Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa
File:                     5d3f2d62-7392-3f54-9ead-3a261d95adca.roa (raw, json)
Hash identifier:          Vq3ojyfXEEpGXeb/gq6KT/Ug8UvbOy9pAFOfEh8/NQc=
Subject key identifier:   8A:8A:B3:AA:A8:AD:C9:1A:F2:71:D5:D8:78:A5:93:D5:36:30:F6:81
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79BCC04BF8958BDE445C3C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.182.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:cc:04:bf:89:58:bd:e4:45:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=391eb398-e1da-4cf9-8864-c8e028dd5570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:19:2c:1d:72:46:84:21:03:15:dd:f7:93:
                    b3:74:43:19:ea:7c:fc:77:73:e1:a8:9f:66:ad:18:
                    7e:ba:10:1e:ef:34:50:f9:f9:8b:82:d2:01:c5:bc:
                    94:47:1f:47:7e:42:f9:2e:60:b8:f1:58:23:46:c2:
                    03:f2:a5:f6:01:80:7a:8e:75:06:93:fe:c1:85:5f:
                    31:74:fa:6b:5f:65:50:5b:4f:45:c5:0f:5d:99:98:
                    1d:9f:25:13:7e:e5:08:0a:7c:c8:99:9e:93:75:7a:
                    72:85:7b:ed:25:66:5d:a8:2f:5b:86:9e:4b:9f:b3:
                    62:74:6d:73:fb:bc:eb:21:8a:97:26:10:b1:70:0b:
                    95:61:be:63:2e:47:fd:07:0f:66:2c:9f:7f:cc:e1:
                    29:25:5b:33:ff:02:ad:52:37:59:bf:8b:2f:6b:a0:
                    39:76:c5:0f:63:dc:be:22:8f:5f:f1:fc:23:65:52:
                    75:5e:4e:75:e8:21:8f:ae:5e:69:ef:bd:3b:0e:e6:
                    54:d3:3f:6d:5e:6a:66:9c:16:a4:7f:5d:c0:87:14:
                    dc:71:75:f8:c9:71:aa:6d:04:39:7a:b3:4a:ea:9c:
                    f5:93:be:88:2a:8c:97:9a:be:38:d0:03:d9:b2:df:
                    36:38:fd:78:f2:99:78:20:f3:50:fa:8d:63:54:65:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:B3:AA:A8:AD:C9:1A:F2:71:D5:D8:78:A5:93:D5:36:30:F6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:78:71:91:b7:a5:50:a6:e8:e8:38:69:ad:a1:13:b1:ec:9d:
         a3:cc:ff:eb:ea:8a:17:27:61:85:83:7c:6c:48:a2:8e:74:82:
         3e:02:51:4b:71:a1:68:b5:a8:cf:36:22:39:49:eb:09:31:12:
         5d:27:1c:76:9b:62:e0:1a:f9:7f:f5:26:fa:65:52:2e:62:8d:
         d0:20:f3:3f:84:cc:b1:29:9b:0d:55:7b:6e:e2:5b:be:55:55:
         85:e1:7e:65:ca:f2:27:a8:f7:eb:82:2f:af:22:69:f6:3a:63:
         3f:2d:b1:ea:17:e3:09:c6:eb:0b:5f:37:73:62:6f:7f:af:9b:
         17:cc:3d:f9:1c:a7:f3:c6:01:ba:db:b2:7c:f1:24:0d:25:ec:
         07:c5:6c:b3:c1:7f:9b:49:12:d9:b1:1a:79:03:50:dd:f0:a4:
         b3:29:e4:18:b0:6b:6d:a6:c9:13:f7:31:fd:1e:36:f2:a8:98:
         f0:63:da:59:65:a1:d6:3e:06:f2:2a:e7:2b:a8:85:71:32:55:
         61:44:cb:ff:56:91:b6:1c:b6:78:b0:a6:e9:de:00:bb:3b:b4:
         88:1f:87:d0:85:46:b7:8b:97:dc:ba:b3:ff:63:d9:46:16:b1:
         56:46:2f:8f:25:43:2c:62:90:6a:ef:ca:64:8b:9b:d2:32:8c:
         13:de:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:53 2026 by rpki-client