Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/326ca81e-4121-39fb-b953-2baf9d1cdc32.roa
File:                     326ca81e-4121-39fb-b953-2baf9d1cdc32.roa (raw, json)
Hash identifier:          da/j6Idzx3oVFSaDUsmrbHeoBabLLjkfMZuTh4wJHnA=
Subject key identifier:   99:DC:7D:5E:27:0A:4D:50:FB:7B:22:9E:15:04:0C:27:D1:06:7D:4A
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A8B0B51772F7A31B16A3978C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/326ca81e-4121-39fb-b953-2baf9d1cdc32.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     203724
IP address blocks:        161.69.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:51:77:2f:7a:31:b1:6a:39:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=47ea6418-5460-435e-9086-981fd895ded2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c2:cb:bf:b8:02:c5:3b:48:18:41:ea:48:d1:
                    8d:3b:c0:a2:08:80:02:5a:0d:7a:d4:2f:a0:91:ab:
                    24:c5:3b:63:96:35:e5:16:28:37:28:9b:a0:b3:3e:
                    84:c5:ef:0f:48:22:8c:71:a2:69:27:65:d6:da:62:
                    40:8e:37:99:ea:be:89:8a:e4:c5:00:e3:46:ee:33:
                    be:58:cc:31:81:59:dc:c5:a8:35:a2:f2:e9:f9:45:
                    c2:46:37:28:27:19:fc:8a:c5:16:59:14:c9:9d:e4:
                    5b:c0:a8:98:aa:8b:25:a5:a3:31:5f:33:05:37:33:
                    2c:41:1b:bb:b9:3a:a1:14:b7:eb:1f:4e:b6:9c:65:
                    99:d3:a6:49:61:f5:b9:4e:82:47:3f:ac:d2:96:05:
                    c7:18:b4:94:b3:d1:de:42:2a:33:5e:5b:0c:00:c0:
                    e9:9c:99:dd:19:8b:d8:6c:39:e0:b2:85:b1:08:6b:
                    34:1a:d6:c0:11:bb:3c:98:9d:88:0e:d0:bb:54:fc:
                    b8:f2:06:68:a3:c8:99:ec:64:c3:13:23:1a:cb:22:
                    85:06:0a:85:66:18:cd:e8:af:51:66:97:ce:03:c2:
                    a4:b7:02:ae:80:b5:e1:9a:b4:04:13:8d:16:77:07:
                    d9:08:43:bb:9a:96:1c:9e:9b:17:5b:5d:74:88:cd:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DC:7D:5E:27:0A:4D:50:FB:7B:22:9E:15:04:0C:27:D1:06:7D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/326ca81e-4121-39fb-b953-2baf9d1cdc32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:1f:db:bd:07:cc:c6:b6:3e:3c:d9:8a:a1:7e:28:b9:a8:
         ff:04:a0:e9:32:a2:e9:f2:26:97:1a:89:95:c9:0c:65:b8:51:
         94:92:ec:39:57:98:17:a8:49:00:61:17:01:f2:e5:9d:1e:e8:
         e0:9d:1f:14:d0:ad:bc:85:05:8d:a5:24:fd:6c:cb:fd:4b:fc:
         28:a9:8b:58:1f:03:08:fa:a8:62:5c:83:50:a2:72:51:59:a2:
         b2:17:68:64:01:ac:f3:24:f6:41:bc:a3:f8:10:a9:3f:4f:0a:
         7a:b6:1a:04:28:5d:e8:e9:84:3c:08:bd:68:fd:24:f5:94:7c:
         ca:0e:0e:7c:13:d0:f5:7d:fa:ad:23:79:aa:14:21:f1:59:2f:
         37:31:05:ee:3d:06:18:dc:0c:dd:3e:b6:35:a7:6c:ad:eb:8c:
         42:ec:c5:db:cb:7b:0e:57:77:bd:10:db:05:71:83:45:a4:13:
         6e:38:6a:73:89:36:fe:1c:70:d2:cb:7e:ca:81:9b:1f:5b:fc:
         a2:1e:84:8c:a0:ca:79:eb:a3:f8:12:c0:25:53:bc:ac:2c:f7:
         6c:4d:46:15:cf:9f:de:d5:60:17:83:c4:e1:24:1e:db:68:1b:
         35:c3:cd:98:39:6b:27:38:6e:2d:43:57:7b:3a:4c:72:5e:c1:
         91:e1:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:16 2025 by rpki-client