Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/744f048c-0d89-3a5f-9b8b-889199c14c31.roa
File:                     744f048c-0d89-3a5f-9b8b-889199c14c31.roa (raw, json)
Hash identifier:          N4Bo25nfsJHMIXLCJyAmj9zT1VXuwDG+Y6r9gwdEN4E=
Subject key identifier:   C4:9F:B6:3D:0A:BA:0A:77:FA:44:C4:D8:2C:E1:1C:96:C9:01:41:F6
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A5A607B0D64755E952600
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/744f048c-0d89-3a5f-9b8b-889199c14c31.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        161.232.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:5a:60:7b:0d:64:75:5e:95:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=f00942b7-9dd4-4ea5-98e6-2df4eb790eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:a8:62:32:9a:06:df:da:7d:cf:6d:4a:e6:
                    98:ce:85:ee:ed:bb:0a:fc:58:6f:89:8a:e3:59:9c:
                    5c:0d:59:87:67:79:fe:09:10:55:dd:83:cb:9b:e3:
                    2f:bd:03:4e:02:93:c3:90:38:0c:9d:7a:77:46:e9:
                    b4:ee:c6:8d:da:35:d1:d0:27:e0:82:66:1e:76:24:
                    17:c9:5b:ee:a0:d4:55:58:06:ff:14:78:56:b3:12:
                    c7:aa:92:cb:9d:f6:91:8a:88:6b:99:4e:6c:8a:e5:
                    a7:e4:8b:97:1e:3d:f9:5a:b8:eb:1a:13:90:9e:2d:
                    59:2b:3b:e1:1a:97:1d:3d:88:0f:e0:fd:05:63:ca:
                    b3:cc:2c:f1:fa:24:b3:79:c8:38:c9:f7:cb:5b:e5:
                    c7:68:00:20:0c:cf:b0:66:40:4e:2a:c1:13:c7:5e:
                    f1:b7:51:af:b1:22:08:7d:bd:de:51:72:db:1b:b6:
                    61:74:0d:2f:a1:9d:6c:dd:14:19:7b:ec:75:4d:ae:
                    8b:c4:94:be:c4:35:67:49:e5:54:b7:6c:c9:9b:bd:
                    5d:96:4f:67:fb:ff:a4:0f:9c:d3:59:fe:b5:1a:61:
                    a6:ee:73:58:5c:92:91:83:2b:8d:9c:5a:c0:6a:43:
                    8e:72:42:a6:9c:d7:1d:6e:4e:68:e4:1f:a1:e2:92:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9F:B6:3D:0A:BA:0A:77:FA:44:C4:D8:2C:E1:1C:96:C9:01:41:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/744f048c-0d89-3a5f-9b8b-889199c14c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:04:e2:d8:10:fc:75:41:75:ad:36:5e:30:e8:b7:46:98:79:
         9e:27:23:20:13:9c:92:b4:67:ba:20:8d:80:ff:c1:ab:2c:60:
         e9:9e:52:33:26:d3:4b:93:c5:61:00:e7:10:72:1b:20:c0:8d:
         97:44:31:5e:8b:cb:25:b0:20:7b:af:02:76:17:c2:7a:bf:bc:
         10:02:b3:41:cd:e0:36:c1:6f:36:4b:f4:4f:5d:60:04:91:a9:
         6d:97:c4:32:b9:07:db:a6:9f:7f:cf:9b:c4:77:9d:5b:03:5a:
         54:0f:c7:86:4d:ed:9e:1a:73:db:33:47:e0:a2:1c:72:55:be:
         87:e6:df:70:96:b9:83:5c:f3:56:35:f1:82:3b:1d:db:73:b3:
         b3:f8:22:2a:56:b2:49:06:4f:9a:1c:fe:fd:c6:6e:b7:af:0b:
         d8:60:e9:27:22:aa:b8:a4:87:53:f0:da:e6:5a:2f:48:f5:3d:
         6d:44:f6:49:c2:59:91:2b:45:27:af:0a:15:4a:c6:17:46:00:
         fb:ed:71:2c:d4:f1:b9:7d:1f:c5:70:35:a4:f5:3d:c6:3b:84:
         ac:54:51:de:94:48:9a:e8:d5:27:7a:91:bf:80:a2:36:fb:25:
         fe:b2:4c:1a:b9:80:03:9a:2b:bb:48:a8:a8:8b:79:ce:79:5b:
         48:2b:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:28 2026 by rpki-client