Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d73b186f-1b89-35f6-bf6c-fdf86f6a5be7.roa
File:                     d73b186f-1b89-35f6-bf6c-fdf86f6a5be7.roa (raw, json)
Hash identifier:          G3QW1n9oeC3E7hSflr8MDTFvJ8waMJFujvwiNzIkCqI=
Subject key identifier:   A4:74:D7:D4:16:B4:5E:8A:0E:DA:E2:B7:9E:62:2C:62:22:B3:ED:1D
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B382191FEC781A8F9374F8D60
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d73b186f-1b89-35f6-bf6c-fdf86f6a5be7.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        161.69.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:91:fe:c7:81:a8:f9:37:4f:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=a219d091-31bd-4466-961d-6d7f99d6bd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:b9:01:1f:a1:47:ce:c7:18:89:4f:4e:ce:
                    aa:75:db:6b:fb:35:ed:09:a8:39:25:fd:11:43:b2:
                    2b:15:4f:95:3a:88:53:11:2f:c5:59:e1:9a:b5:30:
                    53:51:07:42:d6:80:ea:70:9c:1e:64:fc:27:ac:35:
                    ac:7d:e9:cb:3a:07:e8:d9:6b:60:e8:d2:c3:c0:e3:
                    d8:72:f1:88:34:e3:23:0a:c6:db:09:82:78:53:c6:
                    1a:e5:82:74:18:b0:94:cd:32:b0:90:aa:88:27:35:
                    1e:bf:89:3a:7d:78:9c:6a:1f:b5:7b:63:87:e0:c8:
                    0b:20:64:c1:42:94:55:f7:4d:52:12:24:4c:73:31:
                    8c:fe:ce:55:bb:c7:e0:b3:e4:53:9c:2d:26:5a:76:
                    89:12:1a:98:0e:74:f3:04:01:1f:f9:75:4c:11:3f:
                    85:c6:f0:51:84:3d:7b:b4:5d:63:c0:b5:37:04:7e:
                    e1:f9:7a:5f:79:54:27:f1:63:40:6c:a0:0e:85:42:
                    51:1a:dd:f6:03:64:61:af:a8:75:c6:bc:4b:43:5c:
                    c4:3b:b9:f2:11:e8:b6:a2:f1:9f:c1:81:20:49:66:
                    19:67:6c:b0:de:c7:4d:4a:2c:57:44:2c:43:22:5f:
                    e0:9c:3e:c9:d5:90:e3:8a:5f:95:58:80:9c:bd:64:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:D7:D4:16:B4:5E:8A:0E:DA:E2:B7:9E:62:2C:62:22:B3:ED:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d73b186f-1b89-35f6-bf6c-fdf86f6a5be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:08:f1:de:43:07:b5:eb:79:02:4a:3b:48:ec:d8:19:8c:
         65:b4:02:87:3c:20:85:3a:17:79:82:7b:09:77:30:b8:14:2f:
         ab:32:76:6c:42:8c:66:37:3d:2e:70:1f:81:74:2a:c3:9a:c7:
         d4:f0:77:e5:50:13:ce:d6:c6:fc:2f:b5:88:68:31:db:d3:6a:
         39:fa:10:52:20:4c:d0:67:39:89:48:e6:49:51:d5:f0:98:47:
         dc:a4:8d:86:46:af:19:04:b2:20:fa:9c:a3:e8:43:de:9d:24:
         ca:a1:8b:4c:6d:c8:e3:1b:7c:7d:ce:bc:a7:0c:e3:ef:09:c5:
         d5:2b:1f:eb:93:e4:41:9c:e1:53:ed:d5:5d:ad:f3:1c:48:5e:
         db:77:b2:52:9e:ca:cb:84:77:40:ba:fa:eb:49:ab:8e:e0:db:
         a6:e3:fc:d4:47:bc:1a:00:42:14:4a:b5:d6:b6:53:7d:01:ff:
         4b:c9:d1:36:dd:86:c4:f2:83:30:fa:87:8a:81:05:cc:2d:9a:
         80:5e:06:71:7a:eb:1e:a4:d6:02:b2:62:2b:de:45:3a:0c:1d:
         5d:14:30:dd:59:a0:37:9b:ce:ca:81:c0:5f:30:f6:52:bf:4d:
         66:d8:96:83:b6:a3:25:ac:3c:38:72:af:5a:ed:e9:7e:7e:9e:
         fa:b8:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:02:06 2025 by rpki-client