Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa
File:                     e1972a51-3a87-356d-9a0a-7156bfd2d564.roa (raw, json)
Hash identifier:          SW1lK8vCoI2ivOZrxU+TOtmwgQmFtQETrw22ju4MztA=
Subject key identifier:   95:D3:CA:70:B9:83:57:C8:51:E4:5E:A0:FB:0D:E1:52:D2:4E:9B:08
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A62A3C025FC8D2F46FFA8
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     207266
IP address blocks:        161.232.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:62:a3:c0:25:fc:8d:2f:46:ff:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=c0270cf7-246a-4b0d-b7ec-fc45bb66e4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:62:95:74:cf:59:2d:4e:55:77:0b:c4:d9:
                    de:65:e3:26:5d:2d:49:b7:4d:bb:b7:94:bc:7f:2d:
                    d4:c1:09:b9:72:1a:5c:f4:01:83:80:0d:71:f7:05:
                    0d:d7:63:70:26:40:30:be:0a:ac:67:a8:a5:01:d2:
                    fd:38:f7:7c:74:7d:01:50:8c:03:02:4c:cd:72:9f:
                    6b:87:74:00:0c:4a:18:9e:07:82:e4:35:93:e8:9b:
                    87:f0:18:e4:bd:73:35:6a:b6:39:fe:22:9e:63:52:
                    d2:0c:e9:68:de:73:47:6d:88:fd:85:4f:94:91:d9:
                    e8:74:c7:b3:9f:45:5b:ec:74:26:a4:cd:68:27:bf:
                    be:a0:b4:c9:5f:75:af:99:04:57:1d:f9:e6:f1:5f:
                    bb:59:33:59:69:55:fd:48:4b:a6:9a:36:08:92:29:
                    fb:87:df:dc:bd:bd:ae:14:55:0b:99:31:4f:4c:06:
                    14:10:e6:02:5c:45:ee:e0:c3:35:d3:f3:2d:99:5f:
                    e7:58:52:8a:75:dd:c0:6c:d0:b1:28:7f:7a:f0:7f:
                    a6:08:85:e3:91:df:5d:19:a3:20:04:d1:42:d1:8e:
                    02:79:bc:26:e5:2b:a0:85:f3:31:ff:f3:52:39:8d:
                    b5:a4:df:c1:7d:20:1b:95:5b:45:6d:d8:c5:ea:83:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:CA:70:B9:83:57:C8:51:E4:5E:A0:FB:0D:E1:52:D2:4E:9B:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:9f:79:a9:47:fe:13:3d:ad:88:20:da:f1:fc:7d:30:5d:
         34:f2:41:59:6c:74:7d:ec:46:4f:2f:84:04:1b:17:55:a7:16:
         ae:86:5a:c5:36:3c:91:29:9d:01:7b:9b:e6:24:63:67:a6:29:
         9c:ed:2c:f4:05:94:e9:49:b2:6c:e5:48:f7:f9:df:37:c5:f0:
         33:8a:dc:0e:4e:99:63:cb:02:5b:7b:fa:a9:68:9c:84:72:fe:
         f4:d2:2e:3b:8d:ec:f7:5d:d6:d2:4a:3c:39:d4:29:10:8b:84:
         3e:89:3a:b8:82:b9:6c:a7:00:a8:3c:d8:4f:b0:3b:7f:59:07:
         b7:f0:2c:c5:6b:13:61:e3:b2:01:79:d2:1b:3f:24:a8:39:b9:
         d1:09:3f:cb:df:3e:d7:16:9c:e6:e9:6a:6c:42:32:8b:6c:d8:
         07:f1:be:c0:97:5b:a6:b3:97:31:40:c2:9e:e6:0f:be:42:46:
         92:59:f1:ec:31:ec:e8:b5:b7:90:d4:97:24:c8:f3:86:1f:56:
         62:61:43:03:d3:dd:dd:63:8a:dc:57:6e:1d:5e:1a:53:b8:84:
         1b:0a:dd:c1:d4:0a:04:93:e0:91:e5:ca:af:87:0b:95:59:af:
         11:08:d2:54:ac:0c:9b:ad:51:85:5f:1a:de:62:85:db:05:0c:
         19:77:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:38 2026 by rpki-client