Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b113abf5-a91e-3133-91db-cd50df2fd750.roa
File:                     b113abf5-a91e-3133-91db-cd50df2fd750.roa (raw, json)
Hash identifier:          R5ZJsXexPWMZ4lFA3tjZgzMeNQzP1loWe6QX9oct+uU=
Subject key identifier:   AB:45:29:7B:E2:3D:B3:90:20:E9:C5:A6:F2:EB:90:B9:19:60:9F:FF
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F04890D519DA1E51CCEA0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b113abf5-a91e-3133-91db-cd50df2fd750.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        161.69.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:04:89:0d:51:9d:a1:e5:1c:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=99686507-f776-467c-b3d1-fe4516c35b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:5d:b3:11:40:c8:8c:b9:d3:d9:fe:74:45:
                    ff:06:0e:5a:b0:04:90:cb:2f:d1:a9:8d:26:c8:65:
                    84:4a:9e:a6:f4:0e:3f:99:36:ce:c8:28:47:47:0a:
                    b2:84:f1:5e:f8:d8:6f:09:49:55:80:f2:3b:2a:03:
                    f5:67:64:1d:93:ee:db:d2:ab:0e:23:00:ce:e0:9e:
                    a8:77:68:2a:89:7e:97:b0:1e:db:b1:69:a5:9e:83:
                    5c:87:0f:b1:b7:64:cb:9c:ad:8f:40:26:d6:78:20:
                    24:50:6d:bf:88:9f:c8:35:67:a2:51:12:6c:3e:dd:
                    25:48:9c:7e:e5:17:2e:df:5e:50:24:f1:8a:2d:53:
                    b5:b8:36:94:99:83:c7:70:ce:5d:0d:9e:e4:c7:ec:
                    77:62:e2:86:86:07:0f:99:6b:bc:cd:14:04:dc:5a:
                    71:65:ac:c3:e1:7b:80:d9:1e:eb:2d:06:4b:3d:b1:
                    23:f0:22:94:b1:c8:b6:25:dc:e9:8e:3b:6e:57:7f:
                    cd:43:b4:36:71:11:23:ee:94:79:d5:c4:04:6a:39:
                    a8:5c:a7:ed:c6:09:8e:da:5d:a0:1c:e4:ad:f1:2b:
                    72:25:c3:72:b6:4c:cb:f3:fd:59:e2:78:d0:bf:2d:
                    57:dc:c4:bc:6c:94:55:b3:15:41:4b:34:83:b5:87:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:45:29:7B:E2:3D:B3:90:20:E9:C5:A6:F2:EB:90:B9:19:60:9F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b113abf5-a91e-3133-91db-cd50df2fd750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:23:cf:90:fc:f1:cd:f5:a3:1c:2f:1a:46:91:ca:fe:76:1e:
         03:c4:33:55:b9:e4:a9:9d:15:1c:2e:1e:64:92:b0:b9:36:c6:
         40:ec:12:8a:11:ab:c5:c7:27:7c:73:60:32:da:b3:b4:3b:c2:
         8e:d3:03:83:90:03:db:83:aa:a7:0b:ae:ab:78:6b:91:30:a6:
         84:12:27:d4:2a:e2:da:f5:e6:a1:8d:c2:bb:89:66:be:2e:dc:
         ef:84:35:a2:7c:15:dd:61:90:31:43:8e:2a:8a:70:c0:5c:33:
         16:c8:27:1f:35:e4:1f:1c:b8:79:97:aa:2b:e5:7e:39:01:35:
         df:e9:b8:65:3d:15:66:1e:a6:49:96:1f:c1:4c:d9:fb:e7:e8:
         74:0a:df:89:c7:5e:b3:9c:e8:a6:a7:c2:71:44:f4:df:0f:c3:
         40:79:56:b6:3b:51:13:4c:db:e6:03:bf:62:2d:0b:22:fe:0f:
         ac:16:a2:32:ea:b0:34:5b:27:3a:3e:2b:4a:ab:e5:3e:c3:8e:
         86:06:de:b2:b9:bb:71:2a:6a:7a:dd:3f:d0:b4:69:70:38:be:
         23:68:38:bc:11:62:7c:c4:ac:b2:d3:1d:06:fc:62:8c:d6:33:
         fc:19:53:9a:4a:d3:be:6a:60:38:c0:b3:62:7d:de:3a:ef:12:
         56:94:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:46:54 2025 by rpki-client