Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa
File:                     25288322-c799-369c-9460-850a0e2897f4.roa (raw, json)
Hash identifier:          GQgCdOg2J96NtkwhvN6mfHoFBfhQ6+Kr+74A/HAJni0=
Subject key identifier:   D0:E8:A7:BC:7B:4C:67:33:18:32:82:F7:2E:92:23:92:91:94:A5:20
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E043618235F057DEA4EFBBD00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        199.182.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:18:23:5f:05:7d:ea:4e:fb:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=d3ad3982-d5f3-4adf-8d02-0d188ac733dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:d5:04:8f:2a:80:b2:29:70:18:2a:1a:83:
                    66:4f:5c:7d:46:4e:59:0c:b5:f4:55:0f:da:57:1b:
                    b0:12:c9:2c:63:9a:50:75:5a:fe:51:1f:70:69:b6:
                    c6:df:80:af:8b:b1:f2:9c:e1:af:18:9f:8e:f2:46:
                    d0:27:57:0a:39:57:82:8c:f1:9c:96:6b:04:6e:81:
                    e4:fe:72:4b:35:05:04:be:2c:10:c6:33:06:b3:2f:
                    f2:64:79:4d:6a:6a:91:66:70:4b:1d:51:a9:59:56:
                    da:13:c3:7a:5c:5a:16:5c:2a:14:40:48:eb:a7:a6:
                    2e:62:17:df:0d:44:95:73:7d:c6:5e:87:c4:22:0c:
                    f5:d7:93:5c:7b:6a:87:ee:ab:0e:b5:20:49:85:7b:
                    84:5c:55:58:e9:b3:cc:da:34:13:13:12:20:44:e0:
                    20:97:ab:a8:35:70:cc:61:31:3b:6e:51:65:66:84:
                    bc:93:48:b0:31:46:ee:5b:82:df:5e:53:77:46:2e:
                    3d:b3:51:66:5b:c4:07:ce:4a:33:dd:44:20:dc:ba:
                    bb:51:75:78:b0:b2:cd:97:eb:f7:c1:80:15:c5:5c:
                    28:09:3b:90:8f:df:76:ea:98:ea:4b:f3:2c:58:ce:
                    ca:3d:24:4b:00:10:c1:b6:a8:99:4f:5e:7d:75:70:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:A7:BC:7B:4C:67:33:18:32:82:F7:2E:92:23:92:91:94:A5:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:8f:54:ba:cf:2d:68:ad:f8:c7:8f:8d:43:9b:3c:36:9d:76:
         e6:58:76:c7:c7:95:53:1c:01:86:4f:ed:99:70:7b:b7:7d:95:
         db:3d:a9:f8:74:3f:ae:49:32:1e:57:62:f7:bf:70:8c:1f:64:
         ff:b9:3e:10:ff:b2:dc:ed:e4:07:6d:31:dc:f5:34:41:f6:d2:
         db:b6:91:72:fd:28:e0:f2:e0:fb:e5:e8:f3:77:51:a7:c9:12:
         96:21:56:0d:b4:16:60:9c:e8:2a:38:3e:a4:9c:0c:eb:3d:73:
         a6:96:0a:17:b9:87:90:da:ec:e3:a7:9a:1b:e2:a0:56:ae:f2:
         5c:aa:2d:39:a5:eb:c0:c9:4f:67:58:92:b6:77:f8:12:2a:65:
         83:d9:ea:21:c1:57:d4:71:6d:a0:82:ce:43:08:f3:a2:c4:23:
         3e:d7:e9:43:2b:11:26:1e:7c:09:8a:bb:83:18:c0:0d:e1:31:
         4c:91:f6:ef:50:1c:ea:45:27:b5:b6:61:e1:a0:24:92:56:5f:
         86:2f:41:28:25:14:9b:c9:41:f8:81:cc:97:58:68:6d:17:f9:
         4e:35:8f:a6:68:af:26:74:65:31:80:76:91:02:98:d1:af:70:
         fa:4f:4f:e9:ab:b6:71:85:ee:ec:a0:c9:36:1c:32:ae:9a:c2:
         3b:6d:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:54:33 2026 by rpki-client