Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa
File:                     0990a821-708b-37b1-9308-d5b257c1268b.roa (raw, json)
Hash identifier:          Aa5DeaOJ6p5i3EPmilvs6OMB4x6McOb3FxvFDunKkmo=
Subject key identifier:   53:44:37:0C:EE:37:68:99:31:29:AD:75:DB:78:DA:A7:D9:AE:E8:62
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81462276FC7707ECBFE6D180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        199.182.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:22:76:fc:77:07:ec:bf:e6:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=b5ed4522-9230-4b5a-a8c9-d65c9e961e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b9:81:87:6f:04:db:31:cf:85:d8:14:34:4b:
                    c7:74:c6:01:3f:54:c0:30:a5:bd:88:dd:fe:ba:c0:
                    f6:90:66:98:83:9a:4b:3f:42:93:57:cb:45:3b:78:
                    96:0c:96:05:7b:08:96:77:96:79:d1:93:99:b3:7a:
                    38:ba:27:6f:eb:14:f3:b9:c1:9d:86:2c:f1:86:53:
                    98:f6:6b:13:22:14:fa:0c:f6:02:06:86:58:d1:e4:
                    00:d2:ff:0e:d5:42:83:6a:ea:38:96:e2:fb:a9:9f:
                    73:64:ff:65:f8:89:6a:54:17:98:1a:66:8f:e5:75:
                    36:7d:21:9b:d5:8c:5e:70:db:fd:1f:9e:1d:78:79:
                    20:a6:06:5a:1f:4a:3c:7c:b1:35:a9:94:e4:c9:7a:
                    34:ee:ba:61:0c:e5:9a:85:3a:46:be:d5:5d:b7:3c:
                    89:87:3b:1f:cb:7b:1a:ed:f9:ec:23:db:73:3b:95:
                    db:02:5a:db:5d:68:fc:3f:14:f5:90:77:f6:ad:ae:
                    83:ee:85:4e:57:3f:8e:b7:a5:6d:18:4e:8c:9c:4b:
                    08:f9:dc:ad:f5:12:e2:6f:86:9b:3e:b6:f8:8a:00:
                    d6:d0:3c:70:ea:d4:ec:1e:85:12:11:cb:48:c7:92:
                    6e:53:a3:ef:40:77:84:3b:71:77:c7:bc:a2:85:bb:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:44:37:0C:EE:37:68:99:31:29:AD:75:DB:78:DA:A7:D9:AE:E8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:0c:68:a7:6f:96:a0:e1:11:e3:d8:d3:1f:9f:61:12:db:
         c5:2e:b9:49:20:1c:94:51:ca:20:83:54:2e:34:12:f0:b8:71:
         d9:ac:1d:30:ce:e1:e1:54:ee:80:18:13:56:6c:63:54:cd:16:
         fb:00:8a:f9:c4:b7:a7:9f:e8:af:33:c0:62:42:75:39:b6:11:
         e1:06:34:2b:06:22:28:dc:f0:39:2d:1a:cf:3a:c1:dc:5c:fe:
         15:21:9d:67:d7:0e:c7:4b:18:bc:c5:5e:71:e9:00:38:7a:e2:
         d0:c5:45:45:3d:11:e2:9f:2b:c4:b1:a2:15:07:7c:90:8d:a9:
         9d:37:33:ef:a4:da:30:78:8d:e5:87:32:ef:86:8b:4d:1a:16:
         9a:c4:18:81:11:bd:31:97:f2:93:cf:35:d4:07:46:19:79:24:
         b1:72:39:72:b7:aa:94:20:12:09:6a:53:72:66:16:d9:9d:73:
         b9:24:4c:cb:fb:cc:41:57:60:21:a0:6c:76:f2:6b:47:27:75:
         35:0d:72:6c:46:3a:73:fb:43:25:ec:e8:f6:3e:04:9a:82:ae:
         a2:bf:ab:63:6e:9e:87:dc:92:13:71:d1:36:a1:bd:69:81:2c:
         90:f1:5b:ce:03:86:32:62:cd:df:fb:d8:96:e9:4a:c5:a8:d8:
         84:99:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:50:32 2025 by rpki-client