Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5772069d-5081-37ac-98ad-09ef7ab25303.roa
File:                     5772069d-5081-37ac-98ad-09ef7ab25303.roa (raw, json)
Hash identifier:          bUFveicksZ4TbELgJpS4auNeyfOhnX7ahRMDUgxyh6k=
Subject key identifier:   28:FE:7A:E3:8B:2E:09:A2:12:8D:C4:EB:AA:9F:9E:1A:50:EB:ED:C3
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A5765C2FD11927E433D269800
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5772069d-5081-37ac-98ad-09ef7ab25303.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        161.69.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c2:fd:11:92:7e:43:3d:26:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=5ed2c964-7da1-4faf-bcbc-18c71a10daef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:41:4b:8e:c7:b5:bd:3f:8a:a2:27:2c:19:
                    78:b2:9d:05:c6:29:00:bf:cc:a7:68:8f:1d:ee:f4:
                    3c:17:77:65:d1:4f:06:79:f6:11:95:f2:e6:ab:09:
                    76:34:89:7b:a0:e8:9d:cc:d1:da:97:4c:0c:61:85:
                    8c:26:01:c7:7e:95:f4:e9:4d:e8:dd:df:67:2b:62:
                    e7:73:f7:5a:fd:bd:58:4a:58:94:dc:dc:35:63:65:
                    96:47:81:6c:fd:0c:76:41:57:72:10:2a:2e:73:be:
                    aa:42:0b:db:aa:e4:fc:c4:8b:0c:0c:f4:f3:2b:bb:
                    f6:10:97:25:8b:06:91:49:0f:c8:ce:de:07:be:ff:
                    c7:69:28:52:57:0b:c8:bf:ba:52:4e:72:e0:ee:22:
                    27:cb:d8:a9:b1:6f:0a:b1:38:81:1a:cf:7b:c8:80:
                    db:eb:6d:d5:56:77:97:7f:11:f1:95:b4:c1:4e:11:
                    a8:01:97:d3:d2:4b:c5:22:83:d1:92:21:60:d2:75:
                    e5:e7:db:e3:35:bb:58:40:4c:89:a8:36:eb:72:9d:
                    9b:dd:d5:b5:11:a0:61:64:72:79:23:45:59:a5:e7:
                    55:de:26:98:cc:2b:2a:ea:3c:91:3c:36:de:b3:90:
                    79:f1:23:30:be:b5:fc:4e:97:5b:d9:6e:5b:76:7b:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:7A:E3:8B:2E:09:A2:12:8D:C4:EB:AA:9F:9E:1A:50:EB:ED:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5772069d-5081-37ac-98ad-09ef7ab25303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:33:4d:23:35:3c:cd:71:1f:28:e5:75:82:be:b6:0c:d8:b3:
         0d:14:8b:fd:32:52:4c:c7:e8:6b:22:a8:5b:94:6a:a6:19:6a:
         e1:12:c4:f8:7d:1d:1c:c7:61:2e:26:29:05:0b:72:ce:1d:11:
         65:d9:a3:3d:d1:e2:c6:e8:b9:b5:a1:60:1c:02:89:dd:57:c5:
         a7:ce:ea:fb:0c:58:4a:20:73:26:25:f4:ab:9e:60:c1:67:5c:
         2d:ac:0f:76:63:c9:45:d7:07:02:bb:d6:6a:27:85:09:d4:0a:
         b1:b1:af:12:f8:1d:7d:b3:24:85:ad:38:ef:b9:7f:f3:fc:c3:
         0f:17:2a:8b:dc:d5:d8:eb:48:45:88:19:63:6f:96:5f:64:3f:
         9a:64:27:78:f5:3a:af:d6:42:d6:55:26:8a:f7:1f:d8:16:c1:
         0c:80:19:92:e2:71:b9:06:cb:be:ca:30:20:11:91:e2:bf:85:
         33:69:16:65:fb:ab:c8:30:18:67:62:68:09:8e:ca:88:10:91:
         92:87:3f:df:d8:9d:0a:0e:4d:5c:52:dc:7e:45:af:a8:20:fc:
         d9:1b:90:ab:04:26:85:f5:58:d6:f5:02:78:d7:90:cc:dc:66:
         1a:64:dd:fb:e1:df:e7:36:96:14:c4:9d:0d:59:53:7b:96:9a:
         5d:89:54:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:22:32 2025 by rpki-client