Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa
File:                     da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa (raw, json)
Hash identifier:          gSwVhfc6GWooYTpYIXdV4usIlBEen2r5p8IaST6gck0=
Subject key identifier:   7F:F0:E5:BA:EE:97:E2:83:AE:2B:1D:86:13:67:CC:6E:BE:2A:36:58
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E043610E5E5581701526656C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        161.232.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:10:e5:e5:58:17:01:52:66:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=5a0cd544-78af-49c5-833c-bf59683e9bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:0a:4d:29:5e:26:a2:60:31:3c:c4:62:95:
                    93:99:1a:55:83:bc:50:e5:4f:80:79:01:c5:3f:2d:
                    01:ba:50:0e:10:ae:19:52:45:35:63:ec:2f:0a:42:
                    33:a5:9f:44:72:ec:8c:bc:b8:1c:e5:f4:5a:6c:35:
                    45:ac:95:37:80:21:c2:9b:c0:b5:40:3e:da:65:c9:
                    6e:ee:16:52:5e:51:98:51:95:e6:6c:cf:22:83:59:
                    79:7f:46:23:8c:26:7a:56:07:80:58:57:d7:ea:89:
                    5f:7b:97:1a:4e:cd:f7:4a:ca:ed:62:86:f8:32:ac:
                    ac:66:d2:ae:4b:44:3a:2a:e6:ac:3a:50:e9:59:e8:
                    e3:86:f8:f8:bc:0e:84:c4:55:6b:ab:64:79:b2:5f:
                    a0:ef:8f:5f:c4:fb:22:19:7e:14:86:4f:fd:86:30:
                    f1:47:75:a6:07:3a:f6:41:35:c8:4c:bf:6f:be:6e:
                    f0:7c:2e:8d:a1:07:c2:e5:76:03:e1:11:94:53:73:
                    57:e3:1d:65:48:5c:f6:86:ff:d1:73:05:0d:6f:71:
                    d4:51:30:70:25:0a:95:e6:39:f9:cb:2e:bf:a8:34:
                    39:a7:51:3b:93:26:d6:26:63:da:11:a1:7f:2f:98:
                    5e:a3:73:b3:9a:8d:5a:dd:8e:91:8f:80:85:e8:ad:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:E5:BA:EE:97:E2:83:AE:2B:1D:86:13:67:CC:6E:BE:2A:36:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:d5:6c:0d:80:18:3a:70:53:8a:91:df:ca:e1:ef:f5:9b:
         7c:7a:bf:12:d4:d8:0a:b9:02:5a:45:93:fe:61:09:c3:02:11:
         b6:7e:cb:49:33:c9:3c:ae:39:ce:26:bd:cb:ee:ae:d6:27:15:
         42:ca:09:b0:d8:36:6d:b5:c6:ac:0d:68:46:fe:47:42:3d:a4:
         23:b1:d7:ae:df:3e:f1:c8:d4:a8:e1:b6:e9:6e:13:53:63:97:
         fa:03:38:1d:72:fb:8f:26:bd:b6:50:0e:c5:f8:bd:68:95:b4:
         1e:44:75:e5:22:42:96:8e:a1:5a:4e:9c:38:59:43:5d:c7:7e:
         f0:e3:4b:39:52:d9:9c:a3:f0:be:88:94:5c:b0:89:11:d7:69:
         90:46:f6:eb:22:26:db:36:3f:ac:0c:07:f8:c0:53:0d:61:a1:
         34:02:e0:38:32:57:c6:e9:c1:28:d2:b0:1c:85:b4:d9:11:37:
         ee:58:01:c0:51:fc:0d:89:03:61:ce:b4:dd:fc:c4:e8:81:3d:
         bc:b7:16:71:82:3b:90:d8:16:34:93:44:ee:32:1e:b8:00:98:
         65:e6:e6:e6:4f:9f:37:39:e7:a8:06:34:ca:ec:bf:ea:91:28:
         2a:f0:65:6b:41:5e:e5:8a:0a:53:c9:82:48:30:17:cd:86:9e:
         51:e4:5f:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhDl5VgXAVJmVsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
NWEwY2Q1NDQtNzhhZi00OWM1LTgzM2MtYmY1OTY4M2U5YmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfMKTSleJqJgMTzEYpWTmRpVg7xQ5U+AeQHF
Py0BulAOEK4ZUkU1Y+wvCkIzpZ9EcuyMvLgc5fRabDVFrJU3gCHCm8C1QD7aZclu
7hZSXlGYUZXmbM8ig1l5f0YjjCZ6VgeAWFfX6olfe5caTs33SsrtYob4MqysZtKu
S0Q6KuasOlDpWejjhvj4vA6ExFVrq2R5sl+g749fxPsiGX4Uhk/9hjDxR3WmBzr2
QTXITL9vvm7wfC6NoQfC5XYD4RGUU3NX4x1lSFz2hv/RcwUNb3HUUTBwJQqV5jn5
yy6/qDQ5p1E7kybWJmPaEaF/L5heo3Ozmo1a3Y6Rj4CF6K35RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/w5brul+KDrisdhhNnzG6+KjZYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGE0MDE0YTktOWFiMC0z
YWI3LWEyN2QtNDhhM2MzOWY5NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeghMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzL1WwNgBg6cFOKkd/K4e/1m3x6vxLU2Aq5AlpFk/5hCcMCEbZ+y0kz
yTyuOc4mvcvurtYnFULKCbDYNm21xqwNaEb+R0I9pCOx167fPvHI1KjhtuluE1Nj
l/oDOB1y+48mvbZQDsX4vWiVtB5EdeUiQpaOoVpOnDhZQ13HfvDjSzlS2Zyj8L6I
lFywiRHXaZBG9usiJts2P6wMB/jAUw1hoTQC4DgyV8bpwSjSsByFtNkRN+5YAcBR
/A2JA2HOtN38xOiBPby3FnGCO5DYFjSTRO4yHrgAmGXm5uZPnzc556gGNMrsv+qR
KCrwZWtBXuWKClPJgkgwF82GnlHkX4k=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:55 2026 by rpki-client