Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/8bfcb5db-cbf9-3816-a86f-be008a9f6d40.roa
File:                     8bfcb5db-cbf9-3816-a86f-be008a9f6d40.roa (raw, json)
Hash identifier:          lHvfkbETNrrWYJLEvEBbmSSQCL3k0oI8gMPDKOr/MPM=
Subject key identifier:   C0:EB:CB:0E:BE:40:88:F3:DD:89:C0:AA:E6:99:CC:99:2A:3D:D2:0C
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584AAB265E81EC2AC36648676100
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/8bfcb5db-cbf9-3816-a86f-be008a9f6d40.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     5610
IP address blocks:        161.195.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5e:81:ec:2a:c3:66:48:67:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=750d6524-4ac5-4d75-ac98-43bdd188cedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:a2:09:7b:cc:57:93:e7:31:2d:6e:f4:c5:
                    3f:e3:4c:77:34:00:52:a8:7b:c7:e7:64:8a:75:b3:
                    69:97:f5:fe:af:f2:cb:f2:f8:b9:29:cb:81:3e:60:
                    29:03:c9:5b:48:e2:95:93:e1:5a:23:e3:e4:1d:6a:
                    54:20:00:3a:83:30:ab:5b:c5:8d:ee:c9:2b:de:f6:
                    27:2d:59:0e:8d:ce:bf:5a:23:7d:97:31:4f:2a:1e:
                    74:d2:c9:85:c6:ca:df:ee:df:5d:75:84:60:bb:6e:
                    8a:6d:e2:93:08:dc:77:ca:53:89:8c:61:a5:cd:16:
                    50:39:f4:ee:7b:48:d5:5f:fe:75:e2:b3:a7:09:8e:
                    69:e4:56:c4:05:af:5d:85:90:06:18:b4:40:db:3b:
                    9d:6a:38:c4:67:73:d8:d1:71:ed:0a:e8:3f:66:21:
                    06:d4:50:72:d5:e6:3c:3a:42:5b:c5:97:a2:52:46:
                    98:d4:6a:d2:cd:94:52:54:97:a0:c8:5b:ee:97:36:
                    2b:ac:cb:60:21:1b:79:8d:f6:dd:b3:ac:ee:d4:3f:
                    d1:7b:68:8f:5c:1b:69:9a:c4:34:38:fd:02:f5:de:
                    96:b9:7f:48:05:d4:22:db:3b:43:9d:a7:e8:80:14:
                    2f:00:9e:4b:3d:2a:88:0b:2a:31:6e:d2:8a:ca:ed:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EB:CB:0E:BE:40:88:F3:DD:89:C0:AA:E6:99:CC:99:2A:3D:D2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/8bfcb5db-cbf9-3816-a86f-be008a9f6d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:fc:3a:c9:40:a2:f4:ed:aa:f3:3f:c3:8d:3b:a2:94:50:f7:
         63:46:b7:b5:29:ad:b4:84:57:2f:78:0f:13:5b:06:64:de:0a:
         a6:37:fb:0d:8a:55:94:cb:e9:9b:6f:98:18:eb:3b:75:92:1d:
         98:05:6d:66:39:57:ac:94:a4:f9:fc:3d:92:57:e3:ca:0d:f5:
         e7:2f:09:d0:1d:7f:e5:37:23:af:d5:6f:4f:52:89:0d:4f:f0:
         0d:bb:ff:b7:ad:0b:22:aa:c1:04:02:70:1e:5b:2b:5c:b4:a3:
         1d:a7:24:2b:3b:bd:2f:bd:4e:a4:f2:b7:e4:2b:50:2b:88:2a:
         3f:a8:a4:02:06:a1:5e:34:39:ef:93:9f:07:ec:3e:75:3e:9e:
         90:9a:99:bf:0c:0a:15:a6:f3:c5:bf:97:fc:72:3a:10:b6:9e:
         e7:2f:f5:3b:ff:0e:75:5e:e4:8b:1e:bf:f5:69:a9:b6:21:67:
         ea:a6:e3:d9:73:0a:f8:16:8d:bd:25:7c:36:b0:23:d4:76:0c:
         8f:c1:82:ed:0c:74:ce:05:13:8d:28:45:91:6e:ba:da:05:32:
         a7:b4:7e:83:69:f2:00:9c:5b:79:9d:25:61:95:7b:34:35:0f:
         23:20:d9:42:09:ae:5b:b1:e7:3b:73:43:32:28:60:c0:c1:2f:
         c7:9c:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:55 2025 by rpki-client