Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa
File:                     e2c1050a-8329-3314-821d-b44bd07c87ed.roa (raw, json)
Hash identifier:          1/EnUtwINdZIxG3mdhuxfTqZuoyuxuDsyRoTabNLMn4=
Subject key identifier:   BB:2C:DC:CD:DB:9C:5C:95:F3:25:B1:53:06:BA:78:19:C5:0F:6C:51
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461F3057285BFD0E817D00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        161.232.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:1f:30:57:28:5b:fd:0e:81:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=0d851d7e-d281-48b6-89e6-a49689e12aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:e9:af:25:b4:77:7c:a7:9c:17:0f:e9:ba:
                    0d:4b:46:b5:4c:82:ed:d3:3e:8c:c6:b7:d8:10:56:
                    b2:9e:72:22:05:64:c7:62:d7:37:ed:92:0b:22:7b:
                    94:b2:a0:26:5b:f0:79:fe:a6:d6:d4:42:f5:f2:a1:
                    c2:c6:3d:29:3f:9e:77:5d:29:4e:24:7b:27:a0:fb:
                    9b:3e:0d:2a:57:26:c0:e2:4e:db:69:3a:2b:44:2a:
                    8a:ea:55:17:00:83:3c:0d:a0:57:cc:0c:34:4d:b7:
                    8f:a9:1c:89:01:79:01:69:99:81:04:4e:bb:e2:1e:
                    a1:45:7b:a9:1a:6f:44:19:f3:fd:10:5a:92:a5:f4:
                    29:88:53:bf:cc:f4:97:d8:ba:ca:f2:bb:a7:16:97:
                    f8:21:48:bd:17:f4:29:5b:9f:fd:e9:31:46:dc:93:
                    dd:be:a2:b1:1c:c5:cc:6c:33:a3:d4:05:aa:55:93:
                    f4:a7:8f:38:5f:ba:72:37:df:57:13:54:55:b2:14:
                    d9:89:9f:b2:54:9c:60:44:53:2c:6b:99:6e:c7:34:
                    c1:28:4f:1f:78:74:2f:de:ae:1a:7e:85:6d:8b:a1:
                    d7:cf:95:39:9b:09:f6:a9:ec:e4:f0:b1:e9:70:3c:
                    30:3e:2f:6f:67:2b:fe:ab:fd:0e:94:f0:04:e1:da:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2C:DC:CD:DB:9C:5C:95:F3:25:B1:53:06:BA:78:19:C5:0F:6C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:15:d4:20:ce:dd:44:4a:cd:04:78:a1:dd:54:42:04:06:df:
         c9:fa:88:31:d2:88:58:15:e7:34:75:d8:58:c6:45:60:d4:4c:
         75:7b:4f:51:fa:05:39:77:6b:87:c5:a9:9b:80:03:9f:aa:a8:
         53:94:85:09:d2:0f:70:a9:b0:d1:aa:50:5c:41:c9:85:79:46:
         1e:04:14:ea:01:06:51:d4:18:f7:30:31:da:1b:6c:3f:12:f2:
         d5:a1:42:af:1f:f7:1b:fc:43:04:52:f7:48:59:f8:71:06:6b:
         de:71:1a:e1:da:9c:65:c5:ba:41:44:4b:b7:96:f7:fe:46:10:
         90:5b:1f:10:19:98:6f:85:c2:2b:02:80:8b:d5:75:24:d1:49:
         c6:f4:f1:8c:bf:e7:d6:4b:c7:ad:fe:71:c6:13:df:a5:29:84:
         ee:6e:ac:0d:7b:c7:01:35:af:0e:5a:35:66:a8:f2:e5:99:d6:
         0d:85:d5:97:12:fb:65:11:d2:52:41:4d:4b:d8:70:70:15:ef:
         cc:0b:f4:27:98:e6:b6:01:d1:41:f2:17:d3:bd:53:f3:c1:dd:
         3e:d6:f7:11:f6:8a:36:2a:02:31:16:fb:4e:47:52:04:34:58:
         24:66:7b:ea:c6:64:50:6b:39:d2:a3:bf:59:93:ce:4c:08:58:
         5e:4f:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:49:59 2025 by rpki-client