Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa
File:                     92d88aa8-e412-3241-8d69-65a663e555a3.roa (raw, json)
Hash identifier:          5Ec+K40kr2KOLceQ9/qoijPdwZwljMHGCPksiQHwRpo=
Subject key identifier:   8C:EB:15:9C:07:93:AD:BA:45:74:75:2D:82:7D:BF:11:D5:59:0A:8B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62021C319C8553A71EE87F80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1c:31:9c:85:53:a7:1e:e8:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=b0688bba-a81a-43b6-adcf-2c310a4717b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:da:d7:84:6e:d2:d9:4f:ec:e8:89:2d:ce:
                    57:f8:26:5e:11:75:bf:af:98:91:64:ec:cd:20:b6:
                    d7:f0:5c:5a:b0:cc:37:d5:7c:4d:87:de:f0:0d:52:
                    bf:3e:44:62:4a:50:17:01:0a:5e:63:f6:0d:b7:16:
                    ea:e0:d1:e8:ea:fc:b0:94:57:e3:06:96:48:19:33:
                    f8:c2:00:98:29:2b:5b:64:f7:b6:0d:9e:91:c0:90:
                    3c:9c:4d:6a:90:04:35:0a:a5:a6:ee:46:d0:17:23:
                    5f:1d:78:99:13:0f:c0:7e:fc:b9:91:72:05:2f:2d:
                    e4:0b:2a:74:72:06:91:cd:8f:ea:b0:40:5b:ab:d3:
                    62:a6:a2:41:4a:9d:b9:85:2f:67:21:c7:0d:a6:94:
                    ba:67:56:07:02:c9:bd:0a:ef:81:e8:21:6c:7d:06:
                    12:54:bd:8d:54:6a:7f:54:91:d5:5b:1c:98:9c:aa:
                    bc:85:db:65:77:fe:dd:74:88:9f:c3:a2:89:33:37:
                    8e:5b:78:7e:01:23:db:f2:73:dd:91:bd:33:28:6a:
                    11:14:02:45:cf:9b:ef:50:3c:5f:1e:a0:1e:ff:66:
                    a0:5e:6d:9d:fd:37:92:05:10:21:0b:04:fb:e3:50:
                    82:23:68:4b:69:fc:5d:ac:54:7e:22:97:2a:ed:08:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EB:15:9C:07:93:AD:BA:45:74:75:2D:82:7D:BF:11:D5:59:0A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b7:16:65:bc:fb:f9:fd:31:0a:56:5e:d2:46:7f:b9:2f:20:
         16:bb:7b:13:bd:0f:23:e9:35:6c:17:7a:05:c1:17:10:3d:b3:
         21:4c:16:54:4e:8f:02:70:18:a9:ae:75:d8:2f:47:50:ee:9f:
         56:93:d0:72:26:13:be:6a:8b:42:c2:9f:bb:06:2d:7b:40:b4:
         da:c5:81:c3:ae:62:bf:58:7e:bf:d4:b3:d9:86:59:cc:10:8b:
         1c:68:93:8b:e8:2d:45:50:b6:f6:59:26:ff:79:10:b4:cc:f6:
         a8:53:c3:87:08:c4:80:d5:08:bf:7b:d8:b2:77:69:4e:cc:cf:
         65:78:0e:db:d1:a0:9e:cc:3d:5a:2a:79:02:66:d9:42:65:33:
         2e:c1:29:ca:88:56:6b:59:e8:f1:f3:d0:b6:7c:26:61:8b:d5:
         dc:41:6c:7f:ec:30:84:5a:bd:da:d7:81:69:a0:1c:50:5a:bf:
         d9:15:6a:e5:60:d1:9a:74:ea:eb:08:06:18:6a:03:4f:b3:64:
         5f:0d:1f:f2:b3:33:b0:bc:37:92:52:6f:df:2d:71:e1:5d:1a:
         b2:35:67:d6:8d:6f:67:bb:d4:97:89:72:3c:80:c3:13:8f:f5:
         66:e9:66:ae:dd:14:6e:87:c6:35:52:a4:91:9a:8c:6d:aa:ed:
         fa:c6:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:57:38 2025 by rpki-client