Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd80c041-df38-355d-9b2b-7aebfd87d9ce.roa
File:                     fd80c041-df38-355d-9b2b-7aebfd87d9ce.roa (raw, json)
Hash identifier:          JuBd7gvs/SLZa9jZ1NF84iDWt7VStd64kcXZPg9YpPg=
Subject key identifier:   A8:93:14:51:70:12:88:93:E2:C6:64:4D:9C:90:2D:86:FF:B3:E8:2B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C9A82A03DBBE369B71190
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd80c041-df38-355d-9b2b-7aebfd87d9ce.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        161.232.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:9a:82:a0:3d:bb:e3:69:b7:11:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c1862b1a-ab38-4b09-81c5-9d3594be784d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f4:77:c2:a0:f5:01:3e:13:26:df:7d:25:d6:
                    91:16:b0:ca:0d:e9:3a:bf:ec:11:08:63:f8:15:af:
                    64:a6:63:82:59:40:67:ef:68:ad:7b:a3:cb:c1:b8:
                    41:42:5e:79:69:a1:4a:91:5f:85:bd:93:0f:12:c1:
                    28:68:77:9c:54:7a:20:de:e2:5d:6b:be:0c:27:83:
                    8d:93:70:b1:17:fc:6a:36:02:b1:ed:5d:07:cc:be:
                    17:ca:a5:89:37:ad:32:9f:fb:10:1f:6f:b2:4e:d4:
                    d6:a1:71:64:ee:19:5e:5d:df:97:ef:8a:93:77:66:
                    4d:2b:eb:c8:b4:33:4e:d5:1c:8f:fe:ee:af:50:c6:
                    3e:69:e2:6f:db:11:71:87:4b:e5:3e:ad:9a:fd:57:
                    12:53:da:00:82:39:a9:4d:15:0f:6b:1e:38:19:f6:
                    41:59:fe:40:87:b2:a2:89:5d:d0:ed:56:21:ee:5c:
                    ba:a2:cb:b7:e6:8c:1f:40:48:4b:84:54:cd:9d:df:
                    6d:b3:b2:2e:4a:53:b5:bc:e5:d4:3d:3a:8d:c9:69:
                    82:2c:0c:27:71:6c:0f:4f:f7:b8:85:6a:43:3f:35:
                    d6:12:f0:9e:5c:de:52:a1:db:26:c8:df:ea:fa:85:
                    c2:63:72:59:23:15:6a:6a:eb:4d:b4:e9:fc:ca:28:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:93:14:51:70:12:88:93:E2:C6:64:4D:9C:90:2D:86:FF:B3:E8:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd80c041-df38-355d-9b2b-7aebfd87d9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:aa:c8:7e:cc:27:b4:dc:dd:3b:19:84:d9:71:b1:46:86:36:
         7f:a0:54:e3:61:c0:ce:5c:35:df:f9:3e:da:9f:33:4b:fb:8d:
         5a:19:97:a1:29:53:f1:b4:66:35:e5:80:0b:34:98:34:69:5e:
         9e:61:7c:c5:c2:ed:21:b9:e1:37:5d:4f:9f:53:62:7d:fd:32:
         23:e0:00:52:ce:99:47:ab:53:8e:23:60:59:2e:29:0a:22:78:
         8e:7d:da:4f:01:6b:7e:e8:d5:b7:ac:62:85:d5:78:3d:63:c0:
         cb:61:12:a3:1c:a8:74:0d:e4:e0:4b:f5:c1:1c:6b:05:e1:5f:
         ae:99:07:46:c4:eb:52:42:44:2f:b9:e1:1e:01:7d:e4:ff:c9:
         e7:10:69:09:de:ed:62:b6:dd:24:4b:28:ed:68:a5:9c:5d:b9:
         03:ab:18:90:3d:8e:e9:70:3c:60:e0:8e:6b:aa:e4:2a:dd:e1:
         4b:d1:1a:0a:f6:ef:7c:e6:af:7e:31:1a:4c:c0:8c:38:45:cd:
         5a:e5:9a:7f:b7:1f:02:3f:2a:99:88:cc:ad:ac:5e:d4:82:1a:
         cf:bb:d1:f0:d6:e8:9e:02:c5:bd:1e:f2:ef:5d:59:a8:ca:4c:
         49:f1:07:df:fc:64:a6:82:bb:8f:f8:e5:63:a0:a9:01:d9:32:
         ba:d9:c0:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnJqCoD2742m3EZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzE4NjJiMWEtYWIzOC00YjA5LTgxYzUtOWQzNTk0YmU3ODRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fR3wqD1AT4TJt99JdaRFrDKDek6v+wRCGP4
Fa9kpmOCWUBn72ite6PLwbhBQl55aaFKkV+FvZMPEsEoaHecVHog3uJda74MJ4ON
k3CxF/xqNgKx7V0HzL4XyqWJN60yn/sQH2+yTtTWoXFk7hleXd+X74qTd2ZNK+vI
tDNO1RyP/u6vUMY+aeJv2xFxh0vlPq2a/VcSU9oAgjmpTRUPax44GfZBWf5Ah7Ki
iV3Q7VYh7ly6osu35owfQEhLhFTNnd9ts7IuSlO1vOXUPTqNyWmCLAwncWwPT/e4
hWpDPzXWEvCeXN5SodsmyN/q+oXCY3JZIxVqautNtOn8yij58QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKiTFFFwEoiT4sZkTZyQLYb/s+grMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmQ4MGMwNDEtZGYzOC0z
NTVkLTliMmItN2FlYmZkODdkOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2qyH7MJ7Tc3TsZhNlxsUaGNn+gVONhwM5cNd/5PtqfM0v7jVoZl6Ep
U/G0ZjXlgAs0mDRpXp5hfMXC7SG54TddT59TYn39MiPgAFLOmUerU44jYFkuKQoi
eI592k8Ba37o1besYoXVeD1jwMthEqMcqHQN5OBL9cEcawXhX66ZB0bE61JCRC+5
4R4BfeT/yecQaQne7WK23SRLKO1opZxduQOrGJA9julwPGDgjmuq5Crd4UvRGgr2
73zmr34xGkzAjDhFzVrlmn+3HwI/KpmIzK2sXtSCGs+70fDW6J4Cxb0e8u9dWajK
TEnxB9/8ZKaCu4/45WOgqQHZMrrZwEI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:17:48 2026 by rpki-client