Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/593b16c6-56e1-37bd-8768-5882bb20c1e4.roa
File:                     593b16c6-56e1-37bd-8768-5882bb20c1e4.roa (raw, json)
Hash identifier:          AX/EDGkToJC0TVf2nKQF9kiVLJePLQz5TtxkwzzWcmQ=
Subject key identifier:   C9:EB:DD:EF:66:D4:42:B2:F0:68:D1:BB:E7:10:AE:6C:32:F2:1A:81
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F0CB13DDC3CA5E1EFF600
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/593b16c6-56e1-37bd-8768-5882bb20c1e4.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        161.69.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0c:b1:3d:dc:3c:a5:e1:ef:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=45400f06-cead-47dc-a640-f02a6ae7b2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6f:a3:5e:e5:00:2e:5b:24:ff:80:59:7c:00:
                    27:f6:65:35:37:88:1c:28:5c:00:df:55:d7:40:e4:
                    64:b3:50:71:09:d3:3b:79:3b:1e:45:f2:b3:31:5b:
                    a1:b8:5f:ea:dd:c5:d4:98:69:51:e9:e8:57:8f:dc:
                    eb:18:5d:48:ae:5f:6e:f7:6a:49:b8:2e:fe:1d:36:
                    15:6d:aa:a9:c8:3f:4b:85:b4:66:82:b3:e6:01:3c:
                    57:f7:2a:4b:b5:ed:03:1c:0f:98:61:b2:e4:8a:34:
                    19:9a:66:a3:bf:53:eb:01:66:b9:de:df:bd:fd:5a:
                    31:6c:c8:f7:06:17:bf:4c:3b:00:1c:9d:18:04:df:
                    da:ad:94:90:57:4f:2e:45:0c:ca:48:aa:ca:28:22:
                    ab:6f:07:49:ab:7c:6c:2b:ca:f0:25:bc:7f:84:cc:
                    16:33:b9:27:12:93:0d:bf:fd:e5:d4:61:31:95:51:
                    49:0e:e2:c6:08:75:41:f0:01:e7:d6:39:0d:99:3c:
                    17:b3:88:37:49:ee:97:51:60:b2:fd:1d:8a:4a:11:
                    2a:fb:e1:09:40:9d:c4:ea:7e:e8:cc:61:5a:ae:44:
                    0f:56:6f:b2:6b:fd:8c:57:8e:18:5c:fd:ab:62:20:
                    c2:03:79:e3:a9:43:9c:c3:f9:e2:03:be:cd:cf:4f:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EB:DD:EF:66:D4:42:B2:F0:68:D1:BB:E7:10:AE:6C:32:F2:1A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/593b16c6-56e1-37bd-8768-5882bb20c1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:87:9a:5a:46:55:d2:06:2f:b9:a5:03:c0:39:1a:55:a7:8d:
         b2:ae:95:dc:9f:19:09:ca:08:11:78:61:ea:d5:2e:51:1a:aa:
         23:62:02:23:a8:fe:3c:c9:bd:8a:c4:51:cc:ea:8a:91:0f:ea:
         45:77:b9:8e:22:c6:58:0a:3e:1d:94:49:65:55:7c:be:a4:a5:
         7c:88:65:34:7f:ca:82:29:f0:2b:5b:51:e2:91:87:3f:ec:96:
         48:c4:81:4c:d6:12:6d:91:56:74:0e:22:d7:e7:95:4c:0d:ea:
         eb:88:87:bf:37:b7:f8:16:07:33:44:a8:9d:df:9b:3d:d0:bb:
         c9:dc:f0:f1:5c:6d:7f:9b:9d:f0:c8:a5:df:30:1d:bb:ee:55:
         5f:5e:32:71:ad:de:49:cc:71:37:65:52:96:cc:1f:33:8a:62:
         cc:ab:f5:a1:42:24:8c:a2:8b:0a:f6:f7:24:2d:5a:8f:47:36:
         89:bc:f8:f5:00:cd:3e:3c:6c:2a:d3:14:9a:70:a4:87:23:f1:
         67:04:ea:31:7e:c8:96:d6:ab:a7:bf:c7:09:93:40:64:28:c8:
         3f:6b:5b:a5:f5:e3:6e:9c:99:1c:f9:82:47:5f:a7:54:60:92:
         6e:ec:cf:85:99:c8:52:5f:8f:27:ac:52:9e:aa:39:53:34:ff:
         a4:24:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:53:48 2025 by rpki-client