Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa
File:                     5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa (raw, json)
Hash identifier:          ILYG2rtoeyNoxghh8VNCxSVW8Fx5zvVsmkyf6IE1ick=
Subject key identifier:   52:03:FA:46:27:32:6D:2B:36:4C:92:B5:C2:13:1F:2E:CC:0B:4F:3A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62022A3AA56DBF6CA75EB8C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:2a:3a:a5:6d:bf:6c:a7:5e:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=150bddb2-20ee-4b67-8ae1-71a36985456a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:c1:d2:18:55:6f:7e:10:05:14:74:6e:c0:
                    b4:64:60:71:f6:54:dd:72:32:93:4b:c6:76:c0:5e:
                    07:38:3f:16:f6:47:11:95:4b:88:77:c9:91:4a:f7:
                    c3:94:8e:19:14:d7:65:3b:0c:85:77:eb:05:38:93:
                    6f:f0:19:9b:98:e5:54:22:51:80:fa:8e:7d:bf:1c:
                    94:12:5d:1a:5d:9b:c7:3f:54:d8:ec:fe:29:ee:eb:
                    2f:fc:90:2a:ed:ec:ec:da:c6:77:33:db:a6:3a:ce:
                    2a:79:ca:ae:d6:96:c0:4d:37:4b:96:a5:10:95:c4:
                    05:d7:75:72:38:9c:1c:66:25:e5:12:f3:36:c6:2b:
                    c5:7a:bb:2e:a0:92:0c:06:de:a5:b8:3b:02:c1:a0:
                    e1:14:71:ac:66:05:23:eb:df:23:38:a3:5e:98:83:
                    87:22:f3:33:50:13:1b:72:03:9e:76:8b:6e:9a:70:
                    a1:42:ae:a8:fa:a1:74:a5:3b:dc:22:fe:b7:fa:a2:
                    f8:47:51:16:0d:19:3d:14:c3:97:20:97:98:d2:73:
                    f4:b9:80:0f:ce:95:3c:d8:4f:d8:24:52:2e:87:a4:
                    8e:33:d1:16:11:86:d8:d9:1c:1e:8c:70:4b:4e:63:
                    0c:a0:37:89:62:eb:5b:d3:3e:ff:83:20:ff:93:30:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:03:FA:46:27:32:6D:2B:36:4C:92:B5:C2:13:1F:2E:CC:0B:4F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:f7:30:ed:30:62:00:d5:13:4a:94:28:93:e6:f4:b3:3b:
         2c:21:f9:85:31:ed:17:d3:04:c8:d2:a3:93:76:0e:4c:7c:b4:
         ba:67:01:bc:8a:5c:d6:00:ae:ea:18:a3:e7:7a:54:d1:ea:95:
         a8:e5:74:13:5c:6c:fd:67:89:de:cb:f4:0b:29:29:c7:84:1b:
         61:10:95:d7:b5:92:6f:7d:62:f4:e0:48:7d:34:b3:d4:95:08:
         9a:aa:51:84:23:d3:1d:99:fe:22:55:b1:57:19:b1:05:89:aa:
         ab:e7:10:7f:4f:74:ab:0b:c3:e5:70:c2:7f:f7:59:3d:d6:47:
         1c:2d:f9:08:6d:f2:a1:da:4b:d2:96:f8:18:b5:c1:25:bc:6b:
         9f:c9:e3:06:70:fe:46:a9:a6:1a:25:1e:4b:9f:ff:61:48:59:
         70:c1:50:d1:32:f8:7b:d9:a2:d6:ed:c3:8f:fd:c3:bb:63:cd:
         7e:1a:1e:17:f8:c8:24:3a:3e:6b:ea:65:56:62:51:12:44:e9:
         46:cf:f5:35:80:45:d4:6b:7a:03:f1:d6:03:91:63:26:60:e7:
         2a:df:99:f8:73:94:9a:00:b2:bf:6e:b6:e2:74:82:65:d8:2d:
         5b:21:8e:3f:f2:6c:7d:4d:0c:5c:b2:32:2b:7b:67:80:cd:2b:
         c3:94:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:38 2025 by rpki-client