Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa
File:                     e2c1050a-8329-3314-821d-b44bd07c87ed.roa (raw, json)
Hash identifier:          qEa6o81YpD1WSGO8Hdos5pL19GyZ+OjDDNcIRUdX8Mo=
Subject key identifier:   06:69:7B:F6:05:19:5C:C3:B9:8E:4E:EA:C9:28:5F:D2:DF:82:F4:C0
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620207FD6577438230346260
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:07:fd:65:77:43:82:30:34:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=f72396b4-fa78-423b-92c7-54e2efa15626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:80:08:5d:90:99:43:56:79:c5:8c:d0:08:
                    7b:4c:5e:b9:fc:08:52:6f:97:a7:fd:66:00:0e:24:
                    26:31:a6:7b:cd:5e:70:ad:f9:a6:10:c6:5a:e1:31:
                    3f:fa:c2:a4:52:3f:a6:f5:da:58:5c:ee:7c:d8:74:
                    72:26:59:b8:27:aa:d6:7d:5a:91:4c:1b:ad:f0:c8:
                    ff:31:a9:32:72:b5:75:44:ea:f9:40:be:e7:22:70:
                    ae:35:f7:36:19:fc:44:1c:66:83:e9:cb:41:4d:7d:
                    62:f7:1b:b0:72:3d:f0:72:c3:f8:fd:a8:e5:7c:75:
                    45:5f:cb:ce:0c:36:ca:9a:77:a5:9e:93:6b:fc:1c:
                    97:d4:41:69:e6:2d:42:d4:98:9f:6e:28:9d:59:d4:
                    54:df:55:26:1c:07:d9:f2:fd:b9:25:bc:63:05:58:
                    8d:04:df:39:3c:44:c4:7e:e4:e7:89:10:3e:c0:9c:
                    71:2a:a9:d7:19:18:8d:c5:dc:62:4b:a9:7b:97:66:
                    44:88:5f:01:66:44:6a:d6:ae:47:bc:68:91:f2:6f:
                    9a:db:cf:be:50:d6:1c:96:ae:c9:ae:82:d5:20:2b:
                    7e:23:3c:6b:6b:7a:78:5b:4d:10:a3:fc:49:f6:50:
                    e3:66:01:9b:4e:59:6b:76:86:a6:a8:e5:67:8d:ff:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:7B:F6:05:19:5C:C3:B9:8E:4E:EA:C9:28:5F:D2:DF:82:F4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4a:3e:9e:27:85:e8:2c:7b:f1:10:31:3c:30:82:d5:c0:27:
         e6:5b:e3:d7:d5:02:9f:73:77:ba:a9:91:53:42:a7:c0:7a:c3:
         e9:95:5c:44:47:e8:54:a5:e5:0a:75:44:f4:8a:5f:a6:e3:4a:
         37:e1:c2:74:d0:3a:9a:6b:69:34:bf:8f:a9:b6:ff:a5:5a:2d:
         e2:77:9b:44:c1:14:8b:69:e8:9d:d6:50:83:c4:ff:30:00:7e:
         39:d1:41:b7:16:00:79:82:b3:63:24:54:5d:14:c3:d5:ee:6a:
         65:3c:91:40:d3:e8:f1:8b:27:b7:eb:6d:dc:c5:1d:3f:35:b4:
         d5:27:64:d8:a7:b3:ea:5a:0b:42:18:d6:1d:96:02:87:ec:a5:
         64:65:87:e1:fe:68:78:0b:a9:21:7a:2d:82:98:3d:8f:da:62:
         5a:52:f4:cc:6c:a2:13:2d:13:9a:1c:98:b6:2c:38:ae:1c:3e:
         d2:44:6f:cc:e8:c8:14:f4:e8:7a:88:e1:36:3b:4b:44:4e:54:
         ac:af:c1:00:60:98:af:7b:e8:f5:2e:cb:fe:5a:ca:cd:6d:a2:
         c0:7c:d0:58:a0:5a:63:3e:1d:14:46:b0:c8:10:34:d3:b4:c4:
         a8:55:49:56:b0:8f:f0:a4:d5:1f:97:1d:a5:fc:a6:67:8f:92:
         87:16:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:15 2025 by rpki-client