Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa
File:                     fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa (raw, json)
Hash identifier:          cGPCDNchAY7Ym1ywdmkA/F48IMSEYmA6sSzzHmBa9ec=
Subject key identifier:   23:BC:43:C2:E9:FE:C8:D3:D8:65:C5:DB:FB:B1:27:58:BE:F6:D8:4B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6202148AF8DCD18CD6C8E780
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:14:8a:f8:dc:d1:8c:d6:c8:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=d6b19971-e182-471a-912e-349e2ef37927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:ed:05:f9:87:10:b7:65:e0:19:02:f2:d3:
                    a4:8b:d3:5f:5e:3a:1b:3f:cf:09:aa:09:21:9d:80:
                    6a:ca:b9:60:39:a8:23:cf:21:0c:97:6d:cd:9e:fe:
                    48:ee:38:44:cd:92:78:43:28:b5:fc:82:72:28:f3:
                    d2:0a:47:0f:69:dd:e1:6e:a6:ca:a0:02:66:e3:53:
                    4f:49:be:02:c0:8e:04:14:17:40:3e:20:c2:02:c3:
                    35:b3:02:6a:60:7f:aa:83:72:db:63:88:aa:58:7c:
                    d2:82:b5:3a:ed:d4:97:20:c1:e0:13:41:c5:e3:1d:
                    35:33:ae:98:4b:df:2f:63:af:31:e5:86:d0:7f:fe:
                    c5:33:6d:22:a9:50:13:4c:43:52:05:32:08:30:e8:
                    9e:60:c9:db:0b:34:cf:01:0e:db:72:2e:4f:0b:01:
                    8f:03:cf:2f:60:df:b7:31:e4:45:7b:c5:c7:66:52:
                    74:cb:18:1d:20:81:b5:85:05:9e:80:84:5a:ca:da:
                    93:1f:cf:e0:05:81:98:e3:a1:00:9e:04:52:89:70:
                    3f:e0:e7:38:85:87:41:73:c4:ac:8e:cc:77:b0:90:
                    ad:04:14:d0:42:3f:95:1d:47:75:ec:ae:6a:71:92:
                    8e:eb:dc:9d:0c:4a:ed:57:54:3e:81:fc:11:28:65:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BC:43:C2:E9:FE:C8:D3:D8:65:C5:DB:FB:B1:27:58:BE:F6:D8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:73:24:a3:10:78:c5:ba:07:51:93:c0:31:f8:6f:04:1c:
         d5:c7:71:5d:64:72:8a:d3:a0:79:f5:99:db:9d:a4:1b:34:2b:
         fd:dc:e7:36:e1:bd:6e:a7:02:4b:dc:f1:3c:f9:d0:c7:b6:82:
         6a:0f:80:52:43:33:3a:dd:93:16:f6:ad:41:64:94:b8:47:84:
         38:93:ea:ca:fb:9e:6f:e2:d9:c2:4e:70:64:68:3b:70:fb:a9:
         d6:ba:78:36:6a:17:bf:73:d0:14:6f:d2:96:9b:e1:e6:85:0c:
         ee:19:b7:0d:76:e7:8e:e7:f8:e9:98:94:89:13:4d:3c:bf:09:
         cc:7a:c6:cc:9f:4a:8d:53:a5:8c:a7:41:ec:d0:34:b2:13:25:
         d4:c4:a6:20:d3:db:82:cf:aa:f6:dc:9d:6d:79:2a:6e:ea:b4:
         4e:04:72:00:9a:82:d9:6b:24:00:e4:66:ec:7d:a3:65:6f:59:
         9b:b7:7a:33:80:ab:f7:12:b3:fc:12:f2:52:84:eb:fd:24:80:
         b0:f7:20:78:4f:26:cc:58:92:fd:9a:8d:24:9e:61:bd:54:ff:
         22:d7:8b:ae:ff:e9:b6:8c:54:70:e5:aa:f7:51:a4:91:4b:93:
         57:27:11:0d:61:ba:7c:d2:95:c0:63:27:cf:78:b1:1b:e3:1d:
         db:91:c9:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhSK+NzRjNbI54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDZiMTk5NzEtZTE4Mi00NzFhLTkxMmUtMzQ5ZTJlZjM3OTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB/tBfmHELdl4BkC8tOki9NfXjobP88Jqgkh
nYBqyrlgOagjzyEMl23Nnv5I7jhEzZJ4Qyi1/IJyKPPSCkcPad3hbqbKoAJm41NP
Sb4CwI4EFBdAPiDCAsM1swJqYH+qg3LbY4iqWHzSgrU67dSXIMHgE0HF4x01M66Y
S98vY68x5YbQf/7FM20iqVATTENSBTIIMOieYMnbCzTPAQ7bci5PCwGPA88vYN+3
MeRFe8XHZlJ0yxgdIIG1hQWegIRaytqTH8/gBYGY46EAngRSiXA/4Oc4hYdBc8Ss
jsx3sJCtBBTQQj+VHUd17K5qcZKO69ydDErtV1Q+gfwRKGWsHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCO8Q8Lp/sjT2GXF2/uxJ1i+9thLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmQ1NzljZDMtMzcxZi0z
ZDVlLWI3YzctYzRjNjYxM2MyZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABL4cySjEHjFugdRk8Ax+G8EHNXHcV1kcorToHn1mdudpBs0K/3c5zbh
vW6nAkvc8Tz50Me2gmoPgFJDMzrdkxb2rUFklLhHhDiT6sr7nm/i2cJOcGRoO3D7
qda6eDZqF79z0BRv0pab4eaFDO4Ztw12547n+OmYlIkTTTy/Ccx6xsyfSo1TpYyn
QezQNLITJdTEpiDT24LPqvbcnW15Km7qtE4EcgCagtlrJADkZux9o2VvWZu3ejOA
q/cSs/wS8lKE6/0kgLD3IHhPJsxYkv2ajSSeYb1U/yLXi67/6baMVHDlqvdRpJFL
k1cnEQ1hunzSlcBjJ894sRvjHduRya4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:49:13 2025 by rpki-client