Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92bd8a73-386c-3c7a-b3c2-1306ec1782d3.roa
File:                     92bd8a73-386c-3c7a-b3c2-1306ec1782d3.roa (raw, json)
Hash identifier:          4P5yx08M1qJvnhT+s7Ru+XrWL5/v/oRFx1Jawr008EA=
Subject key identifier:   9C:A1:C9:A0:ED:27:BD:6D:6C:8E:EA:70:E3:EC:35:E9:AB:50:24:14
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79BE063C2B9219683E2FD00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92bd8a73-386c-3c7a-b3c2-1306ec1782d3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        161.232.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:e0:63:c2:b9:21:96:83:e2:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=348025bc-aa84-4be5-b0d2-986a94a7407b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:ee:1e:08:fd:fe:55:17:3c:38:1f:eb:7f:
                    9f:60:0d:d2:a4:ab:ca:17:b7:05:7c:8a:44:1c:d2:
                    d3:0a:e7:24:1c:3d:3d:7d:a6:9d:02:c1:f5:16:16:
                    e6:b1:36:af:e1:26:aa:78:20:75:81:fb:dd:d0:4c:
                    87:c6:df:80:24:70:f5:41:b0:bc:f5:60:d2:a2:9a:
                    84:dd:1e:3b:0c:02:7c:b1:a6:b8:c6:de:1a:d2:2f:
                    dd:4f:f9:de:d4:30:a7:0d:bc:b0:a4:32:59:45:5c:
                    ff:47:ea:d5:75:31:be:67:6a:e0:bd:f5:d0:7c:e8:
                    26:56:a8:21:8c:e9:ac:00:64:a7:ec:e4:64:1d:1f:
                    e2:19:ec:24:31:49:df:bc:39:c8:0d:04:f2:63:e3:
                    ee:9b:4c:b4:19:04:99:e7:08:30:52:08:55:bb:fd:
                    07:80:aa:53:c6:81:0e:7b:aa:19:54:07:ab:53:40:
                    bd:bf:40:6f:42:ea:15:1b:0f:98:99:60:fd:ec:80:
                    88:d9:c0:16:29:f7:02:90:ed:bb:29:c0:69:db:49:
                    39:65:78:85:26:24:1f:43:f0:e6:71:47:fc:5c:fd:
                    02:04:42:dd:51:26:a6:42:ef:f2:5f:87:3d:60:e2:
                    97:b6:6a:f7:49:ec:f4:80:3b:b8:46:34:af:47:80:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A1:C9:A0:ED:27:BD:6D:6C:8E:EA:70:E3:EC:35:E9:AB:50:24:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92bd8a73-386c-3c7a-b3c2-1306ec1782d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:00:8d:59:58:97:40:25:c5:79:33:89:bf:c0:8f:5b:c2:f3:
         6c:3b:2b:72:98:1e:f6:73:5c:f4:b9:6e:d2:7d:07:92:e0:5c:
         34:a7:40:c5:0e:5f:2e:5a:80:2b:4f:b5:30:33:ce:5a:5b:1a:
         97:3d:3a:74:17:c0:08:54:8f:51:17:da:d6:b6:b9:71:4f:14:
         a9:84:c7:d0:79:56:b2:77:ce:80:49:da:6e:5d:d9:d4:a8:46:
         20:34:d9:9b:d8:0d:5c:0d:64:91:36:d9:70:e1:08:7c:3b:e6:
         0e:82:12:c2:7b:2e:05:58:a8:03:99:cc:22:67:c9:8e:6c:f5:
         b7:30:fb:19:e9:47:f6:c7:ad:68:04:6e:f1:41:5e:bd:df:a4:
         9f:e9:e5:b4:7d:06:16:24:09:6b:a1:16:26:15:41:6c:30:6d:
         32:72:16:67:a5:d9:86:2e:ac:7e:75:30:1b:cb:8a:e1:1e:00:
         b9:f9:ea:fe:69:be:ed:95:d5:59:47:71:80:62:4f:5e:e2:b1:
         eb:87:5b:e8:67:d8:c4:dd:84:a8:da:a6:28:4c:e7:12:19:be:
         f8:7f:d1:95:89:60:7b:59:1e:17:d1:50:a3:e4:87:dc:1a:f9:
         9b:54:27:e8:a4:a0:94:3c:6f:04:60:b0:7b:ab:d7:db:ef:73:
         30:23:99:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm+BjwrkhloPi/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzQ4MDI1YmMtYWE4NC00YmU1LWIwZDItOTg2YTk0YTc0MDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmDuHgj9/lUXPDgf63+fYA3SpKvKF7cFfIpE
HNLTCuckHD09faadAsH1FhbmsTav4SaqeCB1gfvd0EyHxt+AJHD1QbC89WDSopqE
3R47DAJ8saa4xt4a0i/dT/ne1DCnDbywpDJZRVz/R+rVdTG+Z2rgvfXQfOgmVqgh
jOmsAGSn7ORkHR/iGewkMUnfvDnIDQTyY+Pum0y0GQSZ5wgwUghVu/0HgKpTxoEO
e6oZVAerU0C9v0BvQuoVGw+YmWD97ICI2cAWKfcCkO27KcBp20k5ZXiFJiQfQ/Dm
cUf8XP0CBELdUSamQu/yX4c9YOKXtmr3Sez0gDu4RjSvR4D0vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyhyaDtJ71tbI7qcOPsNemrUCQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTJiZDhhNzMtMzg2Yy0z
YzdhLWIzYzItMTMwNmVjMTc4MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUAjVlYl0AlxXkzib/Aj1vC82w7K3KYHvZzXPS5btJ9B5LgXDSnQMUO
Xy5agCtPtTAzzlpbGpc9OnQXwAhUj1EX2ta2uXFPFKmEx9B5VrJ3zoBJ2m5d2dSo
RiA02ZvYDVwNZJE22XDhCHw75g6CEsJ7LgVYqAOZzCJnyY5s9bcw+xnpR/bHrWgE
bvFBXr3fpJ/p5bR9BhYkCWuhFiYVQWwwbTJyFmel2YYurH51MBvLiuEeALn56v5p
vu2V1VlHcYBiT17iseuHW+hn2MTdhKjapihM5xIZvvh/0ZWJYHtZHhfRUKPkh9wa
+ZtUJ+ikoJQ8bwRgsHur19vvczAjmes=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:21 2026 by rpki-client