Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa
File:                     5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa (raw, json)
Hash identifier:          flj93Hfwi4Zo1MkhTMbfUMPgMwBoAR3FO6La0nG4r58=
Subject key identifier:   80:1E:B6:C9:97:9C:17:42:64:5E:46:5F:1D:C6:1F:92:43:55:B9:72
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E043622B1B5EE90DC452481C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        161.232.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:22:b1:b5:ee:90:dc:45:24:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=cca11eec-1fe6-4d71-97b5-1a97a7f5cc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:fb:e0:79:49:15:9e:53:ef:72:a7:85:86:
                    4f:0e:50:57:bb:b1:e1:6d:40:9d:b8:ef:7e:1b:57:
                    4c:e7:4c:73:0a:35:be:a9:b4:05:61:e9:e5:42:bc:
                    94:d3:6c:12:f0:b1:a1:88:7e:0c:4d:f2:b9:53:6f:
                    2b:d3:a5:56:47:ab:de:9b:a3:85:24:f0:cb:15:ea:
                    2e:ac:52:c1:83:f1:80:7c:87:00:fa:b6:19:c0:d0:
                    0c:32:2e:e5:33:a8:58:ac:81:70:a3:5e:19:da:e5:
                    3d:2c:98:6c:ab:9e:35:4a:96:f0:27:35:4b:f6:0a:
                    61:fe:44:76:65:89:70:56:07:25:29:43:b5:72:b5:
                    a8:45:74:0b:8d:4b:18:c0:4a:f3:66:06:72:de:89:
                    1e:9b:12:92:a6:57:37:92:62:5c:be:41:68:61:ee:
                    bd:fa:76:ca:99:7a:f9:c3:45:b3:f3:97:5f:11:6e:
                    38:2f:46:84:a4:05:45:6d:f6:94:14:3d:2f:03:27:
                    4c:d8:7b:26:54:fa:06:70:2b:54:18:cf:46:f5:8a:
                    a1:91:96:9e:3b:c3:f7:22:3b:de:e5:55:74:b8:6d:
                    86:4a:8e:20:dc:c5:1f:42:a5:c4:b3:e7:ec:22:65:
                    a2:52:e8:ed:d3:e4:e0:ca:83:e9:be:6c:05:d7:47:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:B6:C9:97:9C:17:42:64:5E:46:5F:1D:C6:1F:92:43:55:B9:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:05:11:56:ed:1a:51:a3:53:d7:3e:df:f8:fa:bd:60:32:
         cb:1e:06:04:74:b2:e1:3a:b1:9f:a2:15:f2:32:fe:b4:22:d8:
         b6:59:4b:d3:26:ae:34:94:1a:84:75:23:e1:89:04:43:36:ef:
         b7:44:f4:0d:d4:1f:da:24:b9:0f:e7:77:fd:d5:6b:36:74:21:
         29:2f:e4:d7:17:09:3a:43:a1:72:aa:b0:ea:b2:77:fb:c7:37:
         78:2f:ee:32:53:51:0a:71:2b:12:1d:3f:2e:99:0f:cf:cf:99:
         c9:6d:ac:0e:12:80:84:fb:76:13:18:91:98:4e:ad:e8:4a:c8:
         03:f0:99:e9:7f:7c:18:a5:88:34:f7:e5:c6:0f:5d:f5:0f:54:
         98:d6:c9:72:f1:51:ff:32:9e:e1:c4:90:4a:7c:56:38:46:4e:
         f7:65:bb:b9:35:69:c9:d7:15:20:9e:96:c9:72:39:85:d3:bb:
         db:3d:bc:6f:44:c8:e1:c8:3b:d2:7a:ed:a9:d9:3a:48:2e:f0:
         15:d1:1f:f9:de:73:a0:3a:40:ac:41:05:23:02:17:cb:e5:bc:
         15:79:74:f0:9a:91:1d:0e:8c:27:52:01:37:5b:f7:2e:66:0c:
         4c:dc:dc:13:51:0b:37:15:37:a0:00:fc:5f:a0:01:ce:a7:bd:
         4e:72:03:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiKxte6Q3EUkgcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
Y2NhMTFlZWMtMWZlNi00ZDcxLTk3YjUtMWE5N2E3ZjVjYzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fT74HlJFZ5T73KnhYZPDlBXu7HhbUCduO9+
G1dM50xzCjW+qbQFYenlQryU02wS8LGhiH4MTfK5U28r06VWR6vem6OFJPDLFeou
rFLBg/GAfIcA+rYZwNAMMi7lM6hYrIFwo14Z2uU9LJhsq541SpbwJzVL9gph/kR2
ZYlwVgclKUO1crWoRXQLjUsYwErzZgZy3okemxKSplc3kmJcvkFoYe69+nbKmXr5
w0Wz85dfEW44L0aEpAVFbfaUFD0vAydM2HsmVPoGcCtUGM9G9YqhkZaeO8P3Ijve
5VV0uG2GSo4g3MUfQqXEs+fsImWiUujt0+TgyoPpvmwF10e/8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIAetsmXnBdCZF5GXx3GH5JDVblyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTEwOWU0OTEtYTNjNy0z
ZWJmLTgzMWUtNGUzMWRjMGJhZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJuwBRFW7RpRo1PXPt/4+r1gMsseBgR0suE6sZ+iFfIy/rQi2LZZS9Mm
rjSUGoR1I+GJBEM277dE9A3UH9okuQ/nd/3VazZ0ISkv5NcXCTpDoXKqsOqyd/vH
N3gv7jJTUQpxKxIdPy6ZD8/PmcltrA4SgIT7dhMYkZhOrehKyAPwmel/fBiliDT3
5cYPXfUPVJjWyXLxUf8ynuHEkEp8VjhGTvdlu7k1acnXFSCelslyOYXTu9s9vG9E
yOHIO9J67anZOkgu8BXRH/nec6A6QKxBBSMCF8vlvBV5dPCakR0OjCdSATdb9y5m
DEzc3BNRCzcVN6AA/F+gAc6nvU5yAw4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:53 2026 by rpki-client