Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa
File:                     1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa (raw, json)
Hash identifier:          2r5tdrFWBbR3xKXMfrWtHV0zQtI0arCXDyP473MSU6Y=
Subject key identifier:   46:E5:38:43:95:50:87:1F:3B:1B:F1:CD:46:64:38:74:AA:A8:D6:8D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04362A6D7F8C2C2ED515CC80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        161.232.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:2a:6d:7f:8c:2c:2e:d5:15:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=21987337-3cac-4e6d-8d2c-d8ecd300291e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:66:62:c7:56:b1:33:30:1f:14:cc:3b:37:
                    d9:c9:53:6a:bb:f3:4c:aa:57:ba:58:68:ca:d5:fd:
                    44:9c:79:1f:55:e2:fe:3d:e1:c7:79:42:cb:dc:f9:
                    51:4c:78:73:12:90:24:8b:9a:f3:6d:cf:f8:65:98:
                    12:71:dc:10:3f:cc:28:73:e2:8b:99:d4:7c:bd:44:
                    58:77:64:be:30:64:c3:32:31:ee:e4:65:0e:b2:0f:
                    78:30:a7:c8:19:03:b3:9c:1e:c2:d0:ab:e9:13:d0:
                    53:30:b0:96:13:66:d0:f4:2c:18:f5:45:24:00:b9:
                    ff:5e:14:30:d7:d3:ae:d5:f3:f9:84:c4:ba:9c:a1:
                    40:88:95:8c:78:ec:a1:85:52:c7:df:5a:3a:0c:12:
                    f2:5f:ac:1e:ee:e1:54:4e:bb:e9:5c:c4:4a:c1:dd:
                    61:75:e3:01:5c:70:a6:a2:0e:6b:83:e6:0f:6b:df:
                    cc:90:11:51:90:2c:30:38:27:de:ed:d6:84:26:66:
                    b9:e2:bf:33:31:c8:bd:d8:af:2a:48:7a:2c:7b:77:
                    d2:5c:96:7e:20:f5:b6:7d:fe:01:9c:75:1b:20:68:
                    70:e5:7a:3d:1c:97:ff:ed:85:3d:a3:2e:c2:62:f0:
                    e3:ab:bb:55:68:1a:78:8c:27:23:60:df:05:69:e4:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E5:38:43:95:50:87:1F:3B:1B:F1:CD:46:64:38:74:AA:A8:D6:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6c:b8:df:23:53:84:ee:ac:66:29:a5:a6:b1:fd:51:a8:ab:
         3d:4a:a5:0b:21:e4:61:fb:c8:e0:1b:87:c9:f0:f9:f0:a8:20:
         79:6a:ee:da:3f:4a:2a:57:1e:de:51:f2:df:f6:b1:fd:fe:f5:
         ed:eb:ab:6b:11:42:da:0f:42:3b:9a:f8:94:27:ec:c4:ce:14:
         d6:8c:c0:26:1c:f7:38:dd:2c:d2:cc:74:0a:e5:aa:c1:53:8d:
         ec:c5:ab:5c:1c:23:f3:8c:c4:c6:f1:ab:c0:40:11:ff:d5:c0:
         56:79:4f:a2:a0:fc:9c:94:78:ee:65:d4:f3:7a:94:6e:55:cc:
         98:d2:45:a9:29:a0:d4:61:87:4b:b2:27:83:56:fc:dd:66:2f:
         ac:ba:2c:ac:cd:34:aa:85:00:0f:ea:21:f8:76:98:08:4f:34:
         0f:af:7c:ce:ee:31:50:d4:8b:f9:44:40:05:2a:9c:da:12:80:
         d4:c9:93:c1:1a:85:76:26:ff:29:2d:02:95:13:d6:ad:54:ca:
         fe:18:6e:bf:4b:a8:87:07:de:fe:1f:52:fa:1e:57:5d:8e:70:
         38:36:98:74:7a:d4:a4:3d:e9:ad:79:6d:b3:53:5c:49:7e:5f:
         ef:75:6c:98:2f:21:4b:2a:ea:2b:81:6b:d3:d3:50:9b:06:d6:
         cc:bf:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:39 2026 by rpki-client