Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa
File:                     7398979f-b238-3247-b6f2-0711d0b06197.roa (raw, json)
Hash identifier:          vZmonTghJfy1uql8i1P6Omv1jgxYJ+kIOB4ArlrrxeM=
Subject key identifier:   49:7B:FC:38:FA:E4:FA:21:35:60:F5:FF:C3:63:8F:D6:72:41:96:7F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6202033442A14E08175495C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:03:34:42:a1:4e:08:17:54:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=e0893c79-a1e4-429f-803b-6bd78318ad9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:44:4a:3f:da:99:0c:53:6d:80:0f:49:0d:
                    74:c3:16:6e:da:d9:72:a6:a1:80:71:e9:d0:0d:79:
                    be:93:1e:f4:b2:a9:40:ff:2a:44:81:78:6c:80:85:
                    b0:d9:9b:e3:cf:99:39:12:ea:4b:9e:e6:7c:d3:20:
                    18:52:1b:68:71:8b:99:2e:7a:1d:c8:68:02:67:44:
                    45:b2:71:44:6f:a3:4f:1a:89:26:30:53:31:be:ec:
                    85:94:b9:d9:87:4f:00:41:34:4e:a2:e9:49:22:73:
                    97:d1:f8:ab:79:72:14:7e:e3:6e:be:68:96:b7:0d:
                    7a:7b:d6:d8:c0:8a:55:d0:32:b7:e8:b4:55:f3:c6:
                    bd:c1:c7:79:6e:a1:d2:94:ca:f1:94:f0:2b:c4:1c:
                    03:b2:db:de:cc:f9:1e:b4:f8:b0:90:7e:c3:39:36:
                    76:a9:94:da:81:d3:a5:28:9e:9a:45:22:de:c7:b5:
                    05:17:50:5c:09:0a:02:84:65:54:3b:af:b2:a3:0a:
                    a5:3c:a2:cd:25:de:61:d0:44:e9:5b:8c:1e:86:9e:
                    7d:9a:30:43:cd:1d:58:a7:9f:b1:b5:93:af:02:b1:
                    ea:e5:97:a3:e7:70:2e:b3:26:0f:d4:50:69:00:b3:
                    59:51:12:37:e1:73:5d:a7:80:16:7c:62:52:95:6f:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7B:FC:38:FA:E4:FA:21:35:60:F5:FF:C3:63:8F:D6:72:41:96:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:77:29:87:80:a4:f4:74:4c:61:17:ee:f2:5a:b7:0f:8f:
         5c:ca:52:46:93:d8:7d:ea:ef:a0:40:d2:7e:7b:5b:8e:16:d3:
         3c:46:ec:ef:47:5f:4c:5e:2b:fc:87:b6:66:a4:0d:5c:0b:53:
         82:23:40:ea:65:65:48:3f:4d:1c:3d:8f:6b:56:9a:18:55:3f:
         fa:7e:98:ef:3d:1f:78:a0:07:8e:ad:d6:60:c2:51:36:12:19:
         3d:ce:d8:21:54:d8:34:c7:a8:5a:53:99:76:f7:11:59:d7:ba:
         00:e2:bc:e1:9c:0f:4b:08:c0:ff:85:db:4f:20:a3:6a:04:35:
         d4:38:04:c9:28:6f:04:8f:87:4f:99:46:52:f4:de:26:24:88:
         6a:ce:98:44:57:22:a0:f4:e7:93:65:5c:d5:02:61:1d:a0:52:
         b5:87:f3:65:95:f9:2e:f8:f1:ae:88:ba:3e:49:c6:a8:bd:e6:
         41:1b:cb:68:ba:c3:a7:d0:01:ff:88:61:36:f7:85:65:1a:26:
         22:a2:f3:6b:e7:14:2e:60:cd:25:25:5e:87:30:64:9e:14:18:
         cd:a3:7b:11:6c:3f:38:54:76:9e:8a:16:56:1d:51:5e:22:2a:
         15:82:3c:5c:18:36:72:0c:69:f3:b6:d0:f8:64:e2:62:e4:59:
         17:49:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:04 2025 by rpki-client