Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5ae904c6-adfe-34e1-965d-8f1506bf3e5b.roa
File:                     5ae904c6-adfe-34e1-965d-8f1506bf3e5b.roa (raw, json)
Hash identifier:          uRINUxYnbBhvZM//0NM6kpKEi4I5P6IB2YAQ1jwejHk=
Subject key identifier:   C5:8C:92:27:E3:B1:3F:4C:A0:AC:8A:3C:52:1E:5F:CA:B1:B5:C5:50
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C122695B126A8376C29C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5ae904c6-adfe-34e1-965d-8f1506bf3e5b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     207266
IP address blocks:        199.182.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:12:26:95:b1:26:a8:37:6c:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=180a31e5-ce29-4872-b1e4-4cb28af62773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:c7:b5:79:39:8a:08:35:32:41:5e:3b:ee:
                    fd:9d:46:3f:40:1c:89:6e:b5:4b:92:37:70:b6:9a:
                    19:97:0b:7d:38:54:0e:c6:6d:bf:47:bf:08:e3:95:
                    d8:fb:7e:50:b7:87:df:bc:88:96:04:18:f8:29:e0:
                    ad:1a:2e:c3:d3:ce:14:a6:96:fd:7a:51:be:44:87:
                    f9:bf:59:40:49:2f:a4:79:93:e7:37:76:3a:4f:01:
                    b5:b4:46:37:be:ef:6e:a4:4c:42:58:01:fc:f3:6b:
                    20:2b:94:0d:91:86:19:c3:ea:82:07:4a:3f:aa:2f:
                    65:4d:bc:6d:63:f4:02:4d:c0:c1:a2:c9:07:94:ff:
                    d5:5c:da:c1:31:d4:31:96:27:97:6e:04:02:d1:2e:
                    e2:10:89:9c:1d:d1:0a:46:75:e3:ff:31:4b:21:59:
                    a6:0c:90:95:09:53:04:5a:29:50:8f:31:cb:a3:f6:
                    bf:52:de:7a:92:85:19:26:9b:89:7a:8a:3d:b9:88:
                    d0:c0:3b:fb:94:c8:48:91:73:48:40:04:db:ab:18:
                    3b:c7:58:a3:ab:34:62:3a:d6:8a:9c:4f:af:fc:e3:
                    06:23:8c:86:cc:2e:cc:3b:b3:9d:8b:db:39:13:e7:
                    23:7b:3d:e2:d3:b6:32:a9:83:aa:53:56:0d:95:85:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8C:92:27:E3:B1:3F:4C:A0:AC:8A:3C:52:1E:5F:CA:B1:B5:C5:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5ae904c6-adfe-34e1-965d-8f1506bf3e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:cf:81:9d:6e:87:27:5b:08:07:73:5c:51:59:91:4f:46:
         d3:56:5b:4c:4d:e8:9c:82:1b:6b:64:4b:b7:81:06:25:9a:e5:
         9a:e6:9b:02:42:b2:97:45:9d:c1:0b:1f:a7:30:33:52:8c:29:
         39:aa:25:5a:7a:23:46:5e:88:b6:bf:0d:dd:c3:ad:42:3d:b6:
         a8:eb:f5:8a:43:76:af:80:0a:a8:da:b8:d9:72:aa:1c:32:ac:
         9c:b2:d7:ab:88:94:46:22:99:6b:8f:5e:b2:32:94:14:04:53:
         42:a5:5e:3d:29:cd:c4:1c:b8:df:b9:c3:fb:db:b8:f7:de:47:
         45:3d:82:d1:a7:cf:13:34:06:38:db:aa:c4:62:b3:df:cb:48:
         4a:1d:ba:fa:59:a3:d3:2b:0e:c1:e7:0f:fd:93:4f:d7:41:63:
         10:b1:32:76:66:66:6f:62:c2:a3:c1:64:a8:48:d8:28:73:22:
         d6:8b:97:b9:54:da:52:06:25:d4:44:f8:e9:12:62:d3:ec:00:
         04:e4:91:b7:26:fc:fd:0d:b6:75:34:a2:bb:c4:48:6a:53:40:
         ea:46:49:e8:bf:a5:38:58:19:6a:16:39:0e:ff:13:db:84:96:
         fe:bf:55:f2:27:94:61:af:04:9e:a4:cb:83:ed:0f:7e:64:28:
         15:6f:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:51 2026 by rpki-client