Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fdb2e9c-826b-31d4-952e-dd705720abb8.roa
File:                     5fdb2e9c-826b-31d4-952e-dd705720abb8.roa (raw, json)
Hash identifier:          a8ufWJ7cs0Ii+0Sz8nEEYW3FLr+uSKs6DG8TD7qETf0=
Subject key identifier:   FA:D8:B0:13:0C:33:CB:66:D6:46:46:9A:FE:D0:06:07:C3:CA:E0:FC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C7CACF8DC34C595F77720
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fdb2e9c-826b-31d4-952e-dd705720abb8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.115.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:7c:ac:f8:dc:34:c5:95:f7:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dfa8308b-476a-4ee5-9ee9-1bfed4c30376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:78:cb:15:df:25:9d:1d:14:62:27:30:15:
                    54:b8:a2:0a:be:54:00:c8:74:47:0c:7c:a0:5d:e6:
                    d3:fd:a1:e9:cb:d5:58:f1:6e:38:01:eb:b6:78:28:
                    ea:ae:9e:ef:71:f6:80:f0:eb:b1:0c:87:86:5c:28:
                    a3:03:b3:a4:92:8b:b7:62:d5:00:4f:b0:b9:24:6a:
                    db:c9:30:4f:1d:2a:fc:d2:a1:e8:d5:64:f5:63:27:
                    82:d8:28:ee:a5:0b:06:34:b4:7c:21:ff:3a:e7:8e:
                    5d:5e:af:df:37:b2:e3:d7:10:cb:8c:b0:a9:b1:1f:
                    c7:d9:34:c0:7c:8a:85:19:f4:22:e5:c7:e2:26:48:
                    72:6a:fb:66:34:75:28:c5:03:97:e3:33:e6:67:c8:
                    05:be:a1:b1:57:7f:1e:36:9e:44:00:64:29:0f:08:
                    16:cd:2b:05:b2:80:0b:1e:6e:c1:e5:62:6d:68:61:
                    b4:ad:ba:3b:c2:65:7e:84:03:6c:d4:11:d0:67:72:
                    ec:a9:7c:12:86:b3:37:86:1a:68:1b:ba:6a:26:c4:
                    fe:f3:3b:12:53:67:ab:1b:48:3e:87:33:b6:32:60:
                    1f:28:90:6a:7d:ef:3d:69:d7:07:20:c8:39:d9:7b:
                    5a:99:bf:d5:66:ac:95:ab:77:cb:0c:6f:63:09:c2:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:B0:13:0C:33:CB:66:D6:46:46:9A:FE:D0:06:07:C3:CA:E0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fdb2e9c-826b-31d4-952e-dd705720abb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4a:48:05:2d:15:19:c8:3d:55:c8:33:19:dd:1f:2a:1c:74:
         54:5d:ec:e0:eb:26:5c:12:d8:64:8a:b6:4c:2c:e0:d9:b5:8f:
         fd:0e:51:e9:41:f0:f7:d5:be:84:ea:60:2c:ed:8e:74:a7:9e:
         74:c4:a7:77:d3:07:ce:1d:c7:44:3b:96:d5:e7:a2:f0:ff:95:
         0d:2d:df:ac:4e:5f:14:f3:d4:22:6c:88:93:ee:f6:2b:70:45:
         e4:cb:52:53:4f:24:e5:dd:36:39:e9:e7:93:32:7b:ab:dd:ce:
         65:fd:f3:06:a8:e7:70:4d:f4:31:5b:f0:1f:64:96:e6:a9:70:
         d9:dc:d3:c9:d3:d3:78:9a:95:6b:a5:78:94:fc:b1:d5:a8:9b:
         52:45:4b:31:69:b4:41:5f:79:11:f5:c1:be:0c:27:51:18:d1:
         45:5b:c7:ef:18:25:5a:57:28:13:d7:b2:d6:c9:a0:1b:94:23:
         ff:5d:c3:59:1d:91:e5:33:6d:94:ee:53:82:03:56:73:58:ea:
         da:31:74:a0:b7:1a:15:c5:b8:a0:5f:31:2d:e8:0d:08:43:23:
         06:14:bf:90:4c:f2:5d:d5:f1:b8:5a:22:5c:d3:68:91:3d:32:
         9d:46:a3:fd:b9:91:d2:3b:c1:fd:fe:35:a6:af:36:0f:7d:bf:
         b4:7b:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:27 2026 by rpki-client