Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/72cccb1a-4370-3359-9b96-6e09fbfd5d45.roa
File:                     72cccb1a-4370-3359-9b96-6e09fbfd5d45.roa (raw, json)
Hash identifier:          0zLHLN03i100bJVwm6qzEwNFcT90T7DgjYJ3ncvHWUQ=
Subject key identifier:   82:CC:15:80:19:35:EB:0A:AD:C5:03:00:F8:E1:B3:D0:10:6E:76:0A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814620A1865D1769B8DEF680
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/72cccb1a-4370-3359-9b96-6e09fbfd5d45.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        199.182.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:20:a1:86:5d:17:69:b8:de:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=fab3e3cd-f10b-4a36-8065-a7a21f0136da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:7f:ad:9f:69:19:49:fb:8a:69:d1:1b:09:
                    7e:4d:0c:e6:b5:13:83:4e:d7:9e:b8:9b:98:b8:f3:
                    d6:5b:51:af:55:05:d3:70:64:ce:e3:44:cd:f7:40:
                    bb:b3:12:3c:f3:ed:f2:40:ff:61:5c:5e:9d:94:7b:
                    3e:ec:1c:d1:05:97:01:3d:a9:2a:5b:94:26:34:f2:
                    47:ac:4f:01:e6:25:3d:32:72:7d:55:55:1b:9b:4c:
                    59:72:64:a3:6c:4a:29:99:a2:76:92:15:73:31:3f:
                    37:c1:cd:92:9b:80:1c:16:46:9e:cf:01:91:dd:d9:
                    08:9a:40:f9:da:b5:18:b6:99:da:01:de:17:01:e6:
                    2b:4b:a7:fa:4d:52:3a:c1:5e:0c:0a:6f:07:e2:da:
                    99:71:c5:1f:0b:2c:45:ba:15:27:2d:3f:ab:05:51:
                    d4:87:09:66:f2:57:1c:4b:ac:aa:95:04:87:b8:8a:
                    10:30:cc:62:60:aa:e9:19:38:30:f1:d5:70:49:2f:
                    0c:7c:ca:d2:31:06:00:a3:51:42:86:93:8b:5a:cc:
                    1d:9a:f1:38:d0:04:a8:77:97:7a:68:db:24:26:02:
                    af:3f:10:92:e7:2c:fe:33:20:19:ef:41:31:cc:8c:
                    15:2c:ae:43:d0:fe:57:33:11:0c:fa:d4:df:60:e7:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:15:80:19:35:EB:0A:AD:C5:03:00:F8:E1:B3:D0:10:6E:76:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/72cccb1a-4370-3359-9b96-6e09fbfd5d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:65:e8:31:50:3e:42:25:b7:80:29:22:f5:80:19:a0:7c:03:
         fe:a7:3b:c8:9e:09:d9:28:49:12:e2:6a:95:fd:1b:b0:af:66:
         b1:64:14:41:dd:1d:13:e3:16:32:5e:74:75:7d:1f:5f:86:0e:
         97:0d:d2:d3:3c:26:a9:7c:44:74:ca:ad:98:60:9e:02:be:da:
         bf:4e:82:21:23:37:a6:cd:a0:11:85:9a:43:27:15:5b:0a:bb:
         f0:94:aa:0d:c1:49:f6:b5:b9:db:22:e8:44:cc:04:56:a0:96:
         f4:f0:41:1b:6b:40:47:48:e2:0b:87:e7:6d:02:f4:f4:f2:f2:
         0a:c1:91:78:a8:ae:a2:13:fd:78:d9:34:48:06:02:e9:33:6e:
         c5:00:5b:1e:a1:ff:62:f9:b4:76:05:8b:b7:22:38:8a:a7:f8:
         d6:b3:80:24:d5:79:63:2a:e4:5b:8d:3a:9c:12:29:50:b2:b7:
         eb:5d:27:12:e9:8a:52:c3:87:c3:2c:e5:15:f1:ab:a1:16:da:
         45:a0:25:33:cb:74:d2:5d:5a:da:08:6b:cc:7e:7f:92:ea:59:
         e6:4d:3b:5f:dc:23:b0:3c:d1:70:ab:46:cf:66:d3:75:09:bb:
         1d:af:82:70:d5:d6:b1:16:1b:05:de:9b:5a:cf:24:47:ce:51:
         ef:9d:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:14 2025 by rpki-client