Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d46237e9-b5a2-3656-86f9-c2fade1c5927.roa
File:                     d46237e9-b5a2-3656-86f9-c2fade1c5927.roa (raw, json)
Hash identifier:          wFItF6gRxjXswmvOoGoJWDIqT6xWLQdQXc+mufPIv94=
Subject key identifier:   D1:8B:89:81:97:65:3B:5D:12:EE:78:8C:86:06:CA:17:E5:AD:ED:29
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849DC8FC29BA7D0E40785B41778
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d46237e9-b5a2-3656-86f9-c2fade1c5927.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     203724
IP address blocks:        161.69.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c2:9b:a7:d0:e4:07:85:b4:17:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=da453980-7a7c-4ead-8dc8-9f2842e033ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:cd:5a:8a:ee:0b:b3:fa:40:b3:fa:41:38:
                    ed:4b:93:69:8d:04:42:69:a8:16:cc:25:bb:74:17:
                    f8:a1:69:1b:71:a5:ea:e7:27:e3:b4:25:0c:7d:a2:
                    9f:93:b0:69:b4:2e:fc:0d:ae:b9:b4:bf:df:7c:bb:
                    46:bb:e9:76:ec:74:d5:7b:f4:0c:d9:8a:37:16:84:
                    77:88:33:28:61:aa:d8:ce:0e:19:2d:b3:17:5c:72:
                    43:cb:48:ff:50:55:1d:c8:60:74:1a:55:8c:2f:89:
                    53:70:57:84:b6:c6:b5:8a:b7:f0:8a:a8:01:f8:36:
                    f2:40:20:9c:35:23:81:33:41:00:e9:09:4e:ea:7e:
                    1c:62:e0:5d:22:5d:de:42:76:b2:36:9e:07:d0:7a:
                    25:61:2f:a1:d2:17:31:27:d4:6d:7d:1a:07:e9:1f:
                    5f:fa:a4:7c:7a:81:21:26:e7:27:19:1b:4c:74:91:
                    14:eb:8d:0d:ee:19:f0:00:a0:61:a6:86:51:36:f7:
                    6e:ab:f7:e1:54:1c:0e:d7:70:b3:8c:05:52:ce:48:
                    c4:c6:11:ef:9b:b2:ac:bb:8f:16:80:2f:01:a4:e9:
                    b1:c1:1c:ec:9a:b0:33:55:78:db:d2:23:42:b1:b6:
                    aa:80:83:8b:6f:bc:c0:73:e8:74:f0:e6:75:ae:e9:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8B:89:81:97:65:3B:5D:12:EE:78:8C:86:06:CA:17:E5:AD:ED:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d46237e9-b5a2-3656-86f9-c2fade1c5927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:b4:8c:30:57:38:5b:85:ee:76:55:8f:b8:35:41:4b:a3:
         c2:98:77:2a:bd:1f:52:ae:93:d4:96:05:97:39:80:a8:a8:98:
         a6:3d:15:d9:b5:16:3e:17:2b:81:a0:e8:ec:71:e0:e9:dd:9b:
         6d:b4:80:14:60:94:b0:de:23:21:79:c1:16:33:56:72:c5:47:
         cd:3e:2a:9a:60:b9:f4:16:f1:06:43:e3:e1:d6:26:84:90:72:
         d6:01:ad:4d:5e:84:c9:0c:32:1d:01:d7:65:c8:12:64:bb:4f:
         ce:46:ed:08:83:18:dd:3c:2a:a9:05:ab:b3:68:42:c9:ee:ba:
         07:6b:89:85:83:1a:fa:bb:6f:cf:96:56:d2:45:7f:5c:b0:ff:
         1e:1e:74:da:18:54:d4:73:f2:c6:0f:52:33:c5:9a:f7:96:23:
         4a:8c:70:af:9a:cc:c1:4c:d0:a1:9c:9f:90:05:c8:c5:50:46:
         9e:d7:97:f0:2e:98:1c:7a:64:03:73:a3:cc:d8:3a:e6:5b:df:
         f7:a0:f9:63:12:c2:94:03:dc:a2:db:e7:f0:55:01:bb:91:76:
         51:2c:52:a8:e1:93:94:fd:f2:0b:c0:17:93:00:e7:6a:a8:45:
         0d:52:a7:67:a9:3f:9a:15:e0:50:a9:30:77:da:59:ae:33:65:
         e8:03:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:11 2025 by rpki-client