Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa
File:                     651fe16b-339d-3318-ba58-ee4cace1b054.roa (raw, json)
Hash identifier:          GVxDVxj81IDvSn6dtKeowMp8A1BgN698wa6Hh9B9gpI=
Subject key identifier:   A3:55:0C:AA:95:25:50:80:49:31:FF:D6:73:8B:8C:DE:23:5F:A4:C7
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79BD0DFCB9EFE9DFAE5E700
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.249.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:d0:df:cb:9e:fe:9d:fa:e5:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bbd1dcf3-3baf-4ba7-8929-d2fba56944a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3c:85:c8:b0:26:e3:f7:2e:e7:1d:04:68:32:
                    e3:ed:73:21:9c:54:6e:17:c2:39:1a:5d:0b:85:54:
                    5b:40:ee:83:2a:0d:3e:ab:8d:30:d1:a2:36:39:0d:
                    3d:ad:c4:d3:24:44:9e:85:28:ea:81:90:fa:6e:4c:
                    06:dd:0b:2e:43:42:75:93:f5:26:5a:8d:f4:be:a7:
                    82:3e:d9:4f:f8:d9:32:75:8e:f4:b5:5f:76:2f:27:
                    09:56:8b:40:02:80:9d:47:c4:65:3a:9e:de:c9:27:
                    45:d5:3c:17:d7:e5:53:d7:81:26:e8:5f:2a:98:45:
                    b0:b4:87:2f:ec:82:c7:e9:dd:a4:c4:02:5f:67:21:
                    74:bf:de:15:5d:47:19:28:dd:8d:f6:94:32:11:d1:
                    07:df:cd:c0:02:4f:eb:6d:ed:d0:41:8f:6b:1d:d0:
                    94:53:80:9d:30:29:4a:df:4b:3c:9d:41:a0:3a:72:
                    1d:7c:99:02:63:56:45:a2:9c:17:08:51:22:fa:72:
                    91:18:e1:8e:14:3d:68:93:77:a8:34:ed:4b:a3:62:
                    d4:7d:af:5d:53:95:2e:f0:bc:2f:c3:41:74:3e:bf:
                    cb:d2:04:4d:9d:f1:e0:86:6f:16:e5:6a:44:cf:9c:
                    b1:c6:82:0a:e3:22:c9:24:9b:87:54:5f:d8:77:b8:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:0C:AA:95:25:50:80:49:31:FF:D6:73:8B:8C:DE:23:5F:A4:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:ef:23:8b:cb:2f:a5:02:98:a1:ea:19:a7:f2:12:75:c1:
         2b:9c:41:99:ca:b9:92:02:3d:38:5f:48:b9:17:76:08:13:3c:
         58:31:c8:14:27:ab:8b:61:d6:83:7b:4d:13:98:05:a3:03:c0:
         c8:e7:ca:a3:e1:d0:59:02:7a:80:ba:3e:90:ce:0f:4b:5a:ea:
         ed:93:22:4e:d8:5e:a8:6d:4b:15:5d:15:0d:26:bb:66:3d:63:
         24:3f:4a:03:a4:51:51:21:41:13:9d:bd:b8:2b:56:9c:1b:2d:
         26:64:38:a4:36:b1:a8:7b:09:41:ea:44:f4:8e:f6:81:5a:e1:
         eb:8b:41:29:ba:f4:2b:a4:c7:b8:23:2b:fe:a4:51:0c:2f:f9:
         28:e4:09:c4:bf:34:28:69:ef:26:99:bf:46:44:d3:9b:0c:3a:
         01:e3:81:e1:02:55:f8:5a:3e:5e:ca:20:58:2a:02:ed:67:e0:
         2d:46:17:8b:a4:86:fb:03:db:08:77:55:34:6a:5e:c2:d7:d6:
         24:8e:f3:c7:d9:a1:e0:a8:1e:a5:78:06:17:76:b0:b2:e3:39:
         93:4f:12:aa:b1:e2:76:69:d7:a4:0a:57:c5:81:28:aa:7f:a2:
         26:32:e0:71:ed:b1:32:f4:c1:2c:da:7f:e7:3a:4f:7f:20:11:
         ac:20:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:28 2026 by rpki-client