Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/f2ea7a29-a99e-398c-827c-bca5ebb15628.roa
File:                     f2ea7a29-a99e-398c-827c-bca5ebb15628.roa (raw, json)
Hash identifier:          WWIjW0DNv0GwyLgZJSaxg1yQL2MN8Hup9EksRI1b+yk=
Subject key identifier:   CA:EF:7B:E6:8E:98:C0:4C:C1:67:ED:A5:68:C8:F5:E7:5C:A4:D4:27
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584B64CCBD2785B4CC57647DD380
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/f2ea7a29-a99e-398c-827c-bca5ebb15628.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     3257
IP address blocks:        161.195.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:bd:27:85:b4:cc:57:64:7d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=10db25a8-ca05-4c37-8baf-c38b5835a035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:12:87:cc:2a:11:43:35:23:33:c0:58:dc:
                    93:6a:8f:1b:7c:a9:42:66:29:50:1f:7e:b2:6d:e1:
                    00:26:48:09:11:9e:44:21:de:ff:c8:ba:76:0b:6f:
                    16:39:d1:a3:95:5f:18:8b:fd:a3:e5:0e:d7:0f:d9:
                    6f:5b:6e:43:5f:7f:3e:6a:26:b5:98:4a:2d:a5:c2:
                    5a:b1:46:14:33:f7:b5:6a:37:0f:f5:6e:cc:3f:6d:
                    0a:61:25:d0:f8:1b:be:4a:22:09:d2:06:87:34:cd:
                    b2:d4:90:64:c3:ea:0e:66:27:ae:d0:cc:24:bf:aa:
                    3e:0a:03:a1:7e:a0:3b:73:2f:3a:79:1f:d2:6d:25:
                    51:01:c8:4a:9e:11:9f:7f:fe:ea:51:93:0f:0a:7b:
                    ee:cb:a8:88:93:86:24:48:27:0d:7e:ef:e2:5a:39:
                    7b:d3:0b:6d:d8:6b:4a:54:1a:49:8f:1d:99:c4:87:
                    5e:c2:ac:d4:d3:78:d3:2d:10:0d:da:71:fe:4d:83:
                    25:36:d7:9b:72:54:38:46:47:58:e3:99:e3:91:26:
                    08:bd:e2:10:fc:b8:56:e4:31:55:c8:2b:87:40:9d:
                    5a:92:a6:3b:6b:a3:2e:13:ad:3b:a5:68:05:0b:01:
                    a9:c5:e8:34:4b:e6:88:79:1a:08:7e:a4:9d:bd:a3:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:7B:E6:8E:98:C0:4C:C1:67:ED:A5:68:C8:F5:E7:5C:A4:D4:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/f2ea7a29-a99e-398c-827c-bca5ebb15628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:05:f2:ba:69:6f:2e:c5:1f:5b:f8:3d:99:84:a9:0d:4f:
         94:01:37:a0:7a:70:07:26:59:b5:10:60:51:6b:fb:01:94:f6:
         0e:f4:47:d7:45:03:86:c6:86:d5:13:a2:2a:ff:b5:04:9a:29:
         3f:37:c3:bd:22:b9:1f:3b:39:af:5e:5e:98:51:af:dc:bf:c0:
         34:0b:93:35:71:77:7b:d2:5f:54:dc:22:af:39:c4:77:7d:71:
         d0:97:2f:8f:69:f0:b0:dd:55:e0:b4:bc:e8:f9:a0:b5:68:28:
         f5:e9:67:45:2e:71:75:86:38:22:d2:d3:c0:fa:bb:b4:92:0c:
         d2:f7:23:c9:16:54:3e:d2:c8:f6:8b:0a:35:bc:f8:0f:36:2a:
         7f:f2:3e:62:26:84:93:d9:83:db:80:84:4b:fc:ba:53:b8:6f:
         2d:2f:83:71:ae:eb:5f:50:9a:8b:69:5b:c1:24:13:9e:44:e1:
         bc:da:80:1b:35:4f:01:5b:58:c8:27:20:6e:c5:23:fe:f6:0d:
         db:89:f3:7d:a2:71:c9:c9:54:8c:46:fd:e7:15:9a:c9:6a:bf:
         71:a9:24:28:f7:17:35:4c:f7:ec:09:41:3b:01:ba:d4:f9:65:
         a4:a3:b6:4d:32:6d:b2:2e:f0:4c:54:03:f0:b8:1e:f2:a5:73:
         c7:8c:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:39:09 2025 by rpki-client