:e4:e5:f5:54:
                    da:6b:28:5d:4e:31:83:7a:99:07:1a:e5:ad:4a:48:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:45:F7:11:FE:91:FF:9B:27:BC:54:55:19:C6:49:32:F1:09:B9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c8249a73-16dc-3eac-acad-deceaef86a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:9f:97:6e:26:4f:cd:97:2c:73:48:82:c6:a7:a8:51:ef:
         7d:7f:21:09:d0:35:d7:93:0f:3b:32:6a:c1:1b:ee:29:49:24:
         ec:47:fe:1f:59:2f:df:65:22:24:b2:70:2f:87:69:c2:ca:e0:
         71:40:d4:fe:d5:72:6c:85:64:eb:7f:a4:07:15:88:d6:dd:37:
         d4:0e:83:2c:2b:f3:64:34:c8:37:31:af:63:87:02:77:06:e7:
         26:f2:ae:9c:fd:a3:1a:d1:6c:3f:5f:56:a6:94:67:6a:e9:0c:
         70:d9:67:92:83:02:24:3d:6b:07:ec:73:75:ad:a2:79:02:76:
         9a:c7:13:d2:51:d1:f8:23:03:6b:92:52:c4:50:95:1c:66:4a:
         9a:ed:ce:c7:d2:4d:87:d0:bf:f7:b9:89:ba:47:d0:d4:c2:d5:
         3c:4a:2f:be:9f:20:09:c8:9e:77:b6:e0:a4:4b:59:1c:88:1b:
         2c:74:ce:45:8f:f1:55:16:ff:e5:9d:b1:05:5b:45:48:94:07:
         7c:ee:0f:d3:33:24:fb:b6:0a:8f:7d:b7:7a:31:6b:53:f4:76:
         93:5a:01:3e:33:5d:77:ad:1b:02:df:21:53:5e:ed:6b:ee:aa:
         47:5b:f4:b8:0b:ef:fc:7c:a8:1c:84:dc:89:c0:b1:36:c1:94:
         7a:7c:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:47 2025 by rpki-client