Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa
File:                     cfb444d2-531b-3f89-9a90-97326374d80c.roa (raw, json)
Hash identifier:          LLWJIQUdHL4WaT1fYrTkx6QgJwPhKqGH8kD5pt/oblw=
Subject key identifier:   DC:B8:80:29:BD:50:B9:45:08:15:7D:BE:2D:FD:AA:D6:F4:FE:F0:CD
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F0DC6CC30673888D7E280
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        161.69.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0d:c6:cc:30:67:38:88:d7:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=879c3100-c6a4-446e-a727-3c6166d6f3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:63:4b:e2:1b:ba:c9:4a:a9:70:b4:d1:08:
                    fe:3d:27:c9:20:f7:31:36:c5:95:a7:97:2b:79:4d:
                    86:6b:34:09:79:32:b5:c8:28:cd:85:bc:c1:b3:c3:
                    35:ac:ff:e7:3a:67:f6:ea:cc:4d:18:91:1e:1d:26:
                    bc:0f:64:53:e9:e0:af:1d:a9:1c:bc:15:b0:c1:2a:
                    a7:8e:73:07:91:45:be:eb:56:58:47:71:33:4a:2d:
                    8e:2c:9a:62:51:94:ec:a1:89:88:12:2d:1f:aa:e5:
                    db:5d:cd:1f:18:fe:b4:0b:28:4f:c0:18:2c:cd:9c:
                    c7:c2:81:0e:46:83:67:29:f4:37:56:84:f4:13:fd:
                    fe:85:be:45:c0:cf:00:25:34:86:72:6d:af:f5:7d:
                    be:d5:6a:48:d1:a8:6d:19:a2:a9:15:db:1f:54:35:
                    44:82:6f:cb:8f:7c:17:23:f7:11:73:99:3c:9d:86:
                    d6:80:d9:2f:52:f3:8d:c6:9d:a7:c8:8a:3d:4f:ff:
                    1b:20:4a:52:d7:cb:71:ea:02:d5:7c:38:f6:71:36:
                    f2:ff:3e:2c:83:6c:fc:f8:69:25:10:3e:ed:56:75:
                    e2:8b:59:66:40:06:f6:f7:f2:97:65:2f:d8:87:0d:
                    1b:92:ae:ec:e7:24:60:68:93:a2:80:0f:51:79:28:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B8:80:29:BD:50:B9:45:08:15:7D:BE:2D:FD:AA:D6:F4:FE:F0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:32:a5:5f:22:93:c3:fa:59:24:e5:3e:7c:13:07:d7:72:f9:
         21:c4:a0:81:03:f7:78:01:e5:b0:f0:dc:24:72:34:d9:da:9a:
         d4:08:ad:08:0a:e0:fe:5e:1d:b3:80:d7:83:7a:14:0d:9d:ad:
         f8:4c:46:b1:40:2a:eb:7c:f6:4d:6f:86:e1:ae:d4:96:50:f2:
         25:8f:41:7b:7e:ab:ca:7c:ab:34:50:2a:a7:ea:f5:30:f8:f4:
         1b:04:9c:16:52:5e:e8:30:16:3d:13:a0:ed:21:a4:eb:a8:36:
         75:4f:75:25:8f:b2:14:4e:48:85:29:dd:76:c4:0b:57:ce:31:
         46:a3:2d:1c:b6:4b:1e:6c:6c:55:0d:e8:f5:02:bd:30:46:e8:
         b6:52:e8:a9:8a:e6:7b:72:a4:86:a3:cb:d6:74:d9:1f:72:a4:
         03:1f:9f:12:fe:ef:aa:31:eb:cf:3e:49:88:8d:14:64:2b:4b:
         f1:6d:d1:bc:42:33:4f:c5:29:b3:b0:21:ef:0e:8b:06:82:e8:
         c2:8e:c3:b4:d8:f2:fc:d2:4d:a8:7d:f5:0a:62:ac:b7:2a:65:
         d4:5e:f9:08:55:ad:6b:ac:44:ea:5b:6d:3e:23:20:b4:50:57:
         e1:06:2f:9b:24:bd:a3:47:a9:97:96:de:ea:04:77:64:85:10:
         32:7a:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:19 2025 by rpki-client