Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0e4e4813-ceed-38e6-848a-0523ab72cf29.roa
File:                     0e4e4813-ceed-38e6-848a-0523ab72cf29.roa (raw, json)
Hash identifier:          qStj5xlzcy0mK9+Ksl1VZ2aYOCW6ag0al8ZdMf+cgsw=
Subject key identifier:   2E:4C:8F:B6:13:B3:88:71:40:DC:E2:E0:80:0C:37:85:E4:95:19:C9
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4989A4D100A234529B8068B8
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0e4e4813-ceed-38e6-848a-0523ab72cf29.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        199.249.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:a4:d1:00:a2:34:52:9b:80:68:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=211341fe-17ab-4225-afe7-2749cbeb1fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:0f:d7:e5:87:75:b2:10:83:71:92:e3:9d:
                    b6:19:13:38:15:b8:92:d4:11:d9:6e:0e:2c:d1:d1:
                    f2:8e:6f:fa:da:d2:14:d4:4c:d9:7f:55:1f:62:4b:
                    74:49:e1:3f:61:2d:30:23:1c:16:5f:32:cb:51:75:
                    96:15:94:1c:06:db:bc:58:5e:2e:36:e6:52:0b:34:
                    0a:bb:fc:28:63:4e:d5:42:1e:99:20:62:a6:e4:24:
                    a5:bd:94:4f:4f:b0:cf:06:07:c4:57:12:e8:d9:15:
                    1f:0b:be:d5:e2:be:f5:0a:55:58:e6:87:14:ba:60:
                    69:4d:6e:33:7d:9e:54:ec:10:80:a3:21:b4:91:64:
                    12:ad:ae:85:8d:27:6e:8a:4c:bc:70:13:52:98:27:
                    d3:e9:1b:ec:14:3b:c3:76:d9:48:e1:1f:85:fa:14:
                    c2:63:c1:cd:26:da:eb:14:d8:c1:3b:d4:c9:a1:64:
                    65:e2:a3:34:a6:e3:0d:bf:7a:dd:3c:97:21:5d:8e:
                    09:6a:d5:1a:5b:cb:fa:19:14:15:d3:cd:d8:0b:65:
                    b6:ea:40:01:3b:46:73:b6:68:f9:a9:ea:bb:db:bd:
                    aa:48:9a:e7:57:6d:bd:59:d4:7e:61:26:66:ce:b0:
                    c9:52:1e:47:eb:c7:78:5d:56:08:e5:09:a6:06:5b:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:8F:B6:13:B3:88:71:40:DC:E2:E0:80:0C:37:85:E4:95:19:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0e4e4813-ceed-38e6-848a-0523ab72cf29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:04:5a:28:b1:9f:a2:3b:6e:69:c0:3b:8c:d6:57:e2:94:ef:
         d2:ad:71:dc:40:09:ae:99:57:72:28:6d:1c:43:3c:19:f6:b1:
         b2:af:9e:3f:c8:61:99:d1:26:da:44:a1:02:e6:07:40:33:91:
         60:02:bf:2a:1d:fc:62:5c:6a:87:d4:b0:bb:fd:7b:f1:3a:f0:
         97:40:03:a9:28:55:1e:8d:74:71:01:e9:15:1c:cd:a7:e0:57:
         4a:4d:24:3d:1f:e9:07:24:a7:16:0e:80:2d:2b:c1:c8:01:ab:
         fc:53:dc:23:cf:5a:ee:ee:1c:03:bf:40:f0:5c:d1:d5:09:7f:
         ea:1e:52:7b:02:af:c8:55:40:0d:e2:af:c9:e0:e9:aa:9e:d5:
         30:30:4a:52:1b:7a:f8:37:d5:3d:f5:a2:c7:3e:c6:db:0e:96:
         e5:f1:b6:f4:64:e8:67:1d:37:f1:4c:aa:52:e3:74:4d:5d:dd:
         a3:b2:ef:7b:a3:96:68:d9:06:d4:1f:a5:d8:7f:1e:09:ac:12:
         86:37:7c:49:f7:ea:cb:c0:4c:c9:6d:59:82:21:5e:32:bd:f2:
         d3:82:10:85:d6:67:e0:dd:75:84:2d:87:e8:8e:f8:62:5c:28:
         7d:f5:b6:c6:bb:6a:bd:f9:98:26:d2:00:c2:d5:d4:c5:60:16:
         f3:43:1d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:32:44 2026 by rpki-client