Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/d1bf37a9-e0a5-3b1d-8d7e-234a254abfae.roa
File:                     d1bf37a9-e0a5-3b1d-8d7e-234a254abfae.roa (raw, json)
Hash identifier:          yCtfnBbQPSFnRuK8ORM+MdRq4nK6XeKqWWfZCUiqkbc=
Subject key identifier:   A8:89:1B:1F:D1:54:D9:EB:E6:B6:08:3C:BC:B3:89:25:F6:BA:26:9A
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584AC016447B5097D1F6DEC51280
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/d1bf37a9-e0a5-3b1d-8d7e-234a254abfae.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     206051
IP address blocks:        161.195.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:44:7b:50:97:d1:f6:de:c5:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=0a514ef0-a7ca-419d-8e6f-c4dfe52fcf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:79:d6:7a:84:26:68:92:3f:65:97:1a:82:
                    c0:79:e4:e8:a3:b5:bb:f7:20:bd:85:77:23:8c:31:
                    b2:3c:3a:5f:66:36:7e:84:e5:43:aa:8d:50:71:b4:
                    95:72:f2:1c:ec:d8:cd:da:d3:6c:c7:50:81:9d:d4:
                    f0:0e:af:56:c4:27:28:b8:7d:2d:c0:e0:19:ca:26:
                    f8:1a:0a:3d:a5:cf:36:f5:4b:f2:49:05:06:64:b8:
                    15:f1:b0:af:51:f5:73:06:eb:e6:21:f2:53:f5:90:
                    17:25:53:0c:00:bd:4e:58:a0:4d:ae:d2:15:a9:e9:
                    e8:60:88:16:f9:44:46:30:f0:a8:ec:bc:13:fb:8e:
                    9d:d0:08:63:13:a1:73:a6:da:18:53:6d:88:0a:cf:
                    69:5f:e0:b7:7e:98:be:46:5e:be:cf:a4:00:0a:99:
                    eb:65:20:28:d6:ba:c7:9c:3b:e7:4c:4f:5a:2c:55:
                    c7:ad:05:ef:90:06:00:90:25:41:a5:2b:0a:32:11:
                    b3:51:5c:cd:06:a5:bf:dd:20:35:a4:7f:3b:b3:c2:
                    0c:81:86:10:5b:b7:6e:44:16:7d:ce:18:a4:45:8c:
                    98:03:95:48:fb:c8:a1:d6:66:2d:57:8d:86:6f:e3:
                    fb:a7:c4:75:a3:f3:a9:9c:cb:7e:f0:31:22:c2:19:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:89:1B:1F:D1:54:D9:EB:E6:B6:08:3C:BC:B3:89:25:F6:BA:26:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/d1bf37a9-e0a5-3b1d-8d7e-234a254abfae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:af:71:54:a9:15:91:3e:f3:b4:52:21:e3:3d:d5:d5:ba:24:
         f6:ea:cf:34:28:e9:1e:e1:43:74:54:a6:a8:06:a0:95:19:cc:
         c1:08:fa:24:94:b7:f8:6f:ff:30:55:56:29:54:d0:c2:89:cc:
         ea:1a:b0:b3:ea:71:e7:0b:28:56:03:bc:ca:56:8d:05:54:3d:
         2e:e6:e4:d4:14:fc:a6:73:08:08:c7:7d:59:d0:0b:ce:a4:ca:
         2a:8a:78:d4:cd:f6:45:8a:e6:5a:18:5d:f9:1a:71:0b:a7:9a:
         2d:f5:27:f4:f0:3e:c8:f8:bc:65:fa:50:bb:dc:b9:e7:e4:e1:
         a8:51:77:13:85:4b:60:06:dd:81:0e:61:61:31:5f:e2:91:ec:
         98:df:b4:01:e6:c5:5f:51:48:db:84:5f:1a:4c:ab:22:c9:e6:
         2e:fc:2c:8b:ed:53:0d:28:3b:cc:3c:cb:bb:5d:ed:0d:75:6c:
         ed:fd:85:58:63:2f:a5:ce:18:6c:92:73:09:30:b4:60:52:ae:
         cc:37:fd:86:d0:d8:50:44:8c:87:10:11:63:03:5a:93:3e:9a:
         3e:9c:ac:f9:54:ae:83:ad:39:27:dd:68:1f:bc:cd:02:4b:bc:
         65:30:f1:00:93:ef:4f:e4:a8:6b:64:dd:f7:da:31:c4:bd:12:
         b8:b9:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:45:15 2025 by rpki-client