Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5459a56c-c0f0-3cd5-89da-1921ff389610.roa
File:                     5459a56c-c0f0-3cd5-89da-1921ff389610.roa (raw, json)
Hash identifier:          Hh6N1lAQVSBmDm2SIwtWW1znBUqNB6mom0QtGXXp0MU=
Subject key identifier:   73:BD:AA:F1:69:14:6C:1E:9E:3D:32:DF:CE:1E:68:B2:C5:F0:D0:16
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A4D98F0A9D930A59CF600
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5459a56c-c0f0-3cd5-89da-1921ff389610.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        161.232.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:4d:98:f0:a9:d9:30:a5:9c:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=13e93d59-e5e7-44fd-b558-749843e22365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:5d:45:4d:3e:5e:89:fd:29:1b:a1:f8:84:
                    fe:10:41:5f:ee:52:55:7b:5d:9a:ae:7f:89:b7:a5:
                    cf:9f:bb:41:79:a9:85:79:51:37:a3:23:cc:51:25:
                    32:14:44:37:7d:41:95:30:e8:6f:16:ac:ca:2c:25:
                    27:ce:70:0d:c8:28:1d:70:85:94:a5:0a:09:b5:7f:
                    3b:38:37:b9:18:d1:7b:65:88:8f:c7:9a:2b:7d:75:
                    e4:2d:ae:46:b6:cc:73:06:a8:ca:2f:5c:38:86:d5:
                    3e:5e:cc:f6:bc:62:8b:ba:f6:86:17:92:cd:92:40:
                    6a:a5:f8:85:bc:ec:72:89:08:5e:4d:62:ee:06:0b:
                    7c:36:9b:22:4d:52:5e:21:20:93:3b:d4:4e:cb:72:
                    9f:86:07:d5:4c:10:21:35:11:6e:41:33:61:ed:f5:
                    2b:fb:08:d6:84:9d:06:c8:11:8a:ff:89:04:11:9e:
                    df:1f:36:d0:e8:c3:c2:92:c2:8b:be:53:fa:1d:50:
                    8c:d7:92:8d:88:f5:16:7b:5d:e3:1c:a9:98:98:41:
                    57:4e:f3:48:03:f1:4a:8d:51:fd:92:89:23:1f:25:
                    b8:88:65:ce:a6:ab:ff:14:f7:f8:bb:06:87:a5:71:
                    72:19:b9:a2:6d:ca:2f:7a:c6:f2:6b:68:c9:8b:e7:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BD:AA:F1:69:14:6C:1E:9E:3D:32:DF:CE:1E:68:B2:C5:F0:D0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5459a56c-c0f0-3cd5-89da-1921ff389610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:b1:31:3f:05:ca:ab:d3:6a:50:dc:62:a6:2f:1f:e7:8b:
         e5:07:2c:bc:35:44:f1:ea:a3:be:00:29:56:d0:89:ad:fd:14:
         cc:ba:1a:4a:ca:5d:f7:c9:ab:2e:ae:21:fe:de:c3:12:23:46:
         16:0e:f1:ef:a1:a3:9c:38:9e:da:4f:85:72:d4:68:7e:7e:6d:
         c3:ad:d9:65:10:9c:34:83:50:ed:ec:d1:2c:87:07:39:3e:c8:
         54:50:71:e9:01:23:fb:dd:12:0a:86:ed:ea:79:48:90:6f:84:
         d2:55:ae:61:cf:d5:22:55:99:e6:67:fa:2c:ee:4a:6f:85:d4:
         27:ee:8e:1c:78:ba:fe:24:dd:a2:a8:27:22:70:fc:30:2c:82:
         07:93:b4:17:6f:b3:be:1b:0e:b1:40:1c:e2:43:e2:1f:ce:41:
         14:31:4e:45:ed:d6:5c:db:b7:02:ab:07:b5:72:6b:f1:46:48:
         72:cf:29:08:75:ed:b0:54:e6:df:33:23:f7:be:12:51:48:dd:
         ca:49:e1:8a:78:7b:5d:49:35:41:c6:b3:d5:b1:7a:c2:ce:ec:
         9f:56:d6:49:67:de:ab:1b:ca:e0:66:60:d3:5f:85:e9:91:86:
         86:66:ea:b8:53:97:8e:20:bb:bb:a1:80:95:b8:2c:02:52:e4:
         e2:28:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:54 2026 by rpki-client