Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2eea05da-1b73-3511-bad2-2a5bf16380fb.roa
File:                     2eea05da-1b73-3511-bad2-2a5bf16380fb.roa (raw, json)
Hash identifier:          ej+1f+5I/enlQfotl1buyBCC2dzJkMpQIf9h5YRSf0E=
Subject key identifier:   30:BA:56:56:D2:E4:B0:8B:8B:76:46:6A:0E:6B:24:D5:3B:39:5B:18
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A2B81A66C88A2CB7A1200
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2eea05da-1b73-3511-bad2-2a5bf16380fb.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        161.232.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:2b:81:a6:6c:88:a2:cb:7a:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=f437b80e-4965-4549-bc4c-2fdef49816ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:e4:7e:50:80:dc:ab:8e:27:25:12:c0:fd:
                    03:87:b1:1f:fa:d4:6a:d8:ed:22:a3:c3:61:f3:a0:
                    ce:5b:7d:4c:29:43:0e:47:8f:0a:6e:90:5c:83:2c:
                    ef:a4:54:11:fa:38:6b:8e:5b:c0:c5:55:2e:c6:d8:
                    00:50:c7:a7:26:86:41:3f:f1:9d:52:66:1f:f6:5b:
                    48:50:7b:f0:89:88:4e:5b:d4:22:e8:12:19:ee:b6:
                    cc:a6:72:27:f8:30:8e:f1:2e:c4:41:7e:55:6e:0a:
                    e6:fe:36:77:ea:55:a8:dc:64:2f:26:19:07:43:75:
                    d0:54:ae:fa:74:44:19:b3:f2:f1:e6:43:60:72:3d:
                    00:b7:b3:70:ea:ba:cd:05:e9:61:41:cc:f3:d1:9e:
                    f6:06:bc:91:56:56:3c:8d:32:67:15:bd:ce:9b:89:
                    c1:42:48:19:f3:6d:d4:e8:b0:ea:41:90:b4:3a:1e:
                    84:c7:66:2b:6b:5a:45:a9:26:a7:1f:ca:f1:f5:c1:
                    39:13:23:fe:0e:c9:20:bf:90:4f:b3:a4:dc:51:3c:
                    b0:20:5a:66:27:b9:b7:4b:65:b6:05:09:f1:c6:63:
                    b0:c7:6b:35:58:df:49:bf:ed:63:39:06:92:f4:2e:
                    5c:26:3c:3e:87:cc:ed:07:7f:c2:ab:62:db:e9:be:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BA:56:56:D2:E4:B0:8B:8B:76:46:6A:0E:6B:24:D5:3B:39:5B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2eea05da-1b73-3511-bad2-2a5bf16380fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:78:c8:4a:4d:6b:b8:60:45:53:ea:39:79:b8:b7:c2:e1:57:
         22:e6:a0:51:61:ba:92:64:a8:98:73:7e:bd:cf:f9:42:ed:6e:
         6b:96:e7:d9:34:f8:bf:fe:63:9a:e0:7f:8e:9f:7f:de:74:f1:
         9a:84:58:20:c1:b2:bf:82:68:6c:51:74:98:3f:2e:c3:78:5c:
         27:3f:c9:68:84:aa:c9:cf:6f:f5:2c:9a:5b:9a:1d:d0:a1:0e:
         d9:96:8f:4f:77:1d:ee:3b:3e:0f:39:c3:6a:de:dd:c4:50:73:
         f4:ce:ae:c9:3c:7a:e3:49:c0:ee:e2:2a:0d:88:6f:ea:40:61:
         74:d4:a8:1a:69:25:40:28:f7:ad:4c:bb:93:a1:80:f4:4c:e3:
         ff:65:a4:63:14:b8:22:c0:66:01:8a:7d:1d:cf:be:c2:7d:30:
         fe:b0:a4:0d:49:7f:62:c6:1d:75:39:7f:fd:c9:fd:45:43:40:
         5a:a7:5d:12:09:63:44:5a:0f:5c:9b:b0:9a:a9:c3:57:6f:69:
         d2:12:58:3b:7c:b2:0d:d5:f4:e4:96:c5:4f:98:f8:9a:1b:c5:
         38:8e:86:ab:d7:45:d0:78:45:b8:38:15:6d:96:7c:25:d8:f0:
         81:87:03:fb:61:98:a3:ae:89:f5:48:b5:7e:c3:20:a2:0e:06:
         80:65:8c:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiuBpmyIost6EgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZjQzN2I4MGUtNDk2NS00NTQ5LWJjNGMtMmZkZWY0OTgxNmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+TkflCA3KuOJyUSwP0Dh7Ef+tRq2O0io8Nh
86DOW31MKUMOR48KbpBcgyzvpFQR+jhrjlvAxVUuxtgAUMenJoZBP/GdUmYf9ltI
UHvwiYhOW9Qi6BIZ7rbMpnIn+DCO8S7EQX5Vbgrm/jZ36lWo3GQvJhkHQ3XQVK76
dEQZs/Lx5kNgcj0At7Nw6rrNBelhQczz0Z72BryRVlY8jTJnFb3Om4nBQkgZ823U
6LDqQZC0Oh6Ex2Yra1pFqSanH8rx9cE5EyP+Dskgv5BPs6TcUTywIFpmJ7m3S2W2
BQnxxmOwx2s1WN9Jv+1jOQaS9C5cJjw+h8ztB3/Cq2Lb6b6omQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDC6VlbS5LCLi3ZGag5rJNU7OVsYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmVlYTA1ZGEtMWI3My0z
NTExLWJhZDItMmE1YmYxNjM4MGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADN4yEpNa7hgRVPqOXm4t8LhVyLmoFFhupJkqJhzfr3P+ULtbmuW59k0
+L/+Y5rgf46ff9508ZqEWCDBsr+CaGxRdJg/LsN4XCc/yWiEqsnPb/UsmluaHdCh
DtmWj093He47Pg85w2re3cRQc/TOrsk8euNJwO7iKg2Ib+pAYXTUqBppJUAo961M
u5OhgPRM4/9lpGMUuCLAZgGKfR3PvsJ9MP6wpA1Jf2LGHXU5f/3J/UVDQFqnXRIJ
Y0RaD1ybsJqpw1dvadISWDt8sg3V9OSWxU+Y+JobxTiOhqvXRdB4Rbg4FW2WfCXY
8IGHA/thmKOuifVItX7DIKIOBoBljGQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:38 2026 by rpki-client