Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2105513-e6a0-39e7-87ef-62e8cf8a83dd.roa
File:                     d2105513-e6a0-39e7-87ef-62e8cf8a83dd.roa (raw, json)
Hash identifier:          kIuDuL70fv4/aWoTEoInckZtMNPIJZsyVzwMBQ0aMnI=
Subject key identifier:   5A:F9:61:F1:FB:B9:27:CA:CC:D5:9F:56:29:AF:1B:2A:CD:F9:CD:53
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584BB1926408B76CA19C1232BE00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2105513-e6a0-39e7-87ef-62e8cf8a83dd.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     7754
IP address blocks:        161.69.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:64:08:b7:6c:a1:9c:12:32:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=03b6215e-fa23-48ce-a18c-5db241985b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:2e:ec:61:0e:23:05:2b:09:96:71:cf:07:
                    1f:7d:bb:9c:79:df:31:1d:89:35:f1:17:6b:5e:c9:
                    43:80:04:56:80:64:54:db:c3:9e:cf:a2:7f:a4:22:
                    d8:58:fe:17:fa:5d:85:fe:0a:87:4b:40:55:c3:6d:
                    8b:33:36:6f:25:5b:ee:66:95:df:d3:b2:b1:ee:40:
                    f9:b4:83:32:3b:7e:05:07:29:14:90:bc:95:b6:f0:
                    be:60:83:38:3b:7b:d4:cf:b4:c8:97:f5:d4:83:bd:
                    0f:a1:59:d4:d3:46:de:df:4a:b4:3a:91:0f:36:bf:
                    9c:56:87:11:26:af:af:95:de:58:c2:ab:98:cd:15:
                    4e:f7:14:63:b6:8a:44:f8:e4:ff:61:af:b3:46:da:
                    15:e0:22:9c:07:40:42:f5:32:6f:2d:81:f6:58:e1:
                    37:5d:1d:13:81:e0:f3:4b:f0:2c:37:2d:bc:50:d6:
                    2a:1c:0f:f1:45:79:b8:10:a3:75:20:5c:27:a4:0a:
                    bc:bf:b8:66:af:c3:7a:3c:12:14:8f:12:9f:1e:dd:
                    20:33:02:4b:d7:b9:26:da:8e:37:3d:cf:85:b4:77:
                    f7:c9:34:42:e7:b9:b6:e8:8d:8d:be:2e:6b:ec:9a:
                    6b:b1:5b:18:f0:b9:20:5c:8d:4d:8e:d8:b4:ec:c7:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:61:F1:FB:B9:27:CA:CC:D5:9F:56:29:AF:1B:2A:CD:F9:CD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2105513-e6a0-39e7-87ef-62e8cf8a83dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:60:5e:69:bc:6e:4a:cb:fa:e8:77:8d:96:6b:e1:74:6c:18:
         11:98:86:d0:10:79:a9:f6:4f:6f:bf:e9:67:43:cd:78:5e:96:
         cc:3b:89:28:34:5c:c3:0a:47:01:6d:a3:07:a5:f1:b1:83:03:
         a1:5b:3d:4a:e6:9a:3a:67:41:58:ab:af:22:0b:15:42:58:db:
         a8:b0:05:01:1d:7b:91:66:67:44:80:b0:36:fd:94:92:3e:1b:
         f9:a0:ad:81:f4:17:27:c6:c2:9c:9d:a4:c5:98:9f:2c:57:19:
         03:a5:e5:79:d6:da:cf:06:d1:9d:e4:7a:3d:b6:a5:73:2d:0a:
         08:3f:40:4a:2c:4f:df:1d:1f:e5:af:d6:b8:2e:f6:9d:d1:32:
         12:07:4a:05:d8:02:9a:6e:62:77:a0:a6:15:54:8f:58:31:11:
         b9:31:ef:0f:b7:63:8e:2d:11:df:ef:64:04:47:65:4a:b6:6e:
         36:a9:82:42:cd:11:d8:e0:d3:a8:84:2a:1a:c5:a4:e6:82:bc:
         ff:db:c1:2d:fa:00:e6:8d:9a:ae:cf:1a:84:95:b5:e7:2f:20:
         39:fc:5d:72:87:5b:2f:17:b2:e7:14:db:35:81:cd:35:15:9c:
         2e:e7:1c:f1:fc:24:1a:82:49:63:c8:98:0c:34:92:f0:5c:17:
         e5:7c:51:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmQIt2yhnBIyvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk
MDNiNjIxNWUtZmEyMy00OGNlLWExOGMtNWRiMjQxOTg1YjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5su7GEOIwUrCZZxzwcffbuced8xHYk18Rdr
XslDgARWgGRU28Oez6J/pCLYWP4X+l2F/gqHS0BVw22LMzZvJVvuZpXf07Kx7kD5
tIMyO34FBykUkLyVtvC+YIM4O3vUz7TIl/XUg70PoVnU00be30q0OpEPNr+cVocR
Jq+vld5YwquYzRVO9xRjtopE+OT/Ya+zRtoV4CKcB0BC9TJvLYH2WOE3XR0TgeDz
S/AsNy28UNYqHA/xRXm4EKN1IFwnpAq8v7hmr8N6PBIUjxKfHt0gMwJL17km2o43
Pc+FtHf3yTRC57m26I2Nvi5r7JprsVsY8LkgXI1Njti07MdbMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFr5YfH7uSfKzNWfVimvGyrN+c1TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZDIxMDU1MTMtZTZhMC0z
OWU3LTg3ZWYtNjJlOGNmOGE4M2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoUXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtgXmm8bkrL+uh3jZZr4XRsGBGYhtAQean2T2+/6WdDzXhelsw7iSg0
XMMKRwFtowel8bGDA6FbPUrmmjpnQVirryILFUJY26iwBQEde5FmZ0SAsDb9lJI+
G/mgrYH0FyfGwpydpMWYnyxXGQOl5XnW2s8G0Z3kej22pXMtCgg/QEosT98dH+Wv
1rgu9p3RMhIHSgXYAppuYnegphVUj1gxEbkx7w+3Y44tEd/vZARHZUq2bjapgkLN
Edjg06iEKhrFpOaCvP/bwS36AOaNmq7PGoSVtecvIDn8XXKHWy8XsucU2zWBzTUV
nC7nHPH8JBqCSWPImAw0kvBcF+V8UY8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:02:43 2025 by rpki-client