Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa
File:                     92d88aa8-e412-3241-8d69-65a663e555a3.roa (raw, json)
Hash identifier:          EojGi0XaS57cf34pMEsSqAN28iDM4fG2MZuTDoqydVA=
Subject key identifier:   AD:0A:54:22:E0:8E:DB:93:81:D8:FA:16:FE:35:1D:F5:D4:A9:57:23
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A3E2987CCF5BA07CEA040
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        161.232.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:3e:29:87:cc:f5:ba:07:ce:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=2a2d6a8d-4eb7-478b-932a-5d916d3e0174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:b1:9e:65:42:57:2c:81:59:32:74:c7:66:
                    75:71:fe:70:de:8c:33:ab:47:65:6d:b2:19:d3:e5:
                    e7:26:1f:82:8c:ac:1b:41:25:c7:96:0e:cb:33:ff:
                    48:dd:58:cb:6f:6c:ad:f8:da:00:6d:7d:5c:0b:5f:
                    d1:eb:72:4d:03:ea:1d:ce:67:31:7a:a6:cb:60:6d:
                    d2:f5:56:3e:49:26:63:2a:57:13:08:2e:ee:30:4c:
                    a9:7e:56:ef:51:df:e5:37:90:ca:b2:c5:39:0d:1f:
                    04:c5:09:54:d3:b5:ba:1a:7e:c1:ef:ef:6c:96:71:
                    d7:2a:d5:a4:ed:8c:92:5c:64:72:d1:cb:77:e5:a6:
                    2f:ba:d6:83:f1:b7:b0:f1:9e:14:cb:18:cd:33:d1:
                    2e:86:7d:f4:2f:a5:01:61:23:5d:b7:36:40:16:8b:
                    70:18:25:58:59:6d:8f:85:3f:f5:8a:2f:5b:79:e7:
                    3c:0a:45:eb:28:69:bc:56:fe:b4:56:e3:65:f1:3f:
                    a4:b0:da:fd:12:29:29:93:1f:32:3a:16:e6:aa:30:
                    18:6a:0d:dd:7f:24:87:66:8b:44:7f:0a:32:6b:17:
                    24:ae:9b:41:6c:c5:09:f4:1d:37:2c:f9:ef:92:8b:
                    29:57:6c:2a:9d:5f:82:e7:e3:ef:7e:20:1b:ab:2f:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0A:54:22:E0:8E:DB:93:81:D8:FA:16:FE:35:1D:F5:D4:A9:57:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:41:3d:94:07:c5:b1:22:13:04:0a:c2:5c:9a:ba:26:61:
         56:f6:7c:eb:ab:0c:76:cb:42:50:08:a3:7e:ae:80:20:7b:94:
         9e:34:c0:76:39:3b:a1:e4:fc:f1:79:01:4f:84:4c:33:d3:58:
         b0:4c:7f:c9:9c:46:9c:49:47:2c:81:92:53:59:d1:b7:d3:da:
         f7:3f:a1:3d:59:4a:87:18:73:16:c2:5c:8c:4b:22:d0:bc:04:
         f5:48:63:20:6e:25:36:cc:fe:57:cf:70:08:08:c3:94:8a:4a:
         38:08:e0:bc:62:11:dc:ac:46:02:86:a3:e8:cb:24:2d:74:c2:
         a0:b7:f3:94:25:4e:73:2c:8e:7a:e8:b2:d8:65:37:21:cb:f4:
         c4:fe:cf:10:1a:c3:94:13:a9:76:7e:bc:09:3f:87:ec:54:4b:
         7d:58:55:b4:08:5a:95:b1:a6:3a:67:54:21:30:0d:1a:08:fd:
         54:72:6a:83:20:4d:f3:67:0f:07:4c:cb:96:65:1c:f9:7d:49:
         9a:67:3c:93:5d:61:f9:76:57:03:0b:ec:2c:4f:d4:ef:fc:26:
         66:7f:65:6f:aa:e8:cd:a7:8d:e0:86:d2:e0:74:c3:62:16:af:
         23:5b:1f:45:03:49:9f:05:aa:59:50:e3:b8:85:a9:5d:3b:b0:
         eb:24:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:17:08 2026 by rpki-client