Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7dbcac2e-1f0b-302a-a071-41bbbe01b4a5.roa
File:                     7dbcac2e-1f0b-302a-a071-41bbbe01b4a5.roa (raw, json)
Hash identifier:          vtc3vllgIHV5nbFdtc82Mz+YRSTBurEME0+pVmZzTpg=
Subject key identifier:   41:26:DA:10:BC:2B:C7:77:B2:7A:BB:7C:86:CA:9D:C4:DB:2D:31:65
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62021A0C721A045E1FDDD080
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7dbcac2e-1f0b-302a-a071-41bbbe01b4a5.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1a:0c:72:1a:04:5e:1f:dd:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=1f247da5-58f8-4668-8273-08e4f34a04e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1c:dc:18:77:61:8a:b7:f1:44:5f:f0:c5:a1:
                    ff:f8:27:8a:7c:3d:2c:89:33:48:89:d0:70:b4:fb:
                    74:e9:d6:82:d3:b2:35:18:51:e5:df:fe:27:05:13:
                    10:3b:14:29:74:fc:f9:b0:9e:a6:42:22:39:6a:6b:
                    34:ca:cb:bb:d6:a5:2e:46:98:81:e6:30:05:cf:b1:
                    a1:f4:b1:90:e7:14:a4:79:b7:7d:58:95:be:2b:94:
                    84:ff:5b:e4:ae:69:44:0a:fd:07:af:5c:6d:06:c8:
                    25:3e:d1:b7:e8:c2:52:ff:14:fc:f0:d0:c0:77:b6:
                    e4:ee:24:fb:5c:cc:38:8e:99:59:60:4b:56:6f:d7:
                    48:74:09:6c:20:8f:28:30:c8:09:d9:29:42:f1:d3:
                    8f:f3:da:5c:91:c9:00:f5:9a:ab:7e:4a:44:3c:e9:
                    3c:cb:24:2b:7b:79:a8:3e:56:ac:e3:2e:6d:89:9b:
                    37:d3:5c:bf:58:7d:c1:2d:c3:ee:ad:c4:77:5d:f5:
                    67:56:71:e8:cc:b0:16:b8:8e:88:d1:93:df:56:c4:
                    aa:e0:55:3b:c5:05:c5:95:5c:db:ba:ad:12:58:43:
                    22:ee:f8:3a:cb:d0:f9:1a:41:21:bf:05:c6:2e:9d:
                    ee:9b:34:b5:1d:58:8f:d6:f9:08:18:f4:34:ef:61:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:DA:10:BC:2B:C7:77:B2:7A:BB:7C:86:CA:9D:C4:DB:2D:31:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7dbcac2e-1f0b-302a-a071-41bbbe01b4a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:61:7e:b9:b1:5a:9a:a6:2c:c5:53:cd:07:76:57:90:91:48:
         ce:3a:25:12:e6:fe:87:b6:ff:14:34:a4:e6:62:b5:b3:74:16:
         9f:76:26:00:97:bd:ce:38:2a:39:2b:26:5e:4f:99:5f:cc:7d:
         d4:06:2f:34:6c:b9:7d:63:71:b8:de:67:fc:c0:43:da:3a:54:
         81:b9:e0:c5:e8:bd:e5:1b:d4:07:da:a1:0c:e1:ae:9d:dd:86:
         34:26:5d:89:ba:b6:5f:d9:6c:e3:65:e9:4a:d2:bf:e9:a5:71:
         ac:ec:27:9d:b2:f9:f8:0d:dc:cd:22:ae:54:4a:92:3c:02:c4:
         0c:ac:45:0a:70:20:a7:d4:16:56:33:b4:a2:f4:75:5a:9a:f2:
         17:cf:16:d6:c9:54:4d:6f:2b:e9:b3:56:95:08:5c:6c:a1:12:
         9f:17:64:c8:f0:9e:80:70:c5:b4:86:39:5c:d9:a6:f3:ca:9b:
         95:77:0e:28:20:bd:e0:e5:5b:44:40:90:d6:4b:74:db:14:46:
         5f:38:3d:43:29:26:21:16:54:b4:b2:6e:3a:0c:08:90:e7:6f:
         05:98:93:ad:54:ea:89:51:05:bf:b5:19:83:88:3a:ca:65:0f:
         02:8c:09:20:0a:e8:0d:26:ed:46:51:8a:3c:4f:b5:8b:5d:77:
         52:b3:12:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:48:36 2025 by rpki-client