Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fe7ffe36-c8eb-3af1-b87c-c809cc0e065d.roa
File:                     fe7ffe36-c8eb-3af1-b87c-c809cc0e065d.roa (raw, json)
Hash identifier:          C5/rdktc6dgpWK2rYk58UfFTnn8GzX3Ff+xxy49Q87w=
Subject key identifier:   9C:68:1D:FC:63:CD:3C:F7:BA:5D:3C:EB:7A:DB:52:48:42:8D:34:27
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584B1C36CA887B825E3E397D2980
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fe7ffe36-c8eb-3af1-b87c-c809cc0e065d.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     203724
IP address blocks:        161.69.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ca:88:7b:82:5e:3e:39:7d:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=aef8af5a-34e9-42d6-b0b9-3ae2daa076b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:69:c2:2b:f0:7a:41:65:94:01:e8:f2:99:
                    0b:8c:e2:6c:33:8f:35:61:a4:aa:29:d4:6e:81:b5:
                    48:06:a6:a7:24:3c:1b:f1:d9:57:aa:61:6b:9d:c7:
                    d4:df:41:a5:c7:49:b9:8b:1b:66:47:3d:c6:1d:f8:
                    f2:42:7e:a9:e1:6e:f2:31:5b:96:e1:c0:a6:f3:45:
                    cf:a4:02:10:b3:07:28:a7:bd:ee:89:33:63:b1:ca:
                    85:7e:39:da:eb:59:1b:51:8d:e6:07:11:a2:ee:85:
                    e9:27:a6:e4:53:e9:fd:76:c4:7f:e1:21:c1:8b:2e:
                    fc:0b:fb:78:0b:5a:60:44:26:99:13:9f:10:93:b6:
                    bd:01:9a:eb:dd:8b:ad:75:3c:2a:4d:76:09:86:d5:
                    91:73:99:44:dc:f3:10:05:f7:0d:54:0a:d2:e0:fb:
                    b2:3f:7c:b7:33:93:fd:d1:21:89:aa:76:9f:7a:28:
                    ec:c2:68:13:5c:b7:76:7b:ec:a0:de:4c:ca:08:b2:
                    da:d7:77:0f:1b:86:45:8f:86:68:07:f2:39:66:cf:
                    53:18:07:19:97:f1:05:29:d1:a9:66:63:91:78:49:
                    26:e4:8c:46:88:70:ae:28:0a:5f:5c:bf:0a:d4:71:
                    74:36:8b:bb:ce:59:cc:bf:7c:0e:b7:76:cc:1e:45:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:68:1D:FC:63:CD:3C:F7:BA:5D:3C:EB:7A:DB:52:48:42:8D:34:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fe7ffe36-c8eb-3af1-b87c-c809cc0e065d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:aa:00:5c:18:96:91:d0:84:c6:7e:7e:c0:84:92:15:5e:f0:
         4d:fb:20:2a:ae:fa:6a:cb:2d:27:f5:79:4d:c3:76:0d:43:68:
         2b:4e:6b:4a:5f:88:16:13:e1:5f:84:5d:6c:bc:48:e8:c9:96:
         64:ce:69:0d:e2:07:ec:c3:60:25:c6:ac:ab:2f:25:85:cb:0c:
         87:18:84:37:8b:70:23:62:73:1b:fb:e3:a3:d8:0e:83:86:19:
         2d:19:4b:b3:1f:36:7f:13:e2:7a:91:7c:86:a0:76:77:ec:c0:
         d3:9a:43:f3:08:83:88:95:b2:1f:9c:68:df:a3:6a:13:8d:bc:
         66:73:ff:88:35:02:22:ac:e0:c1:ee:85:b1:bd:1b:64:1f:3f:
         0e:7a:15:d4:40:72:ce:95:da:1a:48:ee:ba:f4:b3:01:6e:37:
         d3:67:79:12:36:e5:62:59:6f:85:0f:c7:7d:81:77:b3:64:b2:
         10:6d:4a:d9:44:d2:ad:e3:3a:f8:c6:2c:73:f4:da:ac:58:07:
         f4:59:0f:ee:28:36:ef:2e:3b:ea:eb:9e:c3:3f:30:a9:5a:b7:
         1f:1c:68:dd:b8:34:84:60:f9:e1:be:45:3e:8b:65:90:4c:99:
         72:3e:ce:b4:e0:55:c0:ea:90:7c:4e:dd:c7:ea:a1:96:06:09:
         44:ea:e6:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsqIe4JePjl9KYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
YWVmOGFmNWEtMzRlOS00MmQ2LWIwYjktM2FlMmRhYTA3NmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4xpwivwekFllAHo8pkLjOJsM481YaSqKdRu
gbVIBqanJDwb8dlXqmFrncfU30Glx0m5ixtmRz3GHfjyQn6p4W7yMVuW4cCm80XP
pAIQswcop73uiTNjscqFfjna61kbUY3mBxGi7oXpJ6bkU+n9dsR/4SHBiy78C/t4
C1pgRCaZE58Qk7a9AZrr3YutdTwqTXYJhtWRc5lE3PMQBfcNVArS4PuyP3y3M5P9
0SGJqnafeijswmgTXLd2e+yg3kzKCLLa13cPG4ZFj4ZoB/I5Zs9TGAcZl/EFKdGp
ZmOReEkm5IxGiHCuKApfXL8K1HF0Nou7zlnMv3wOt3bMHkUa2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJxoHfxjzTz3ul0863rbUkhCjTQnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZmU3ZmZlMzYtYzhlYi0z
YWYxLWI4N2MtYzgwOWNjMGUwNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACqAFwYlpHQhMZ+fsCEkhVe8E37ICqu+mrLLSf1eU3Ddg1DaCtOa0pf
iBYT4V+EXWy8SOjJlmTOaQ3iB+zDYCXGrKsvJYXLDIcYhDeLcCNicxv746PYDoOG
GS0ZS7MfNn8T4nqRfIagdnfswNOaQ/MIg4iVsh+caN+jahONvGZz/4g1AiKs4MHu
hbG9G2QfPw56FdRAcs6V2hpI7rr0swFuN9NneRI25WJZb4UPx32Bd7NkshBtStlE
0q3jOvjGLHP02qxYB/RZD+4oNu8uO+rrnsM/MKlatx8caN24NIRg+eG+RT6LZZBM
mXI+zrTgVcDqkHxO3cfqoZYGCUTq5v8=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:39 2025 by rpki-client