Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92bd8a73-386c-3c7a-b3c2-1306ec1782d3.roa
File:                     92bd8a73-386c-3c7a-b3c2-1306ec1782d3.roa (raw, json)
Hash identifier:          ReA3LFVMRDNooUWDWgQtY47bpyUJRyKdaJBQmG8pfqE=
Subject key identifier:   44:10:B9:D9:1C:63:8D:80:E4:9E:D8:A9:56:70:D0:5E:7C:CF:61:BE
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461E988A8FFA5BD8B75940
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92bd8a73-386c-3c7a-b3c2-1306ec1782d3.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        161.232.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:1e:98:8a:8f:fa:5b:d8:b7:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=68809184-603e-4bd8-b18d-e25718b54303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:a3:ec:34:87:53:16:bd:c7:e7:62:8b:e6:
                    58:74:0f:3e:e7:97:f2:40:30:73:f7:52:78:55:29:
                    e9:16:0a:98:05:47:0c:a5:0f:ca:6f:8f:d6:71:b0:
                    04:57:06:e2:64:16:c2:86:f0:b6:e3:81:54:7a:4c:
                    ce:8e:72:df:e5:26:5a:e5:92:d9:7b:3c:e2:d6:a7:
                    87:97:bf:37:f2:85:35:82:ca:c5:f6:ab:6f:23:5a:
                    81:e4:43:84:12:51:ba:ea:3d:8d:22:73:4c:1b:79:
                    02:93:d4:0c:4d:b6:25:7f:4e:ae:ae:7a:51:bd:65:
                    a7:d8:a0:d9:48:b6:9b:29:f4:31:69:6d:09:c1:c6:
                    07:6b:c5:44:28:c5:96:b7:bf:eb:2d:f5:71:2f:e3:
                    04:d0:10:50:e7:43:1e:39:d0:dc:ed:e7:33:b8:84:
                    64:e1:04:e2:40:0f:6b:02:35:0a:18:7c:9b:4b:59:
                    30:32:aa:22:0a:81:0f:fb:a3:ce:1f:ea:8f:a6:1e:
                    c1:23:c9:cd:07:a5:1d:30:39:49:a7:0d:12:64:02:
                    f5:bf:cb:0a:f6:a5:d4:db:3b:d3:9c:8c:42:47:ce:
                    cf:9c:70:ad:b1:17:3f:a2:64:62:c3:f6:26:cd:5b:
                    db:06:d2:39:44:79:91:68:84:b3:5e:89:45:7c:6e:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:10:B9:D9:1C:63:8D:80:E4:9E:D8:A9:56:70:D0:5E:7C:CF:61:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92bd8a73-386c-3c7a-b3c2-1306ec1782d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:8e:f9:cc:a8:ff:72:96:6c:98:4b:6c:64:37:8c:71:f6:
         3f:ab:ab:37:e4:11:47:7a:5f:ef:8a:33:f3:68:39:bf:dd:a6:
         c1:e0:c7:34:05:83:54:1f:cf:3d:df:1c:b2:92:e3:f6:6f:a7:
         5b:7b:75:b3:c9:09:a8:1e:5c:5c:f8:8f:35:31:22:94:bc:83:
         6c:1a:d3:77:5c:4e:4b:3c:b4:ae:de:9d:f7:a8:ba:b5:09:9e:
         0a:61:b9:ab:6b:a6:58:a2:4a:ba:4b:a9:81:09:8f:75:07:2b:
         7d:39:47:3e:23:f0:04:49:e2:07:1e:0d:91:0a:9f:5f:98:9e:
         f0:d4:be:d2:30:65:d0:c7:37:36:32:35:60:a8:de:01:41:29:
         27:5a:80:b0:28:4c:1d:4d:23:e8:8b:d3:05:3e:88:db:b5:8a:
         29:3e:95:97:56:a7:03:50:90:be:73:49:b3:f6:33:7f:33:18:
         7a:d7:3b:97:4f:e0:57:cb:49:b5:04:13:b4:28:3b:82:3b:5a:
         aa:5a:d4:46:6f:77:8e:38:d5:57:f7:48:d8:4d:5a:a6:92:a7:
         31:d6:9f:4e:2f:39:f7:45:1f:85:2e:c8:73:e2:19:4a:4e:e4:
         71:4e:0a:f5:36:d4:0f:05:09:7d:9e:49:75:71:b7:55:ae:1d:
         af:92:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:21 2025 by rpki-client