Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de73ade-48ee-35f3-9b73-16e65295ced6.roa
File:                     3de73ade-48ee-35f3-9b73-16e65295ced6.roa (raw, json)
Hash identifier:          ZEZJSYxVVHgOWcVo36mYqP/TuPcqiKpBcFbTBiUR3+A=
Subject key identifier:   98:60:C1:34:87:CA:22:69:CF:BA:C4:7F:B2:2D:D1:BE:45:EC:85:89
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461E0CAE5184BD0AC14220
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de73ade-48ee-35f3-9b73-16e65295ced6.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        161.232.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:1e:0c:ae:51:84:bd:0a:c1:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=b279f2ff-c186-4324-a30d-c485377a2a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:a9:47:69:48:c1:02:b7:ec:c3:ce:46:19:
                    6f:0f:bc:20:f4:30:e0:5f:8a:05:7d:ef:75:c5:27:
                    7c:32:1e:76:d9:e1:c6:9a:39:e6:53:7a:6f:9a:5f:
                    43:8b:1e:86:05:56:44:2f:37:11:c2:a2:cf:da:30:
                    85:3f:52:d3:cb:26:2f:10:84:5e:8a:6d:6a:9f:68:
                    6a:03:b8:44:dd:38:2f:3b:03:a9:48:66:34:97:c3:
                    5d:31:0c:22:a5:6c:4e:d5:06:13:1d:f1:4a:9d:c2:
                    9c:f3:fd:7c:10:df:05:0c:68:7f:b4:17:74:fe:5f:
                    88:ab:f5:73:b1:07:7a:76:61:06:e8:48:44:cd:85:
                    e4:4b:6d:25:53:3b:c9:bd:6c:a8:1e:dc:be:a0:a2:
                    b8:8b:5c:71:2f:19:38:04:c1:be:2c:39:30:6b:67:
                    aa:f9:df:8d:6e:6c:72:20:c4:86:d9:c4:6a:fa:c4:
                    eb:6f:14:0f:65:2a:f6:c2:c8:60:5c:1a:05:3e:fe:
                    b0:e5:3a:fa:eb:a4:8b:0e:d1:ec:fd:7d:03:02:e6:
                    10:4f:f9:28:5c:1e:d0:fb:cd:bc:43:59:0e:ac:4b:
                    37:07:00:b6:c1:f8:ee:81:af:0e:01:78:c6:1e:e3:
                    b7:b0:e4:7c:b4:6b:c7:87:1e:e8:da:58:29:c7:05:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:60:C1:34:87:CA:22:69:CF:BA:C4:7F:B2:2D:D1:BE:45:EC:85:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de73ade-48ee-35f3-9b73-16e65295ced6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:42:19:76:71:de:a5:14:1e:7b:0a:02:82:04:bb:ff:82:2c:
         99:0e:43:fb:dd:e9:2a:ca:80:42:2a:dd:df:35:e7:a1:19:75:
         4a:fe:a4:1a:67:ea:a0:ba:5b:65:94:7c:9a:a1:0e:63:fb:b9:
         e7:ab:be:be:dd:a9:a9:bd:6e:0c:3f:60:4b:3a:a3:57:75:a0:
         c5:49:33:ae:f6:12:fa:5d:96:42:f9:d9:a6:54:5f:40:a2:67:
         26:5d:0b:cd:0f:24:1f:d3:99:ff:d4:c3:9e:cf:f3:92:96:e4:
         b4:33:86:82:b6:03:51:c8:84:31:83:e1:8c:c5:de:f3:3b:8d:
         3c:14:98:e1:d0:28:b9:71:2c:8c:67:08:c5:36:69:07:59:a3:
         f9:0b:76:bb:8c:c0:64:2f:3c:36:35:de:76:9c:d1:6a:74:2b:
         ec:cd:37:c1:2b:4a:69:4d:1e:c6:23:db:50:3f:d5:bd:a0:9f:
         8c:0a:d9:e2:08:c2:4a:f8:92:84:33:27:b2:35:a8:f3:42:41:
         cc:93:3f:11:4a:68:51:e0:eb:a8:74:73:38:fd:6a:7e:07:e0:
         74:fe:a1:5f:31:c7:60:14:b6:60:72:bc:86:2d:3a:80:e4:44:
         7a:ea:76:14:15:55:87:68:ed:8b:84:a3:52:35:fa:17:91:a7:
         17:32:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:11 2025 by rpki-client