Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0171cfd-5287-3188-9058-b7a33b87fbe7.roa
File:                     d0171cfd-5287-3188-9058-b7a33b87fbe7.roa (raw, json)
Hash identifier:          PzqLVoN0LBC/lIC/qRVQabwHDsI3aWTQyAdywa/8Ofs=
Subject key identifier:   67:26:F8:A8:C2:2E:F9:87:43:98:19:C1:B9:BC:30:4F:36:F0:67:88
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62023A2258BBB29DD78885C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0171cfd-5287-3188-9058-b7a33b87fbe7.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:3a:22:58:bb:b2:9d:d7:88:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=d8df0e24-1115-4263-8005-9f197211f1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:58:d0:1c:37:44:ce:8d:ef:df:3d:a4:6d:
                    4c:b2:b4:4e:1e:02:1e:95:8d:cc:ae:7e:23:7f:63:
                    b2:ab:5d:08:ce:05:93:d7:2b:96:e2:61:45:0f:79:
                    82:9c:81:ae:08:64:01:b3:23:79:c3:b6:cc:e1:05:
                    56:64:1a:83:ab:c3:e6:e3:00:91:12:ee:c7:3d:c9:
                    72:0a:1a:63:57:f6:38:fb:22:8c:1b:bb:73:1a:5b:
                    07:77:48:bd:de:9a:da:a7:bd:2f:05:99:e8:6f:8a:
                    0a:ba:2c:0e:15:02:b1:f9:c6:11:3a:a2:e7:d5:bb:
                    4d:48:7c:3a:ba:8c:a2:7c:96:8a:37:e0:52:51:15:
                    2e:4a:eb:53:3c:f0:46:72:47:c7:9c:30:4c:6f:07:
                    97:33:2a:81:27:3e:74:79:88:58:e6:b9:68:d8:ce:
                    25:47:26:70:8d:61:27:9f:2f:93:a7:7b:67:59:6e:
                    d0:ca:14:22:96:90:f5:92:dd:18:33:e7:83:d9:3d:
                    62:1a:a9:f1:d9:e0:46:09:2b:70:28:21:d2:70:d9:
                    b6:47:3b:59:98:74:be:93:39:9c:af:11:23:fc:b1:
                    46:dc:c6:b0:ca:00:d3:e9:41:a9:19:7a:a8:81:e3:
                    51:ee:aa:36:9f:8d:00:e4:4c:37:ae:c4:6c:fa:63:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:26:F8:A8:C2:2E:F9:87:43:98:19:C1:B9:BC:30:4F:36:F0:67:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0171cfd-5287-3188-9058-b7a33b87fbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:1f:22:10:9e:53:5b:0e:6f:22:50:93:f3:28:cb:de:d4:4a:
         29:ef:07:c7:dc:e6:e3:c2:20:e6:48:5a:82:bc:b6:a3:f4:69:
         91:cc:12:70:e6:55:d0:80:fb:17:69:e4:d8:dc:e6:f4:f3:8d:
         97:83:9f:e6:53:d3:bf:75:17:96:e6:17:af:5f:32:1e:c3:05:
         db:54:19:84:b8:df:b6:4a:78:72:4a:d5:d9:1e:22:f7:a5:b2:
         1a:49:7d:fd:9d:7a:ee:28:65:d1:2e:0c:25:85:8b:0a:28:46:
         c3:93:25:dc:d1:29:a1:32:c1:ca:7f:3e:76:f1:f3:a8:ac:e4:
         1f:ee:4f:26:d9:c6:79:d1:b6:6a:2c:14:07:f0:66:89:f0:1f:
         11:5d:16:2e:06:20:51:65:df:f3:86:8b:99:18:01:cd:f2:a3:
         39:bb:af:4d:0c:30:3d:1a:3e:6b:3a:ad:7f:de:a8:a9:fc:9d:
         ec:fd:bb:36:db:fe:07:7e:4b:52:fb:77:b6:e6:60:b7:80:ac:
         9b:e4:05:05:27:05:72:a5:4f:99:fa:39:d4:41:83:d1:9e:bb:
         52:c2:d6:13:54:1f:9c:9b:54:f3:7b:fb:90:6a:17:2c:a8:2b:
         5a:ff:05:10:88:f1:48:2b:d3:ba:40:83:3b:bb:da:b9:24:6b:
         1d:a3:92:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:06:46 2025 by rpki-client