Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa
File:                     651fe16b-339d-3318-ba58-ee4cace1b054.roa (raw, json)
Hash identifier:          TMS0XPgGoZfBcdOTxVIVlpzsYprkKz+zM2DGAqKkGsE=
Subject key identifier:   C6:0A:B0:71:DB:A6:F3:D3:85:70:51:C0:2B:D6:83:C7:EF:DA:E8:F5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435DB8C32BA93356FA5CD60
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        199.249.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:db:8c:32:ba:93:35:6f:a5:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=1e2f60cc-42d5-4f60-b38f-90655d955d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7b:aa:2d:9d:35:c6:2e:1d:7f:46:71:be:49:
                    92:89:2b:a3:e1:6e:78:ce:de:dc:63:2e:c6:5c:4b:
                    44:a6:77:58:4c:17:cd:a7:09:c3:a3:8d:97:a0:76:
                    8e:36:cf:df:4f:fc:6b:d9:76:f2:80:ee:46:8d:3c:
                    78:88:17:f6:71:58:26:2b:c0:90:df:3a:9f:80:25:
                    a6:b3:02:a2:d2:b8:3c:64:70:0a:9b:6c:d2:54:cd:
                    64:db:fe:ee:c1:28:7a:6f:46:13:e4:b0:f1:c5:d5:
                    f0:8d:1a:3d:9d:de:0f:a3:78:27:a6:96:d8:b1:18:
                    8c:e9:0f:08:39:07:9f:74:fd:fb:f5:4e:9f:c8:1d:
                    8a:8e:eb:ec:e2:b7:f3:36:ed:07:3e:1a:5d:b7:99:
                    50:ac:02:6a:d6:c8:b1:57:b7:13:35:b8:94:26:87:
                    49:a8:d1:32:3b:45:a6:ae:6d:1b:06:c6:65:47:7c:
                    29:c7:8d:e1:4f:f7:e0:c0:6f:89:6a:58:f3:a3:6f:
                    83:d5:be:c5:99:13:43:bb:36:8e:2b:01:f4:5f:e6:
                    d1:75:87:71:06:b1:c7:58:40:3d:1f:97:48:0f:75:
                    b7:11:00:d1:79:03:33:3a:e1:67:b9:bd:92:20:ae:
                    43:02:89:42:f0:82:5d:67:67:1f:f5:1e:20:dd:f8:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0A:B0:71:DB:A6:F3:D3:85:70:51:C0:2B:D6:83:C7:EF:DA:E8:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:da:06:25:e7:1b:6c:b8:77:7a:d8:28:e3:80:2e:bd:49:
         3a:3b:56:2d:fd:e5:e3:b5:c8:02:96:57:f8:a2:50:de:8c:dd:
         2c:7e:b5:eb:35:3f:e6:bd:d3:99:16:9d:d9:f5:77:ec:a6:1e:
         8c:8a:a4:5e:b7:b8:83:19:b0:c6:b8:d6:19:09:04:a6:15:17:
         e0:6a:d3:d6:d8:58:4b:d9:cb:99:71:e9:63:53:f1:c5:e2:34:
         2b:a1:b4:b0:52:5e:f1:1b:fc:93:f6:da:c8:40:e0:12:76:11:
         8b:3c:48:07:83:b8:7e:53:00:10:b7:43:9f:90:e8:89:41:aa:
         81:2b:7b:6b:5a:a7:d3:6c:b2:3c:b4:bf:b4:ce:46:43:0f:b0:
         f9:db:92:df:fb:5d:49:16:ed:f6:41:b8:64:85:e3:38:ba:5b:
         3f:b8:58:91:2c:a7:72:ab:56:72:5d:62:a8:27:cf:48:67:b7:
         3a:c2:b8:eb:38:64:f2:0d:57:ef:4a:8b:43:56:f7:83:7e:92:
         b7:34:97:b1:11:53:28:fc:14:91:80:4f:70:7c:ae:1c:94:83:
         4e:e8:41:35:b3:d3:0e:18:1d:e5:fa:10:3d:47:ad:f0:09:9c:
         d3:eb:77:6f:3f:ba:70:0a:4f:da:44:c5:b1:a4:57:f8:c6:84:
         34:68:f6:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENduMMrqTNW+lzWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
MWUyZjYwY2MtNDJkNS00ZjYwLWIzOGYtOTA2NTVkOTU1ZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3uqLZ01xi4df0ZxvkmSiSuj4W54zt7cYy7G
XEtEpndYTBfNpwnDo42XoHaONs/fT/xr2XbygO5GjTx4iBf2cVgmK8CQ3zqfgCWm
swKi0rg8ZHAKm2zSVM1k2/7uwSh6b0YT5LDxxdXwjRo9nd4Po3gnppbYsRiM6Q8I
OQefdP379U6fyB2Kjuvs4rfzNu0HPhpdt5lQrAJq1sixV7cTNbiUJodJqNEyO0Wm
rm0bBsZlR3wpx43hT/fgwG+Jaljzo2+D1b7FmRNDuzaOKwH0X+bRdYdxBrHHWEA9
H5dID3W3EQDReQMzOuFnub2SIK5DAolC8IJdZ2cf9R4g3fg23wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYKsHHbpvPThXBRwCvWg8fv2uj1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjUxZmUxNmItMzM5ZC0z
MzE4LWJhNTgtZWU0Y2FjZTFiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsP2gYl5xtsuHd62CjjgC69STo7Vi395eO1yAKWV/iiUN6M3Sx+tes1
P+a905kWndn1d+ymHoyKpF63uIMZsMa41hkJBKYVF+Bq09bYWEvZy5lx6WNT8cXi
NCuhtLBSXvEb/JP22shA4BJ2EYs8SAeDuH5TABC3Q5+Q6IlBqoEre2tap9Nssjy0
v7TORkMPsPnbkt/7XUkW7fZBuGSF4zi6Wz+4WJEsp3KrVnJdYqgnz0hntzrCuOs4
ZPINV+9Ki0NW94N+krc0l7ERUyj8FJGAT3B8rhyUg07oQTWz0w4YHeX6ED1HrfAJ
nNPrd28/unAKT9pExbGkV/jGhDRo9hY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:59 2026 by rpki-client