Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2eea05da-1b73-3511-bad2-2a5bf16380fb.roa
File:                     2eea05da-1b73-3511-bad2-2a5bf16380fb.roa (raw, json)
Hash identifier:          zrq8RioaK0EUVJs01QQxYD1iNLZ8n3al8ArHbANw9Vo=
Subject key identifier:   38:C9:E7:D7:C3:57:35:7A:FB:FA:5C:16:A3:83:22:23:42:BD:CF:A7
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620207D7797545D52B94E280
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2eea05da-1b73-3511-bad2-2a5bf16380fb.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        161.232.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:07:d7:79:75:45:d5:2b:94:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=8b2d72dd-b809-49d6-94bc-d21bb3891630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:02:e7:2d:68:30:48:47:4f:a8:42:d2:ba:
                    ce:d7:5a:4b:5f:04:b6:d2:cf:d7:4e:f4:14:9c:34:
                    af:f6:cb:7d:c9:ea:d6:4a:43:89:c6:82:14:07:dd:
                    24:55:b4:d0:f1:45:b5:a7:ad:90:6b:6d:cf:fe:8d:
                    93:b6:7e:81:fb:5b:20:3f:70:21:21:c1:b6:09:71:
                    28:6b:77:c6:19:4d:4f:31:5e:46:ef:b5:84:6c:0f:
                    13:eb:fa:41:de:6d:4d:0e:03:50:c0:ae:5a:41:c5:
                    b1:ae:32:0a:14:ac:24:16:2c:16:fc:93:8b:6a:fc:
                    cf:7d:c0:45:e9:50:92:68:3e:2c:e4:a7:bd:08:6e:
                    f4:06:6f:2f:c3:f9:e8:c0:78:69:89:71:4c:54:61:
                    3d:41:0f:8d:79:03:f3:37:74:d9:64:c8:64:16:05:
                    68:e7:db:37:44:0e:22:fe:36:54:87:96:b7:8e:5e:
                    3e:a2:8b:47:72:d9:ac:8a:84:73:ac:b5:a9:fc:3c:
                    e9:30:52:21:fb:07:fd:a5:8f:66:03:52:f6:fa:89:
                    2b:04:47:e6:3e:4c:0c:fe:45:47:6b:49:ba:02:e6:
                    a8:be:c6:31:49:97:4f:7e:f8:6b:d0:b8:40:bf:bf:
                    13:f0:ff:7d:16:27:5f:77:cc:51:9e:a6:69:8e:2f:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C9:E7:D7:C3:57:35:7A:FB:FA:5C:16:A3:83:22:23:42:BD:CF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2eea05da-1b73-3511-bad2-2a5bf16380fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:be:c9:58:ce:41:57:f3:92:8d:ec:b5:ef:74:53:a2:1d:
         6f:d1:bf:cf:e0:41:18:5a:a6:99:21:2f:ea:03:d6:24:b9:f3:
         22:08:57:92:7a:c9:60:8f:25:93:4e:62:e9:ef:d5:f3:ec:71:
         65:a7:60:07:8d:0a:79:4e:f8:e1:80:c4:86:e1:2f:99:34:9c:
         44:7d:8c:d5:84:03:00:17:85:89:0f:b7:a2:c4:01:ff:37:c0:
         ab:43:38:a4:bd:15:d0:60:8a:61:b3:77:34:03:c1:d7:7c:9b:
         79:67:5e:6c:87:75:51:0d:d6:26:99:4e:d8:68:1f:9c:2e:da:
         d9:2c:24:cf:37:74:b7:6d:63:ba:a3:69:23:0d:eb:c2:ab:08:
         78:13:1a:99:fb:ea:b4:67:84:1a:b2:5f:12:c7:ff:79:1d:15:
         08:ad:8d:29:21:3e:54:5d:5d:0f:7f:46:a7:26:0c:1b:31:dc:
         14:30:e6:b1:66:1d:b2:4b:1e:66:e9:5d:cb:2c:7d:bf:03:af:
         36:f3:32:20:9b:78:90:43:0d:24:53:97:80:d9:77:19:0c:58:
         66:8a:86:07:d9:30:f6:55:91:8f:f8:a8:4c:9f:21:bd:0a:fa:
         e3:90:71:ed:4a:e7:e7:86:be:11:ee:d1:a0:f7:c7:1b:86:3d:
         e9:89:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:17:30 2025 by rpki-client