Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b42615e6-2296-366d-b420-a15e27351617.roa
File:                     b42615e6-2296-366d-b420-a15e27351617.roa (raw, json)
Hash identifier:          /FxRB0wziwFSqcx/PbdAaPDveds/Mu9yu9RqApWcKDM=
Subject key identifier:   E3:34:32:91:5E:26:C7:41:FD:73:2E:36:59:FE:36:CA:ED:B2:C2:DD
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584B4081B08BD14C574403C8EE40
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b42615e6-2296-366d-b420-a15e27351617.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     29967
IP address blocks:        161.195.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:b0:8b:d1:4c:57:44:03:c8:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=5cb1ddfe-87c6-4866-b553-1b0099e48085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:9c:1f:64:af:ce:9b:e1:4b:7d:58:96:da:
                    3f:58:05:38:39:33:a2:c4:11:a1:49:60:6f:8b:a6:
                    46:a6:bf:36:e5:ff:d8:d2:b5:7e:38:ef:16:dd:64:
                    fe:01:b4:01:44:20:99:a1:7f:ce:5e:6c:2f:c5:41:
                    c4:74:1e:cd:2b:9c:d2:6f:c8:72:f7:67:60:27:3f:
                    d9:ff:9d:2a:74:d4:97:df:3f:dd:ae:94:70:78:bf:
                    da:d7:db:3f:7c:62:af:eb:87:a5:7e:f2:4a:f4:ec:
                    66:30:61:38:65:41:b0:5d:8b:82:29:ba:a5:d2:e9:
                    a2:9c:4f:43:be:d7:e7:6c:b9:4f:e7:c7:7e:9c:77:
                    b8:9d:66:22:cc:e4:97:c2:73:3b:9f:c3:61:59:31:
                    1f:70:ea:43:0a:cc:e7:e8:f2:4b:50:99:b1:73:94:
                    33:7f:50:82:f9:e4:68:30:5b:1d:31:0b:b5:f4:9f:
                    fb:1a:47:40:95:fb:c2:fb:bd:d5:6d:bb:49:f1:58:
                    4e:04:fe:fa:f7:21:8b:f1:b5:54:91:5d:53:43:93:
                    6d:64:fc:d7:96:f9:bd:56:5f:24:55:6e:76:62:7e:
                    4a:87:58:8f:fd:03:a1:ed:aa:b4:4b:7c:e6:33:6c:
                    1b:e3:1a:3c:2b:43:12:82:a2:49:48:5e:ac:e3:e6:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:34:32:91:5E:26:C7:41:FD:73:2E:36:59:FE:36:CA:ED:B2:C2:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b42615e6-2296-366d-b420-a15e27351617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:4a:7a:d6:fe:80:88:79:81:08:a0:af:37:6d:f3:61:50:
         2d:0e:db:6e:33:f1:31:65:b4:4b:d7:77:f3:0a:7b:be:58:ae:
         74:9b:aa:ee:08:e9:2d:40:80:ce:cd:43:09:9e:8b:69:ec:d8:
         3a:64:c9:13:88:d8:73:81:4e:7c:03:ac:aa:b9:9f:b9:d3:28:
         c1:c5:35:0b:1b:05:16:58:b8:12:47:85:95:78:3b:a5:94:2d:
         21:33:18:c7:63:2b:f7:93:f8:26:55:a2:c8:5d:cf:be:fa:42:
         05:6d:4c:ac:88:18:84:2f:8c:ae:d3:cf:c6:53:85:3f:d7:ad:
         0c:7e:33:84:b3:0d:43:c3:2f:c4:a5:cc:1b:1c:63:7a:94:53:
         c9:dd:45:65:15:96:a6:f5:7a:d2:96:db:bc:3a:7a:27:2a:bb:
         aa:20:bf:f9:8c:58:36:92:58:a2:e0:44:1a:00:29:81:ac:e8:
         d8:9f:98:28:0c:af:7f:93:1d:a7:4d:86:b2:a9:1e:bc:e8:ea:
         44:e2:a4:c0:3f:b0:e3:c8:f0:ef:62:f6:f6:0b:3a:0f:ef:fa:
         12:64:c8:f6:f2:f4:fc:ce:e6:0e:d2:78:62:3f:44:5b:31:c7:
         38:03:6a:d0:77:6b:81:f5:23:08:41:51:1c:c9:e3:87:eb:68:
         e0:ae:06:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:22:01 2025 by rpki-client