Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa
File:                     92d88aa8-e412-3241-8d69-65a663e555a3.roa (raw, json)
Hash identifier:          hOfW43hyJBcGxjH85P394/rJgKCoxcJD0md52dfCUPA=
Subject key identifier:   AA:7E:EC:20:36:02:3C:21:80:03:F5:29:D2:D0:20:7F:DB:BF:74:79
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C74B965BBB953FE196800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        161.232.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:74:b9:65:bb:b9:53:fe:19:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=14c15993-5bf5-41e0-83a1-623f283fe701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:96:e6:78:a7:4a:02:ed:49:31:af:12:49:
                    a7:2d:d0:6f:27:cc:1c:f9:4a:7d:3b:a3:52:40:be:
                    96:de:63:47:ff:22:84:96:0f:3f:62:21:a9:0c:85:
                    05:ef:43:50:60:35:4d:15:a9:7b:8f:da:07:d5:ae:
                    45:3e:d0:e4:dd:4e:fc:89:e4:75:46:c6:51:7a:b0:
                    5a:6f:ca:ab:ac:fc:0b:e7:a5:1d:51:16:a3:f5:21:
                    54:f4:d6:b3:a0:c2:1e:10:65:02:91:5a:77:b3:91:
                    c8:0b:c9:c3:dd:c1:aa:80:a6:97:cd:0c:84:84:2d:
                    8d:9c:df:fd:bf:7b:c9:b0:fa:42:64:cb:9c:eb:af:
                    d1:45:a4:fa:6e:93:0f:e6:d8:19:cc:89:c1:42:df:
                    09:7d:96:95:b8:34:82:86:4b:73:6b:3c:35:85:4f:
                    da:c7:8e:0a:c6:b0:dc:d2:b5:67:c3:ad:6c:cd:e5:
                    44:53:71:49:28:d2:75:c8:90:54:9b:9c:4c:cf:15:
                    0a:53:26:66:50:cd:49:c2:80:a7:49:e6:65:92:f0:
                    c1:91:b5:8e:ca:92:f1:18:6f:6d:d9:41:af:12:b7:
                    9a:fa:fe:95:7b:b3:b9:9d:c9:d2:33:b2:7e:a0:bc:
                    f3:51:93:40:cd:f6:a1:ad:b2:06:6a:69:d8:37:91:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:EC:20:36:02:3C:21:80:03:F5:29:D2:D0:20:7F:DB:BF:74:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:81:30:b1:f2:77:43:80:64:2d:c8:1a:ed:35:19:2e:f1:4e:
         7d:be:8c:49:33:91:c9:c8:0b:cd:06:30:ba:9d:12:dc:7e:66:
         0b:66:b0:a6:12:98:b7:05:86:e5:28:6a:18:8b:2e:48:aa:4b:
         5c:bb:32:35:db:63:10:aa:ed:6b:5e:24:15:5f:c7:d5:69:35:
         64:cd:61:df:dc:ac:5d:82:1f:9a:09:ce:5b:f0:c8:aa:48:b0:
         12:ff:40:c0:87:0f:b7:e6:aa:32:dd:eb:59:6e:47:8d:69:e9:
         0e:0f:d0:e6:09:38:d3:7a:23:12:df:23:9f:26:ab:22:d8:a5:
         53:c4:59:bb:69:2b:cc:f0:9a:9e:73:d4:44:aa:d2:e1:56:20:
         4d:0b:8c:ca:c8:63:27:7d:cb:66:00:f2:71:a2:1d:66:d9:cd:
         a5:9c:b5:38:93:88:34:e4:4e:38:0d:c5:01:53:1c:84:46:97:
         de:45:30:66:f5:a6:03:c8:c7:b5:9f:2c:69:8b:3e:28:66:4a:
         1e:76:e8:45:b4:fd:29:8d:f2:8b:9f:a5:9c:68:75:a2:f7:68:
         36:ca:54:84:ec:eb:ad:50:23:eb:ed:87:bf:a9:52:0b:98:97:
         b1:3f:30:ed:98:16:17:db:6a:cd:f5:b4:7a:85:93:18:76:6d:
         ad:e8:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:57 2026 by rpki-client