Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa
File:                     9bc1236b-7372-3b11-93cd-1762f91ca362.roa (raw, json)
Hash identifier:          mgJgLoEKHDc0Xn0fd/sUnHNT9H4h+Tgg2rcqzlvC5uk=
Subject key identifier:   99:CC:8D:04:83:1F:C8:0E:C4:F9:0F:88:13:79:D2:28:50:8A:6F:39
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584A7780866321EC702E7E711840
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     203724
IP address blocks:        161.69.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:86:63:21:ec:70:2e:7e:71:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=fba7e7a2-b96f-4501-8e8f-19a4037dd507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:c2:c2:27:00:5c:c8:a9:00:1b:ff:76:de:
                    f7:28:cd:88:85:00:1d:ed:52:d0:da:5e:e3:a7:dd:
                    3b:02:4b:7b:76:6d:79:3b:71:31:93:88:70:25:5b:
                    23:39:db:40:11:3c:8a:50:1c:de:c3:6f:15:d6:95:
                    82:e5:73:8f:55:7f:e9:b1:6a:a9:c5:42:32:ef:26:
                    30:67:ff:09:1d:bb:1b:81:40:3c:da:77:78:02:00:
                    35:94:23:d8:d8:d0:ce:f7:9d:a7:8f:bc:1e:fb:5e:
                    b8:9e:38:16:5b:9b:49:be:19:15:77:46:29:b4:1a:
                    9d:cf:1a:6a:84:2f:55:5a:8e:4f:27:1c:00:b4:b3:
                    ae:c1:43:9a:74:75:49:f8:c7:46:d5:1e:9f:0b:11:
                    ac:cb:a3:20:d0:1d:3c:57:4a:15:ba:ba:02:3f:b9:
                    88:36:49:8e:48:e8:c7:40:49:54:29:5a:f6:55:7a:
                    02:6d:02:a6:6e:17:41:ff:39:c6:49:a3:c4:de:c4:
                    bf:39:85:50:3c:af:e0:b0:6f:86:e5:4e:cf:2f:fa:
                    06:c5:0f:03:1f:67:f5:b5:87:3f:8c:ff:b1:3e:18:
                    7b:ba:33:76:2b:84:98:be:b1:93:d7:e9:c5:ac:56:
                    9a:46:cc:a7:1a:82:cb:86:45:64:b3:9c:f9:82:56:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CC:8D:04:83:1F:C8:0E:C4:F9:0F:88:13:79:D2:28:50:8A:6F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:80:b2:5f:34:58:c3:6d:7a:ff:f2:d4:df:89:69:19:ea:de:
         3c:a1:c9:a0:04:ec:8b:56:87:23:b3:ef:07:87:9f:04:bf:1b:
         43:5f:ea:26:39:74:58:85:d5:de:f4:6c:94:b0:04:6b:ad:cc:
         f8:99:c9:49:48:31:3b:17:1e:6f:43:f5:41:4a:da:98:97:6a:
         d5:82:4b:88:9f:5b:6e:bc:e6:d9:2a:10:80:1d:44:fe:76:36:
         cd:c1:d1:7b:51:50:50:2a:99:ab:69:4f:35:7f:f2:94:dc:15:
         c0:72:f2:09:20:59:c9:f0:3a:da:bb:93:72:50:57:00:3c:82:
         5f:22:57:e9:8b:f9:58:f9:70:a1:ec:8f:2e:04:d0:50:a4:88:
         54:c6:70:80:a4:66:62:a9:ea:f3:9f:dd:9b:26:05:71:ed:e1:
         1b:10:e9:8f:bb:a5:41:d7:4d:ee:1d:d7:83:41:b8:bb:52:e9:
         86:4a:53:36:56:8c:4c:03:2b:4f:16:20:c6:e1:36:62:86:88:
         c4:c3:b0:dd:5e:83:cc:73:a1:1d:4c:70:9a:f0:59:54:d0:0a:
         c1:87:a2:e6:ae:79:e8:19:37:b5:e4:fb:08:e7:c0:37:a0:05:
         11:b3:be:d8:cd:aa:1a:c4:50:c2:7a:da:71:68:1b:ee:1c:bc:
         dd:54:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:42 2025 by rpki-client