Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/655ef1c7-bfd8-38a8-bbaf-6cd5c701d1e0.roa
File:                     655ef1c7-bfd8-38a8-bbaf-6cd5c701d1e0.roa (raw, json)
Hash identifier:          RwvmaqY8u+M1hdrPxgIxIBGT+19itAmaYncQjrirbK8=
Subject key identifier:   71:16:12:72:AD:71:BF:1C:06:BB:0B:51:DC:AF:4E:08:30:C4:01:40
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F49885995929B144C93A59F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/655ef1c7-bfd8-38a8-bbaf-6cd5c701d1e0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        161.232.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:59:95:92:9b:14:4c:93:a5:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8c0d010c-ce56-4308-bb14-140955deaabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:71:73:c1:8d:b8:e0:96:80:10:ae:e7:ba:
                    4c:58:3e:15:fd:68:31:11:f8:01:9f:a4:4b:f6:72:
                    72:3e:e2:4a:42:5f:70:ec:35:05:7b:ab:62:61:32:
                    fc:17:47:c3:87:29:d5:ce:bb:b5:a2:84:16:77:80:
                    b5:03:e6:c3:a1:e2:f0:ee:24:c0:46:85:10:d2:b7:
                    6d:c8:fd:82:36:5f:78:76:1b:18:74:cb:fe:c3:84:
                    d5:f3:22:c3:91:61:ab:41:83:9f:c6:9f:e7:37:bf:
                    9a:20:6b:f8:bd:ee:97:04:7a:12:10:dc:eb:36:bd:
                    bf:06:46:47:cc:73:b3:dd:b9:23:7f:45:1f:2d:58:
                    2e:ad:7e:cb:3d:2d:8b:97:47:50:39:67:41:53:f4:
                    47:72:f9:31:ce:3e:a5:23:16:8c:a9:6c:4c:bf:6b:
                    e7:a9:1c:14:3f:fa:3c:00:e8:10:35:20:ef:96:e5:
                    1e:a3:14:81:9e:b9:b5:62:33:ca:76:2d:d6:ae:ce:
                    a9:84:1e:92:14:0f:b9:2e:80:9c:b6:b9:0e:24:14:
                    af:d9:24:df:93:c5:53:71:99:46:04:94:4c:33:85:
                    bb:44:62:98:9f:a4:dc:45:9b:0d:03:09:87:d1:36:
                    b8:b1:31:8f:f3:8e:a7:cf:2a:8d:76:4d:cd:db:77:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:12:72:AD:71:BF:1C:06:BB:0B:51:DC:AF:4E:08:30:C4:01:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/655ef1c7-bfd8-38a8-bbaf-6cd5c701d1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:7f:ab:8a:82:f1:71:f5:34:c2:ec:c4:9c:ec:bc:98:ce:
         a7:ef:58:49:77:83:cc:c4:d1:9c:56:47:82:8b:4a:3c:16:c9:
         05:76:89:8a:e4:19:bc:d2:a0:66:33:cf:11:cf:13:ef:b2:36:
         4a:56:1f:f3:d4:93:f0:a7:f5:d9:dc:2b:c8:10:c4:a5:51:53:
         0f:20:46:57:d2:50:a0:0e:ba:02:98:92:61:a9:f0:30:f5:91:
         29:e5:75:e6:96:a1:70:5b:41:92:7f:3a:27:a6:b6:62:02:8e:
         09:3f:c7:0a:6b:ff:22:2f:dc:b9:7b:ee:60:e6:8b:84:72:fd:
         08:6e:cb:b5:19:27:d3:b5:cb:99:14:2e:ba:fc:f7:9d:04:91:
         6c:d8:4c:8f:ec:4d:c3:6a:4a:ff:77:f5:87:ef:96:76:e2:ec:
         58:2e:da:00:8f:ae:6b:95:a8:4b:6f:7d:47:0f:af:df:23:8e:
         0e:48:a5:c2:34:7e:96:ca:e1:f7:1e:fa:5e:07:e7:ef:f7:41:
         50:a9:bc:6d:61:9e:aa:8a:d2:2a:3a:b1:9d:dc:86:9d:69:9b:
         a8:e6:e7:44:25:12:b4:76:80:b1:69:fc:29:7f:26:39:02:29:
         f2:91:52:ed:d6:ca:b6:92:dd:93:f2:2d:0f:a5:82:64:33:7f:
         37:b1:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:32:39 2026 by rpki-client