Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44943bd-9d18-35a4-a1d7-e3301bec9a9e.roa
File:                     b44943bd-9d18-35a4-a1d7-e3301bec9a9e.roa (raw, json)
Hash identifier:          OaL5cBmRy4KBLgdoJKWaeqqmZAOkboZB7Li5S6AHy7s=
Subject key identifier:   76:C9:B3:B2:E5:85:88:50:AE:07:9B:87:84:D8:BC:F7:14:E0:DA:3F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461E1E95020E99B4DB2B80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44943bd-9d18-35a4-a1d7-e3301bec9a9e.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        161.232.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:1e:1e:95:02:0e:99:b4:db:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=ad11b7fe-a09b-4131-bc97-157cc1ae30dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:9f:5f:cf:0f:be:76:d2:50:ab:db:4b:c8:
                    4d:7b:57:ed:12:7f:96:73:3d:50:20:22:a9:2c:11:
                    21:84:1b:e8:3f:37:e4:7e:b1:58:7d:24:0b:2a:f4:
                    81:19:73:6a:e4:92:f7:0c:88:c6:2a:8f:1b:18:e1:
                    00:e4:aa:f7:ee:eb:88:63:71:4a:6f:2e:d8:5a:fe:
                    cd:ac:3f:87:ec:28:16:64:10:a5:ae:fa:98:59:38:
                    40:f6:69:be:d0:65:f2:50:49:a4:7d:c4:d5:03:3c:
                    48:13:fb:4c:21:af:83:a0:c0:8b:62:0d:9a:ac:96:
                    ff:7a:5a:3e:6f:39:6f:7c:a8:da:fc:47:9d:ac:62:
                    a1:82:19:c3:00:c6:f7:a0:26:55:ee:98:eb:9f:85:
                    91:a0:a5:9f:75:0f:67:0f:30:63:e5:93:dd:28:8f:
                    23:68:ea:16:e3:da:7b:f2:92:ec:cc:60:05:59:86:
                    09:a9:45:df:4d:6a:96:e3:59:7d:12:1e:c2:03:a6:
                    84:c0:8e:6c:2c:67:bd:1e:64:b0:27:de:e4:93:55:
                    4d:9f:a3:8e:2f:d3:82:75:3c:e7:2c:c0:b6:b6:c2:
                    e6:8f:4f:8c:37:0d:0d:2f:0e:3b:cd:5d:04:42:ae:
                    a2:e1:60:0a:1c:50:43:c8:1c:86:4d:99:40:f8:42:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C9:B3:B2:E5:85:88:50:AE:07:9B:87:84:D8:BC:F7:14:E0:DA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44943bd-9d18-35a4-a1d7-e3301bec9a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5a:84:35:bd:a5:8f:de:a2:a2:f2:51:b0:fd:85:df:42:2a:
         dd:cf:4a:b6:72:3b:d1:04:ab:18:b5:c6:75:d0:2b:a2:48:62:
         d2:c9:94:6a:83:80:28:06:3b:90:6e:43:1c:b2:1a:35:9c:ce:
         d0:5c:f7:fc:72:b1:a3:9d:d8:e1:38:76:90:10:c9:90:4e:cf:
         1a:7b:75:b3:8a:a1:6e:60:84:7f:c2:3d:f9:a7:d5:c9:16:12:
         c7:9d:e2:f8:c4:d8:22:b2:f3:0e:3b:4a:c9:d0:d9:24:84:a1:
         2d:42:d4:5a:e0:c2:40:d0:87:08:4c:bd:3e:0c:1c:89:64:ee:
         16:2e:45:3b:5a:08:6f:31:5c:74:3c:fa:91:b3:4d:6c:ff:52:
         76:07:2c:d2:ab:ec:41:06:2f:95:19:88:77:47:2e:b7:b7:2e:
         d2:4c:65:59:58:00:2f:fc:b1:4a:29:13:95:09:55:9e:1c:b9:
         72:6d:a4:22:7c:d0:7e:d8:7b:2b:0a:0b:f0:4a:2f:25:21:49:
         47:a6:51:5a:76:f1:a6:32:52:3c:d8:e1:3f:2a:fb:1f:d7:ec:
         5e:79:66:97:67:90:5f:a2:67:c9:f4:70:1e:b8:9c:9c:d6:65:
         82:67:01:2d:9e:da:f9:a3:78:f0:a4:dc:97:4f:dd:20:be:46:
         01:f3:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:43 2025 by rpki-client