Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa
File:                     5396e692-d7cf-352b-9d2a-cb00286b30e8.roa (raw, json)
Hash identifier:          xCIfOYv98GwR+jBrEM94MCGr+Chhth+vignONJnHDoc=
Subject key identifier:   46:57:04:6D:00:7F:87:53:4C:80:8A:5D:DA:05:D9:A2:2E:AB:1E:78
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849DC8FC2BA061BDF607E4739C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     31898
IP address blocks:        161.69.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c2:ba:06:1b:df:60:7e:47:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=8901b058-8d20-4ec1-bd19-b4ed005ab656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:5d:c0:c6:d4:c1:59:0a:32:a0:51:b6:d1:
                    c1:9e:00:89:a6:1d:f0:e5:ff:11:df:2d:3e:3b:33:
                    a3:96:88:af:57:8d:6c:8c:ce:31:98:29:75:4d:fe:
                    95:18:70:3a:d0:f7:19:82:fc:22:c2:1e:e2:1e:06:
                    c8:ab:0b:59:9a:e1:4d:23:ac:5e:88:93:a1:1b:91:
                    e8:e4:6a:5e:57:f2:9e:54:55:30:e8:d8:7c:85:3e:
                    c0:82:5d:ea:b8:8e:82:4e:fe:db:9a:a5:98:52:ca:
                    2a:7d:de:c4:10:c5:5c:c9:7f:7a:d3:31:46:f7:6d:
                    5e:74:0d:92:a6:9d:eb:17:22:12:f4:a8:cf:55:08:
                    29:44:a1:44:9e:12:cc:8f:01:5f:aa:8f:f2:f7:ab:
                    74:c0:29:3e:e2:41:3e:7e:06:f0:58:fa:6a:45:92:
                    a7:5d:4a:6d:cb:c8:8e:46:1f:22:9c:f6:26:f6:18:
                    a1:fb:47:d2:63:67:71:29:37:a2:f0:56:2a:38:65:
                    f1:bc:a6:4b:a6:f8:3d:07:13:29:1f:1c:1b:8f:e3:
                    68:e5:52:f3:25:a3:f4:f4:89:22:89:5f:eb:ae:c5:
                    fc:69:11:b0:08:e6:64:ae:b5:38:87:c9:49:02:22:
                    88:60:3f:51:97:c0:ba:6b:7c:64:44:ee:ae:13:02:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:04:6D:00:7F:87:53:4C:80:8A:5D:DA:05:D9:A2:2E:AB:1E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:92:9f:1e:f4:5a:72:c1:0f:9d:93:22:68:fe:11:ab:dd:99:
         e5:20:0d:96:6b:74:a8:88:7b:5f:b9:2b:d0:e6:05:c2:2b:c7:
         03:83:8b:75:1f:68:22:54:0b:37:6b:c9:b5:e0:b4:80:92:82:
         9d:ab:1d:c9:88:a1:7c:10:3a:72:8b:55:e3:f2:a4:18:64:0a:
         ed:82:f6:03:ab:4d:71:f5:a0:33:db:11:b4:77:f0:c3:2e:ac:
         1f:d0:e7:ac:65:ca:76:f6:bc:65:55:30:19:81:08:ac:52:6e:
         ef:43:e3:6c:59:1a:06:d6:71:e1:82:6d:eb:24:21:b5:c8:35:
         af:88:2c:ff:bc:70:8b:87:5f:1d:20:0c:bb:5d:49:ad:4e:8e:
         7a:b6:f5:a7:ce:0a:23:2b:02:ab:99:f3:72:cf:fe:b1:fa:95:
         61:4d:9b:57:b6:f8:14:79:05:14:a0:c1:cd:43:d4:01:c6:14:
         54:47:84:4a:7f:71:1d:77:20:45:8c:2d:a9:3a:fe:8a:62:c4:
         56:dc:f0:14:8d:c8:bc:0f:be:bd:53:b0:ab:69:3d:75:3e:28:
         28:fd:07:db:91:88:69:f4:20:2a:99:35:95:90:8d:04:5d:23:
         a8:fc:ca:38:6d:73:dc:0e:e6:03:68:c5:da:3e:d1:4f:6c:e1:
         c2:eb:e1:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8K6BhvfYH5HOcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
ODkwMWIwNTgtOGQyMC00ZWMxLWJkMTktYjRlZDAwNWFiNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFhdwMbUwVkKMqBRttHBngCJph3w5f8R3y0+
OzOjloivV41sjM4xmCl1Tf6VGHA60PcZgvwiwh7iHgbIqwtZmuFNI6xeiJOhG5Ho
5GpeV/KeVFUw6Nh8hT7Agl3quI6CTv7bmqWYUsoqfd7EEMVcyX960zFG921edA2S
pp3rFyIS9KjPVQgpRKFEnhLMjwFfqo/y96t0wCk+4kE+fgbwWPpqRZKnXUpty8iO
Rh8inPYm9hih+0fSY2dxKTei8FYqOGXxvKZLpvg9BxMpHxwbj+No5VLzJaP09Iki
iV/rrsX8aRGwCOZkrrU4h8lJAiKIYD9Rl8C6a3xkRO6uEwJjawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZXBG0Af4dTTICKXdoF2aIuqx54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNTM5NmU2OTItZDdjZi0z
NTJiLTlkMmEtY2IwMDI4NmIzMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCSnx70WnLBD52TImj+EavdmeUgDZZrdKiIe1+5K9DmBcIrxwODi3Uf
aCJUCzdrybXgtICSgp2rHcmIoXwQOnKLVePypBhkCu2C9gOrTXH1oDPbEbR38MMu
rB/Q56xlynb2vGVVMBmBCKxSbu9D42xZGgbWceGCbeskIbXINa+ILP+8cIuHXx0g
DLtdSa1Ojnq29afOCiMrAquZ83LP/rH6lWFNm1e2+BR5BRSgwc1D1AHGFFRHhEp/
cR13IEWMLak6/opixFbc8BSNyLwPvr1TsKtpPXU+KCj9B9uRiGn0ICqZNZWQjQRd
I6j8yjhtc9wO5gNoxdo+0U9s4cLr4QU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:06 2025 by rpki-client