Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa
File:                     9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa (raw, json)
Hash identifier:          GfP3G2EFaGXDjuSRduolckJjdmLv37LufuI4TiGZ99c=
Subject key identifier:   5A:4D:08:45:4B:09:3E:53:D9:49:86:09:AA:37:3F:04:82:0E:DF:9E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79CA7E99B5DB43F223C3540
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        161.232.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:a7:e9:9b:5d:b4:3f:22:3c:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b5e64a74-dafb-4485-aab6-86ef1c947807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:cd:90:9c:53:f0:b8:3f:06:1c:a3:4c:c7:
                    29:32:8a:bd:d2:c8:a0:51:90:39:ff:5e:c4:43:58:
                    04:48:48:80:b8:77:ff:df:32:df:7b:41:ed:b2:2c:
                    dc:f0:f3:c6:77:1d:20:21:46:a4:99:9a:ad:d2:77:
                    e0:bc:e8:88:13:a0:7a:ca:2d:d0:85:1a:73:94:88:
                    30:76:6f:10:dc:6c:a3:86:12:d9:9a:d3:ac:e5:e6:
                    6c:2e:f9:ba:74:33:c3:3d:27:7a:23:c0:15:d0:d4:
                    59:a8:09:4e:e0:b6:7c:ea:f8:ec:c1:98:d2:2a:54:
                    6e:c3:ca:cb:fd:95:b4:61:2c:a0:69:21:92:45:2e:
                    71:df:7b:51:46:15:a9:a0:b9:8c:bb:03:2f:92:8f:
                    3f:e1:3b:e4:99:d9:bf:5d:c5:d4:ba:53:2b:72:84:
                    cc:de:7f:ce:ed:54:3f:b9:30:c0:81:29:5e:e9:aa:
                    1f:ba:eb:63:75:b8:dc:f1:56:85:d5:31:38:df:11:
                    e0:0a:73:96:10:84:a7:94:04:3c:9f:6b:d9:80:a8:
                    e8:bc:cc:f3:05:6a:5a:47:3d:68:fd:20:b3:c2:0d:
                    60:dc:ff:1e:50:08:79:d7:5f:f3:96:8e:c6:e1:32:
                    83:7d:9d:97:c6:21:5b:e7:bf:ae:2f:78:bc:b4:da:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4D:08:45:4B:09:3E:53:D9:49:86:09:AA:37:3F:04:82:0E:DF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b0:62:20:67:4b:8c:0a:52:ad:80:a9:41:52:e9:f8:f7:81:
         ed:c6:83:2c:8b:ef:6d:31:8d:9d:b9:31:1f:e0:b1:fb:d6:60:
         97:50:48:96:6e:8f:69:4b:91:bb:59:28:07:98:7d:84:70:27:
         59:0c:9e:49:77:e1:bc:55:9c:3c:35:25:17:b7:00:16:db:04:
         66:df:81:61:95:f4:63:b5:7e:70:ee:f8:6d:d5:c1:69:0a:8d:
         a6:1e:cc:90:fe:74:80:62:a3:d3:08:20:c6:75:3e:98:1e:31:
         ad:5d:d9:5f:d5:ee:96:54:e8:c1:79:c7:0d:ad:74:6a:ba:0a:
         ad:92:9c:07:f2:3f:89:c4:26:c0:7d:7e:26:e2:0f:15:15:a0:
         09:9a:48:1d:a4:8e:d1:c3:d8:ec:96:f9:53:bc:88:24:64:5a:
         1f:17:ff:fc:4b:f0:3d:85:03:eb:be:f4:66:7d:b8:2f:de:e6:
         78:32:b1:97:37:ad:d1:32:30:16:3d:32:15:9f:ef:62:42:cf:
         9c:41:bd:4b:17:99:71:13:56:de:ee:11:9b:59:9f:97:8d:61:
         7c:ec:0b:78:0e:dc:e9:48:49:c6:1b:72:b4:5c:b3:b3:ad:27:
         62:20:ec:ab:c5:3f:de:56:8a:63:06:1a:24:ae:a5:85:74:84:
         13:e7:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:25 2026 by rpki-client