Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa
File:                     3b03f92f-103e-3d7e-abfa-c7431f00a281.roa (raw, json)
Hash identifier:          n7eXP1hjzEs85qJUX4r0tVJU9ehK/ZIXob/ffab36MY=
Subject key identifier:   DC:8B:72:D2:D1:19:70:32:E8:B2:2A:F1:E3:1F:7A:88:F4:72:78:75
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79CB77E5D8F174E1E5B1400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.249.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:b7:7e:5d:8f:17:4e:1e:5b:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7d7082a5-59c4-413d-91ad-865ae07a694e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:87:e4:bc:3c:52:af:a1:74:7d:c3:ea:1a:
                    6c:c5:f7:0f:23:8a:e7:9e:89:27:44:96:91:2c:c5:
                    e8:fc:29:22:d5:d5:22:9d:d6:c8:f9:af:86:b1:56:
                    f8:36:c5:46:b4:33:7f:e0:41:b1:4e:6d:93:10:b2:
                    3c:f9:14:f4:00:c4:44:4d:bf:7a:24:19:30:8c:28:
                    5a:63:80:e7:dc:e5:2d:a1:52:93:0a:35:46:41:8b:
                    1d:4e:a7:53:56:d2:1f:cb:57:a4:ec:18:3a:77:ed:
                    d3:3b:ec:64:31:07:b0:a9:5c:2f:98:d9:7c:1f:36:
                    ab:75:09:a0:95:ef:70:fd:80:99:f1:9f:91:db:1d:
                    eb:20:72:b4:17:f3:a1:64:9c:37:2a:d9:9c:d2:d3:
                    62:43:53:d4:9f:d2:84:4d:40:f2:07:74:6f:a2:a9:
                    86:af:79:d8:6b:71:4f:df:10:00:bf:8a:46:44:76:
                    87:ae:9b:3d:71:7d:5a:d9:13:f5:f3:49:c3:17:a0:
                    13:ce:e9:b0:68:18:04:24:2f:c6:fc:12:4f:07:f7:
                    4d:24:23:80:00:45:63:2e:ed:f7:e4:58:a7:ce:1e:
                    11:be:ab:3b:24:33:65:b7:81:a6:26:89:80:16:12:
                    47:31:ef:2f:eb:a8:21:64:28:6e:1f:f5:c1:85:64:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8B:72:D2:D1:19:70:32:E8:B2:2A:F1:E3:1F:7A:88:F4:72:78:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:9d:25:02:6c:38:9e:53:2f:13:4c:1b:cd:12:42:4c:e9:
         90:38:a6:a9:33:9c:fc:64:d5:6e:f3:f6:77:71:91:93:77:13:
         5c:df:9f:38:53:20:23:eb:53:91:f8:14:60:89:b4:3c:b4:f1:
         09:52:a2:93:c2:52:b6:c4:a8:a3:9b:cb:83:be:a4:f3:40:16:
         47:75:af:6c:77:67:14:27:62:06:c1:ff:03:f4:3f:45:dc:b2:
         79:fd:43:6f:eb:85:80:5b:6c:44:d0:c4:e2:d4:58:aa:00:f0:
         4c:e1:a8:2c:0e:0f:2b:58:68:4e:d4:73:8a:85:a3:6b:b6:ea:
         b6:b2:73:ba:ef:9d:5b:5e:f3:33:54:ff:1f:b6:83:a3:14:71:
         be:7e:cd:bd:9a:91:c3:54:65:d6:a9:d9:14:e2:28:12:db:df:
         08:cc:5d:f3:3c:39:91:04:c4:08:c2:73:64:5d:f1:be:ec:c4:
         b8:29:11:2c:e7:a1:ea:e9:4e:ed:c2:25:24:ff:04:f9:3f:7f:
         5f:2c:e5:49:34:75:47:be:a8:da:d7:47:c1:c9:3e:7b:76:8b:
         c1:f1:48:9b:93:6c:47:e7:77:12:2b:9b:5b:9e:f3:ff:bc:70:
         26:26:e4:1a:0a:66:44:1c:c8:f8:07:0f:bd:49:12:97:1d:94:
         9d:41:97:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnLd+XY8XTh5bFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
N2Q3MDgyYTUtNTljNC00MTNkLTkxYWQtODY1YWUwN2E2OTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjKH5Lw8Uq+hdH3D6hpsxfcPI4rnnoknRJaR
LMXo/Cki1dUindbI+a+GsVb4NsVGtDN/4EGxTm2TELI8+RT0AMRETb96JBkwjCha
Y4Dn3OUtoVKTCjVGQYsdTqdTVtIfy1ek7Bg6d+3TO+xkMQewqVwvmNl8HzardQmg
le9w/YCZ8Z+R2x3rIHK0F/OhZJw3Ktmc0tNiQ1PUn9KETUDyB3RvoqmGr3nYa3FP
3xAAv4pGRHaHrps9cX1a2RP180nDF6ATzumwaBgEJC/G/BJPB/dNJCOAAEVjLu33
5Finzh4Rvqs7JDNlt4GmJomAFhJHMe8v66ghZChuH/XBhWRq3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNyLctLRGXAy6LIq8eMfeoj0cnh1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2IwM2Y5MmYtMTAzZS0z
ZDdlLWFiZmEtYzc0MzFmMDBhMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqYnSUCbDieUy8TTBvNEkJM6ZA4pqkznPxk1W7z9ndxkZN3E1zfnzhT
ICPrU5H4FGCJtDy08QlSopPCUrbEqKOby4O+pPNAFkd1r2x3ZxQnYgbB/wP0P0Xc
snn9Q2/rhYBbbETQxOLUWKoA8EzhqCwODytYaE7Uc4qFo2u26rayc7rvnVte8zNU
/x+2g6MUcb5+zb2akcNUZdap2RTiKBLb3wjMXfM8OZEExAjCc2Rd8b7sxLgpESzn
oerpTu3CJST/BPk/f18s5Uk0dUe+qNrXR8HJPnt2i8HxSJuTbEfndxIrm1ue8/+8
cCYm5BoKZkQcyPgHD71JEpcdlJ1Bl14=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:35 2026 by rpki-client