Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c702bb81-6d1a-3f56-84b2-432537060a48.roa
File:                     c702bb81-6d1a-3f56-84b2-432537060a48.roa (raw, json)
Hash identifier:          lpw1y+XVLk26h6u5JSZl4butzyMQBLqgFZPf5qH7sU0=
Subject key identifier:   92:25:BE:E2:54:C0:FE:57:E7:7E:4D:3F:B1:A4:55:EF:F0:59:56:86
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6367503F1B019ACDE3C30400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c702bb81-6d1a-3f56-84b2-432537060a48.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        161.232.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:50:3f:1b:01:9a:cd:e3:c3:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=a6c6bf9d-5866-4754-85b9-184923cef847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f0:a6:97:19:27:fd:50:99:c7:d3:2c:01:15:
                    77:e8:61:24:12:a8:97:3a:ff:ca:1d:1e:fa:be:ce:
                    ba:68:55:07:f1:5f:29:11:20:cf:07:88:2b:21:8d:
                    26:07:bc:aa:95:71:91:bb:d4:25:7a:b6:18:7d:82:
                    6d:5f:c7:30:85:ed:56:79:ed:37:7a:fb:5c:d8:72:
                    1a:23:55:fc:d0:83:f3:26:22:9e:e0:1c:0a:86:37:
                    81:2d:b1:23:03:a7:75:19:97:86:87:f5:20:aa:51:
                    8c:dc:bb:55:9c:92:aa:76:ab:4d:9d:3c:ae:49:46:
                    c9:d8:98:2b:ba:58:89:eb:34:e0:a9:32:43:ef:7e:
                    45:20:27:97:fb:be:c6:16:e9:ae:1a:80:31:a1:9f:
                    86:b4:c7:f1:ba:96:07:7e:21:0e:64:b5:67:b8:6f:
                    70:8c:2f:b4:69:0d:02:99:33:da:96:9c:db:e0:e6:
                    e1:ce:ee:9b:c6:10:8d:6f:b8:63:0e:67:b6:1e:cf:
                    48:b5:c3:08:7a:60:b9:fe:2d:c2:5a:cb:0d:5a:fc:
                    cd:98:e6:d2:34:97:b7:bd:e1:99:a3:aa:99:67:8f:
                    e3:9b:3d:c8:fc:e2:fd:af:36:a3:de:9e:90:59:d5:
                    76:f1:f0:76:72:c7:b8:81:1e:6b:f7:75:26:f0:b3:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:25:BE:E2:54:C0:FE:57:E7:7E:4D:3F:B1:A4:55:EF:F0:59:56:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c702bb81-6d1a-3f56-84b2-432537060a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:50:2e:a1:6d:bf:08:fe:64:d5:8f:9d:0f:ca:97:84:bc:75:
         94:d6:8a:67:5f:4d:6f:da:b2:dd:15:b6:66:60:90:a4:cd:03:
         3c:8d:91:78:72:3c:7d:b4:30:b2:52:ff:ac:35:5a:81:3b:02:
         a2:99:00:77:63:c7:36:95:41:a0:87:2e:28:f7:52:2d:62:6e:
         af:49:01:53:18:81:96:d5:cb:ad:71:01:fe:97:3b:f0:e7:69:
         79:d3:ec:ab:99:4f:d9:25:7d:d1:96:39:55:77:08:25:52:ab:
         b2:2a:81:6f:11:14:b0:1d:58:e1:2e:9b:7f:f5:a0:a8:08:4f:
         d8:79:8d:3d:c1:f6:36:0d:4b:07:78:c5:d3:ee:97:ce:cd:cb:
         8b:a2:6b:76:8b:75:75:ba:a1:c5:19:1d:38:ec:21:87:c2:ff:
         4b:0b:01:5a:09:7d:3d:7c:6c:9d:7d:fe:31:74:96:c3:6c:3d:
         c4:17:c4:51:67:86:c1:01:cf:76:48:2f:a3:b1:9e:20:2f:4f:
         b1:ae:89:d2:65:b3:5f:13:d3:37:d3:e2:40:97:dd:2e:b4:50:
         c9:00:fe:70:eb:48:49:a0:d7:f2:4a:93:9b:ce:e6:c0:e6:7b:
         7e:19:11:7b:54:d9:37:18:9a:9b:b4:01:9d:b2:9d:90:cc:e6:
         53:be:d2:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ1A/GwGazePDBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
YTZjNmJmOWQtNTg2Ni00NzU0LTg1YjktMTg0OTIzY2VmODQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPCmlxkn/VCZx9MsARV36GEkEqiXOv/KHR76
vs66aFUH8V8pESDPB4grIY0mB7yqlXGRu9QlerYYfYJtX8cwhe1Wee03evtc2HIa
I1X80IPzJiKe4BwKhjeBLbEjA6d1GZeGh/UgqlGM3LtVnJKqdqtNnTyuSUbJ2Jgr
uliJ6zTgqTJD735FICeX+77GFumuGoAxoZ+GtMfxupYHfiEOZLVnuG9wjC+0aQ0C
mTPalpzb4Obhzu6bxhCNb7hjDme2Hs9ItcMIemC5/i3CWssNWvzNmObSNJe3veGZ
o6qZZ4/jmz3I/OL9rzaj3p6QWdV28fB2cse4gR5r93Um8LOIYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIlvuJUwP5X535NP7GkVe/wWVaGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzcwMmJiODEtNmQxYS0z
ZjU2LTg0YjItNDMyNTM3MDYwYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBQLqFtvwj+ZNWPnQ/Kl4S8dZTWimdfTW/ast0VtmZgkKTNAzyNkXhy
PH20MLJS/6w1WoE7AqKZAHdjxzaVQaCHLij3Ui1ibq9JAVMYgZbVy61xAf6XO/Dn
aXnT7KuZT9klfdGWOVV3CCVSq7IqgW8RFLAdWOEum3/1oKgIT9h5jT3B9jYNSwd4
xdPul87Ny4uia3aLdXW6ocUZHTjsIYfC/0sLAVoJfT18bJ19/jF0lsNsPcQXxFFn
hsEBz3ZIL6OxniAvT7GuidJls18T0zfT4kCX3S60UMkA/nDrSEmg1/JKk5vO5sDm
e34ZEXtU2TcYmpu0AZ2ynZDM5lO+0iQ=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:06:26 2025 by rpki-client