Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/43dcf424-bcc1-3b39-b2e3-de116d5d97f1.roa
File:                     43dcf424-bcc1-3b39-b2e3-de116d5d97f1.roa (raw, json)
Hash identifier:          LNH3ddIyuIjltC8hcM5jMHlJO7Z4KtFMvCQzCqMHdzs=
Subject key identifier:   16:E8:F8:E9:82:47:7A:43:21:16:1F:43:47:DA:AF:48:2B:5D:64:7D
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F062598601D27425B4E60
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/43dcf424-bcc1-3b39-b2e3-de116d5d97f1.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        161.69.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:06:25:98:60:1d:27:42:5b:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=7ee1773a-3053-49ce-b4f9-58ab3be07e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:4a:cb:cd:db:a2:72:26:6e:8e:4e:9c:ba:
                    a1:3c:91:83:60:88:ac:75:60:f2:10:13:cc:2b:82:
                    e0:a7:68:d5:97:7b:be:dd:96:0c:54:f9:6b:0d:80:
                    2c:1f:aa:d9:cc:2a:a0:6a:e3:c0:e8:20:df:ba:71:
                    cd:35:70:82:92:88:9b:ff:28:54:4d:6c:7f:68:3a:
                    30:27:01:08:a3:84:4c:fa:6b:77:46:2c:b0:cb:97:
                    10:3c:60:4c:db:de:3d:6c:1c:25:bf:f0:35:08:3d:
                    16:ff:97:cb:5a:ac:56:3a:7a:81:19:43:0a:71:90:
                    08:11:9c:92:a0:5d:55:18:7e:57:7b:68:49:62:9b:
                    5f:00:9f:62:09:11:d7:5c:84:07:39:dd:d9:92:6c:
                    75:1a:61:26:87:bd:a1:45:54:f2:6c:5c:95:44:55:
                    e6:00:7c:67:04:40:c9:8e:5a:c5:b1:7e:a6:17:f8:
                    2a:22:e2:d9:55:8e:5b:2e:84:2f:98:2a:c6:b1:df:
                    08:40:52:36:0f:6c:ec:85:b3:cf:fa:49:ea:53:6a:
                    79:46:23:e1:82:2a:a4:f7:61:c7:31:3f:40:c3:99:
                    18:9c:24:b8:5d:d6:74:95:b3:24:12:bb:3c:7a:6e:
                    a8:f1:fe:3f:6b:ef:ce:6c:3b:96:3e:bf:68:49:a7:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:F8:E9:82:47:7A:43:21:16:1F:43:47:DA:AF:48:2B:5D:64:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/43dcf424-bcc1-3b39-b2e3-de116d5d97f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:e3:3d:c7:ca:11:f7:da:a8:1a:9b:71:88:e4:74:6f:91:
         a9:79:ee:1e:fe:06:31:1e:c3:4f:54:f9:71:8c:f5:b3:d2:6a:
         41:bc:88:03:0f:db:72:58:80:b1:79:2c:15:30:19:78:12:c8:
         ac:38:8c:0b:57:db:19:5e:2d:0c:f4:a5:d9:b7:ab:95:2a:79:
         7b:0f:f9:75:22:00:12:87:33:71:9e:9d:57:a1:e1:d2:ed:9f:
         13:cd:be:3a:d3:72:d0:d1:46:21:2c:04:ca:33:76:5d:c1:dd:
         3f:e7:08:4c:20:df:9f:68:2c:be:24:21:b9:d7:70:99:bc:bb:
         8e:16:23:c3:63:79:c2:cd:31:83:da:da:d9:80:81:16:fe:70:
         ed:63:1f:f4:f8:a1:77:9d:2a:82:5c:9e:e2:32:4f:97:a1:80:
         a6:0d:58:cf:76:08:95:b7:b8:b2:51:b7:00:d4:4c:9a:aa:30:
         bb:70:41:1a:39:74:df:d1:8d:b4:b2:4f:55:b5:d5:32:9e:80:
         a8:68:14:29:9c:09:85:a6:a7:f1:1e:58:e2:70:c0:20:f8:3b:
         2e:33:bd:30:4d:02:91:67:fa:0f:fe:ba:dd:22:51:72:39:b5:
         0d:7a:c3:12:5c:bc:ad:6d:ab:21:48:c9:34:fc:4b:74:39:28:
         54:cf:72:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwYlmGAdJ0JbTmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk
N2VlMTc3M2EtMzA1My00OWNlLWI0ZjktNThhYjNiZTA3ZTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlxKy83bonImbo5OnLqhPJGDYIisdWDyEBPM
K4Lgp2jVl3u+3ZYMVPlrDYAsH6rZzCqgauPA6CDfunHNNXCCkoib/yhUTWx/aDow
JwEIo4RM+mt3Riywy5cQPGBM2949bBwlv/A1CD0W/5fLWqxWOnqBGUMKcZAIEZyS
oF1VGH5Xe2hJYptfAJ9iCRHXXIQHOd3Zkmx1GmEmh72hRVTybFyVRFXmAHxnBEDJ
jlrFsX6mF/gqIuLZVY5bLoQvmCrGsd8IQFI2D2zshbPP+knqU2p5RiPhgiqk92HH
MT9Aw5kYnCS4XdZ0lbMkErs8em6o8f4/a+/ObDuWPr9oSae1owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbo+OmCR3pDIRYfQ0far0grXWR9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNDNkY2Y0MjQtYmNjMS0z
YjM5LWIyZTMtZGUxMTZkNWQ5N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvD4z3HyhH32qgam3GI5HRvkal57h7+BjEew09U+XGM9bPSakG8iAMP
23JYgLF5LBUwGXgSyKw4jAtX2xleLQz0pdm3q5UqeXsP+XUiABKHM3GenVeh4dLt
nxPNvjrTctDRRiEsBMozdl3B3T/nCEwg359oLL4kIbnXcJm8u44WI8NjecLNMYPa
2tmAgRb+cO1jH/T4oXedKoJcnuIyT5ehgKYNWM92CJW3uLJRtwDUTJqqMLtwQRo5
dN/RjbSyT1W11TKegKhoFCmcCYWmp/EeWOJwwCD4Oy4zvTBNApFn+g/+ut0iUXI5
tQ16wxJcvK1tqyFIyTT8S3Q5KFTPcrU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:36:27 2025 by rpki-client