Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa
File:                     cfb444d2-531b-3f89-9a90-97326374d80c.roa (raw, json)
Hash identifier:          8MviCpzN3EZE3lRJERSSRdH5KFdOLvAGKYWb7yMRBqk=
Subject key identifier:   DA:85:C5:3A:47:98:63:0A:A4:7D:9A:39:DA:9F:E9:7B:BA:44:4D:46
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B38219A65D51901E1E97EF420
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        161.69.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9a:65:d5:19:01:e1:e9:7e:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=c1a61aa4-270a-4344-9b12-3271d84fc8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:a6:79:1d:2c:3a:b7:a4:a5:d1:fd:b5:b4:
                    15:3f:08:ec:c7:aa:0d:f2:f2:66:ae:79:ea:b4:31:
                    85:8d:ce:da:d6:40:74:73:ed:75:63:8a:8d:b1:75:
                    3b:35:be:fe:fb:f8:be:0e:54:ac:b6:7c:c0:05:37:
                    f8:3d:a9:d5:22:14:8a:1b:da:ed:c7:75:f2:be:80:
                    eb:67:ef:c6:42:fa:7a:28:01:ef:e6:24:d3:29:00:
                    c0:96:b7:a6:bb:07:25:73:af:86:a8:a1:fd:ed:70:
                    74:af:cd:1e:fb:92:1c:34:a0:b5:8d:d1:d0:8d:42:
                    fe:7f:f2:fc:c1:fc:a4:9a:70:9a:c8:d6:ac:a5:93:
                    07:56:87:57:6e:82:09:ee:74:25:05:16:bb:c6:1c:
                    07:46:61:98:a8:d1:b4:07:30:b7:1c:61:1a:5f:5d:
                    cf:5f:55:fa:b2:5f:d7:c6:38:3f:e1:41:ae:6c:9b:
                    f9:34:0c:5f:c6:d7:3e:0e:40:b6:fe:03:88:4e:fb:
                    3a:26:91:da:6e:22:6a:a2:c6:fa:f6:99:19:ef:79:
                    a4:0b:be:bb:3a:fd:96:07:9e:8a:52:b0:ab:16:be:
                    1d:17:21:e1:11:16:c6:16:9d:11:b7:5f:08:6e:78:
                    ce:31:45:ee:78:dd:b8:ae:69:39:06:3d:1b:f6:0f:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:85:C5:3A:47:98:63:0A:A4:7D:9A:39:DA:9F:E9:7B:BA:44:4D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2f:e0:8f:56:2e:09:0c:10:ed:4b:5b:47:5b:7f:ec:74:46:
         25:9d:df:4a:8e:f1:83:9c:cf:8a:cb:34:93:19:d1:e3:45:45:
         92:30:dc:b3:10:6d:4e:6f:28:db:41:d0:eb:7c:68:84:b9:1a:
         81:14:b3:1c:3c:35:34:ec:99:db:20:ab:fc:b6:fe:86:ca:dc:
         f1:6a:64:13:b0:fb:ec:6f:90:ad:57:a6:31:44:a6:d4:ca:15:
         2d:ff:c8:9f:48:a2:9e:8d:86:55:fa:de:e2:ca:f3:dc:c0:6d:
         23:ed:16:79:48:0d:ca:bf:b5:16:9b:63:9d:b2:cf:bb:19:b7:
         ca:b9:7c:8e:37:40:fd:6f:bb:cf:cb:c9:4a:5a:51:df:c1:ec:
         22:a5:73:66:ed:55:40:ea:35:71:06:92:15:4c:3c:c1:bc:a8:
         b5:ae:33:b3:77:a9:c1:53:01:12:2a:20:01:aa:e5:de:c3:ac:
         57:4b:24:28:cc:bb:f8:5f:1a:74:77:06:f9:6b:a5:94:47:a3:
         1c:a2:d8:a0:e0:97:17:03:04:1c:74:50:1a:47:21:c7:03:74:
         c0:06:00:8e:b9:d7:1a:9f:00:60:c9:6e:b1:0a:e7:57:10:d9:
         1b:6d:18:72:8d:fb:ba:44:8d:54:c9:b8:d0:08:5c:72:66:c9:
         c8:0f:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:50:34 2025 by rpki-client