Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4eafbc74-c6df-37e1-9ad3-277ec335c099.roa
File:                     4eafbc74-c6df-37e1-9ad3-277ec335c099.roa (raw, json)
Hash identifier:          a2snGcSuIlLT5RUBVNiC8l975kKSBApDjimuQHkJdSE=
Subject key identifier:   2C:3B:61:C3:D8:F6:74:2F:F8:3E:BB:81:D7:87:6B:DA:27:C9:BB:29
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A550FD03765124C4C1B80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4eafbc74-c6df-37e1-9ad3-277ec335c099.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        161.232.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:55:0f:d0:37:65:12:4c:4c:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=aa7baad5-7f63-4d50-8748-c1b31836d421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:7a:10:1d:84:41:96:90:99:f2:fd:23:40:
                    2f:6e:c3:14:9f:68:fc:78:46:2e:24:a6:9a:fe:a2:
                    3b:a3:0a:7c:27:ac:be:6d:bb:28:dc:55:46:e3:d6:
                    c9:fc:43:f2:86:77:45:3d:87:b5:12:50:20:c1:1d:
                    bf:37:77:6f:ca:36:dc:34:48:1e:9b:97:01:da:36:
                    4d:01:14:be:bb:75:b5:7f:fb:46:85:50:8e:96:1c:
                    88:30:a9:62:3f:d7:c2:52:a7:b5:fb:ff:ac:bb:ac:
                    f4:57:c8:56:74:39:a7:95:eb:76:b5:55:a9:9e:35:
                    51:b8:86:95:58:3e:8a:11:61:f0:87:3a:bf:39:7b:
                    a3:fb:3e:13:72:a4:56:27:d0:88:84:7b:1d:2b:a9:
                    d1:96:6c:ab:3d:b9:b0:62:c2:0b:93:c2:ff:d1:ff:
                    63:22:6a:dd:65:5b:a4:c0:48:fc:99:5b:55:fc:80:
                    0d:a9:6d:b9:90:24:d8:b0:c6:8b:51:86:f4:c3:38:
                    b8:5f:86:a4:56:11:33:77:0b:1c:36:85:c1:66:28:
                    47:69:b4:de:b0:d4:29:bb:83:82:2b:40:06:71:37:
                    0d:19:1b:e6:f5:c0:e8:c6:59:7e:c1:8f:0f:41:70:
                    05:81:2e:38:82:11:a7:88:ac:0c:36:af:45:f2:4f:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:61:C3:D8:F6:74:2F:F8:3E:BB:81:D7:87:6B:DA:27:C9:BB:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4eafbc74-c6df-37e1-9ad3-277ec335c099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:08:69:bb:06:ef:98:db:6d:fb:b5:20:60:fe:cd:90:e2:
         6e:c4:dd:85:18:68:5e:ae:58:18:35:24:f0:a0:68:96:fd:6e:
         e7:a3:2b:ed:cd:39:08:c7:55:7d:aa:b4:5a:9c:0b:a5:db:c8:
         aa:49:49:90:68:40:a5:bb:c0:ba:77:fa:1c:b1:e0:ca:74:47:
         cd:6d:3d:70:8d:2a:4a:ad:ed:2f:ff:57:11:75:16:cf:fe:38:
         17:7c:a9:7e:4d:ee:9e:97:a9:62:bd:c1:4b:63:09:50:49:f7:
         2a:ee:d9:c1:32:ef:de:b0:87:5f:a0:65:7f:fe:41:fc:a9:03:
         5e:b6:52:fb:e6:fa:c3:6a:16:05:05:74:21:f5:f2:20:b8:fb:
         bf:5f:76:b2:b6:27:de:79:26:e4:d7:0a:36:24:19:98:25:25:
         70:9b:40:7f:dc:f4:ab:50:c6:8e:c2:be:8a:19:e9:7c:6f:f4:
         11:07:6a:10:eb:08:1d:00:6d:e9:d9:31:8d:e6:98:24:cf:fa:
         91:fd:18:d2:25:9e:4c:b2:f8:b7:1a:81:68:98:19:01:57:5a:
         01:6e:d9:71:74:20:a1:a5:77:97:c2:a5:c5:51:79:d0:4b:73:
         22:9f:93:b0:60:ce:5d:18:42:20:4d:c9:61:4e:e7:e4:db:cd:
         c7:f4:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:17:27 2026 by rpki-client