Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa
File:                     e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa (raw, json)
Hash identifier:          gYvrKR/BYhmVCyz9JBI0oCIIUY0LEA9ajd2+fOAC78M=
Subject key identifier:   3F:9D:B6:4E:C9:35:52:28:60:74:C2:64:14:A0:7A:AE:4D:C7:22:A5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461F209DCB6AF26F773480
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        161.232.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:1f:20:9d:cb:6a:f2:6f:77:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=69e34807-9ad9-4146-98ab-5571ccb91d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:29:7f:6f:f5:ad:de:00:54:76:e3:d7:42:
                    05:b7:8d:e0:b6:87:23:3d:8f:00:c1:ee:5a:ae:09:
                    c5:55:0d:f3:f4:0e:1f:12:93:97:6e:1e:96:32:8f:
                    62:96:16:ab:1d:8a:da:78:d1:0f:e3:db:47:f4:87:
                    21:aa:88:6b:98:4f:bc:35:76:8c:a9:bc:56:c5:20:
                    b2:2e:35:f1:44:8b:12:4a:44:ba:28:6c:b3:6d:90:
                    74:6c:1a:c7:b0:8c:6f:d8:f6:cb:8e:05:3c:a5:e9:
                    fe:3d:a5:5d:31:0d:84:d4:c1:11:7e:a3:ef:ae:7e:
                    aa:bc:c6:3f:5f:72:db:44:ea:56:36:2e:e3:7d:4d:
                    9b:3c:03:eb:1f:82:f9:db:05:f8:48:dd:50:66:bd:
                    b3:b8:c4:60:34:5b:36:ac:05:f3:7c:1f:1a:ef:72:
                    ec:fe:89:22:a0:51:f4:f2:2b:29:7a:cf:ca:26:88:
                    33:37:f9:f7:ef:ce:45:c2:0e:49:06:3e:84:42:06:
                    0c:e8:bf:11:e7:68:49:86:31:91:c2:4c:80:43:5a:
                    9f:8f:0b:ae:0d:cf:63:eb:18:5c:5e:92:cc:a3:85:
                    eb:d9:9b:e6:38:f9:00:5e:be:50:5c:9c:f7:d1:5e:
                    cd:f5:17:75:6d:44:8d:a6:a9:8e:4c:e4:8d:1f:53:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9D:B6:4E:C9:35:52:28:60:74:C2:64:14:A0:7A:AE:4D:C7:22:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:de:bf:f6:67:59:6a:3b:c6:82:62:96:1a:8d:94:e8:f1:1e:
         66:0a:d3:f2:9d:ad:16:9b:1d:1b:8c:72:b9:7e:3f:87:db:d9:
         01:f4:8c:c8:44:d9:53:77:51:1b:bf:19:fa:21:fc:b5:5b:de:
         b0:45:db:de:37:95:3a:dd:b7:6a:a5:21:a1:38:43:d3:07:4f:
         2d:d3:ed:d3:17:dd:85:f6:c7:d3:b4:2b:d1:8a:96:30:1f:48:
         7f:c5:53:e8:d2:24:ee:75:c2:03:64:ab:a4:9e:47:c9:e3:ed:
         10:cb:dd:d5:e0:25:32:04:e3:a2:69:a6:23:27:29:01:75:61:
         02:d0:f4:d1:62:08:8f:a9:87:13:34:dd:3e:66:62:02:c2:4b:
         62:c0:85:11:c3:35:1d:32:b1:e2:4b:42:0d:2a:b6:0e:af:3e:
         39:7e:5a:fc:00:b5:91:e8:33:3a:db:77:6c:5a:4f:fb:7b:4f:
         55:18:c9:76:b3:54:8d:83:3b:b7:f5:9b:d5:7b:b1:7e:4c:26:
         94:0c:de:1d:88:52:0f:e7:4c:88:0b:2d:c2:20:3a:05:e4:86:
         6e:1b:8f:d8:25:fd:09:f5:a6:c9:8a:8f:59:df:8e:66:23:87:
         64:30:e6:4e:f6:7c:de:0d:66:7f:6e:51:35:c1:38:b4:aa:88:
         a6:00:2a:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh8gnctq8m93NIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NjllMzQ4MDctOWFkOS00MTQ2LTk4YWItNTU3MWNjYjkxZDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVgpf2/1rd4AVHbj10IFt43gtocjPY8Awe5a
rgnFVQ3z9A4fEpOXbh6WMo9ilharHYraeNEP49tH9IchqohrmE+8NXaMqbxWxSCy
LjXxRIsSSkS6KGyzbZB0bBrHsIxv2PbLjgU8pen+PaVdMQ2E1MERfqPvrn6qvMY/
X3LbROpWNi7jfU2bPAPrH4L52wX4SN1QZr2zuMRgNFs2rAXzfB8a73Ls/okioFH0
8ispes/KJogzN/n3785Fwg5JBj6EQgYM6L8R52hJhjGRwkyAQ1qfjwuuDc9j6xhc
XpLMo4Xr2ZvmOPkAXr5QXJz30V7N9Rd1bUSNpqmOTOSNH1PE3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+dtk7JNVIoYHTCZBSgeq5NxyKlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTVhZGFmN2QtZDc1MC0z
NWE0LWJiY2QtZTlhNWYwODUzZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfev/ZnWWo7xoJilhqNlOjxHmYK0/KdrRabHRuMcrl+P4fb2QH0jMhE
2VN3URu/Gfoh/LVb3rBF2943lTrdt2qlIaE4Q9MHTy3T7dMX3YX2x9O0K9GKljAf
SH/FU+jSJO51wgNkq6SeR8nj7RDL3dXgJTIE46JppiMnKQF1YQLQ9NFiCI+phxM0
3T5mYgLCS2LAhRHDNR0yseJLQg0qtg6vPjl+WvwAtZHoMzrbd2xaT/t7T1UYyXaz
VI2DO7f1m9V7sX5MJpQM3h2IUg/nTIgLLcIgOgXkhm4bj9gl/Qn1psmKj1nfjmYj
h2Qw5k72fN4NZn9uUTXBOLSqiKYAKgA=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:12 2025 by rpki-client