Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a50639eb-a3de-3bb8-b467-e8b1def73986.roa
File:                     a50639eb-a3de-3bb8-b467-e8b1def73986.roa (raw, json)
Hash identifier:          QPoYhgmzmKR0E83u8Sb+MqUj7FhdltXyW4zTIZbaMOM=
Subject key identifier:   98:70:2A:7A:19:35:D8:47:B5:11:4B:67:FB:EF:B1:08:74:5C:49:9B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461DC15B23103AAC34BC00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a50639eb-a3de-3bb8-b467-e8b1def73986.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        161.232.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:1d:c1:5b:23:10:3a:ac:34:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=e0be38c9-ee84-42e0-8ee8-7a470b0177ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:a0:e9:c7:58:3e:cf:98:ef:ff:69:12:5c:
                    c3:19:83:a6:9a:0c:ff:81:cc:17:82:05:5e:15:73:
                    e4:8b:e8:dd:f9:19:47:46:4e:d0:fe:72:a1:6e:ca:
                    7f:12:87:b6:98:d6:2b:ff:8a:1a:20:13:4e:6f:b3:
                    87:07:c1:79:16:3d:5b:e5:92:1e:8e:5a:8b:ab:c4:
                    67:9f:f0:f1:49:f2:8f:91:61:81:b6:ef:ab:2f:a1:
                    19:3b:fa:4c:c0:34:5e:de:42:dc:7e:e7:b7:53:94:
                    1e:30:3b:87:47:d4:f5:fd:86:fd:6e:d6:58:3a:5a:
                    60:b9:b2:9c:44:d5:eb:b4:fd:bd:61:b7:e3:47:6f:
                    1a:9e:58:d3:8b:b3:7a:3d:e4:b3:54:24:e5:2f:e9:
                    bf:11:77:28:10:4e:ad:b6:db:b4:6f:26:c9:29:c2:
                    59:42:47:8a:1e:92:22:c6:cd:05:24:9c:be:23:36:
                    81:5d:dd:a3:b4:17:9a:7c:1e:c3:a9:57:f3:09:ab:
                    a0:f5:d4:3a:df:95:74:b2:b3:85:1a:bd:d8:ee:2e:
                    32:a8:81:ea:66:09:29:29:23:41:4b:02:dd:f1:22:
                    f3:64:6a:48:a7:2e:51:76:68:c4:d2:79:55:4f:5c:
                    a9:90:68:d6:8b:d0:5b:7b:98:6d:7d:d9:3f:83:01:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:2A:7A:19:35:D8:47:B5:11:4B:67:FB:EF:B1:08:74:5C:49:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a50639eb-a3de-3bb8-b467-e8b1def73986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c3:96:1c:47:0f:6a:bb:de:5d:a0:12:a5:b2:a4:5e:a7:6a:
         a8:78:41:20:4c:8c:1d:5a:f0:1c:bd:d8:35:3c:38:20:b1:ac:
         10:3b:c1:2d:4a:05:d3:d7:fb:81:bb:7b:46:c1:3d:dd:5b:7a:
         0d:14:e3:07:39:3c:75:34:b7:38:40:2e:5f:11:93:9f:ad:c3:
         c6:74:0d:c1:5c:58:c4:46:07:41:95:7d:72:90:dd:99:46:df:
         58:fe:cc:79:67:2b:b7:3b:4c:95:2a:7f:65:b0:89:6e:4a:0f:
         da:24:b4:6a:0b:88:eb:e1:a7:2a:90:d4:ba:ac:b6:3a:f4:7c:
         f4:fe:24:f8:1c:cc:20:2f:53:ca:e8:69:09:fc:3d:1e:0c:4a:
         0a:dc:06:5c:51:51:ce:a6:57:3f:b0:5f:71:b9:5c:4f:df:4a:
         72:0f:cc:16:62:3e:06:a1:64:35:0d:be:c4:e7:7d:96:c2:4e:
         74:05:e0:94:66:e1:1c:2f:09:f4:25:84:54:fd:bb:82:79:d3:
         d0:5b:28:b0:23:5e:9e:b7:cb:bd:16:8c:4d:16:77:a6:04:43:
         09:76:a5:94:24:db:81:cd:86:36:81:03:b4:a9:31:17:15:6e:
         dd:77:ed:f3:a5:82:5c:54:b8:cc:b8:c7:6b:35:8d:8a:78:a8:
         fe:96:db:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:06:51 2025 by rpki-client