Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06b0d6ed-1328-37ac-9ed0-4795420f2d10.roa
File:                     06b0d6ed-1328-37ac-9ed0-4795420f2d10.roa (raw, json)
Hash identifier:          3tRo/ChKBkpYR4XyT5jZlGRxnZ4qx8LoBXw1wDrqJzg=
Subject key identifier:   D5:D6:EE:EF:F6:CE:71:C2:86:49:02:62:64:73:14:A2:C7:68:8E:F8
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6202170991AAB1278F4BEDC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06b0d6ed-1328-37ac-9ed0-4795420f2d10.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:17:09:91:aa:b1:27:8f:4b:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=b55a7119-2a2a-489c-be04-a9d63f628239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:18:01:c4:35:b9:72:e8:e5:c9:1e:c7:0b:
                    d1:6d:03:a3:a5:8b:8c:7f:b0:a7:7e:db:c2:50:6c:
                    29:5c:50:81:c2:28:3e:fa:32:fb:f1:3c:2d:da:83:
                    18:36:a1:80:fe:43:49:9f:8b:51:07:02:5e:8e:db:
                    15:d0:d1:b0:d4:71:9f:fe:6f:5b:fb:f7:4e:3c:03:
                    74:77:d8:08:bd:28:4d:23:46:8a:8e:2a:b6:df:c7:
                    e6:b0:4e:42:43:5d:1f:9a:80:a4:fa:42:90:a2:42:
                    2c:5b:d2:52:6f:d4:2b:f0:f5:b6:a9:80:c8:2c:4a:
                    94:79:12:db:f7:73:72:46:6a:07:03:32:22:fe:02:
                    a6:47:94:1f:22:36:95:0a:19:77:10:ef:c7:13:fc:
                    04:d5:60:5c:9b:f0:39:f2:4d:80:44:5b:b3:4f:99:
                    0f:bd:e3:db:1a:dd:5e:75:3f:dc:fa:ef:ae:ae:55:
                    d9:f6:f0:de:ee:b9:f8:f4:13:2d:b8:ee:db:03:ea:
                    ff:13:2a:8d:66:7d:29:c0:d9:22:0c:9a:d2:95:af:
                    f6:ec:88:f8:67:21:cd:50:97:6f:08:57:52:a2:ea:
                    80:ad:66:09:18:0d:3b:bb:99:12:77:4c:33:4a:aa:
                    b9:6a:ea:22:47:f0:43:94:9e:5c:e7:d2:33:9c:d5:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D6:EE:EF:F6:CE:71:C2:86:49:02:62:64:73:14:A2:C7:68:8E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06b0d6ed-1328-37ac-9ed0-4795420f2d10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:5f:03:69:4e:dc:e3:89:ee:2c:70:ff:e6:cf:ef:63:7d:67:
         69:10:d0:92:7d:69:d2:72:0e:05:73:79:dd:6a:94:10:ee:2f:
         52:cd:75:59:49:68:88:19:2a:eb:e4:b6:7a:18:43:50:4c:96:
         8b:90:de:69:f3:54:26:5e:56:0a:f1:d9:2a:17:d5:95:ff:6f:
         f9:48:49:00:5a:9e:ae:cd:66:5e:6a:ad:8b:4a:3a:bc:e1:e0:
         97:d2:78:6f:87:89:70:f3:fd:92:60:d6:57:ff:67:72:91:e1:
         c5:bb:2f:67:b8:9b:2a:0f:64:68:dd:6f:71:54:5c:ea:d9:55:
         a7:48:c9:a8:35:ad:6f:08:24:0a:a4:74:5d:16:dc:2c:2d:b4:
         c2:0e:58:5b:67:ca:8c:9d:d4:80:90:6f:f3:2e:06:d2:bd:27:
         15:26:f1:5a:bc:17:72:3e:3f:c6:d0:1f:f4:88:32:67:cd:e2:
         66:f7:4c:4f:a0:d7:5a:4f:e6:b8:e9:be:22:d0:8b:7f:69:5a:
         a7:57:a8:b5:e8:a1:d4:49:5a:22:e4:b6:49:70:f8:5b:08:72:
         89:df:58:fe:80:52:4a:7f:5e:b0:f7:f4:54:cc:9d:3b:e4:d6:
         16:4b:f8:51:d4:f4:a5:a9:99:c0:49:67:ca:d8:5a:03:94:f2:
         54:cb:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:38 2025 by rpki-client