Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa
File:                     7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa (raw, json)
Hash identifier:          U4T0OIZsHa40TIQqaGrpSKTysBCMSytds+Hcts3ycCA=
Subject key identifier:   3C:B1:5E:36:D5:3E:DD:99:42:61:87:98:CA:1A:E3:BB:B3:23:DD:DC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146205A7BF53DD0F091EA00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        199.182.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:20:5a:7b:f5:3d:d0:f0:91:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=79cf7b7f-4a0f-4e55-985b-0841f212ab15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:e9:8a:f5:d6:33:e2:36:30:d0:0c:42:9e:
                    ab:3c:cb:5a:45:40:bf:ab:aa:c5:05:7e:fe:46:bb:
                    bf:85:98:2b:c8:9f:b2:5f:a3:bc:23:50:48:31:9a:
                    78:c3:85:fd:22:c3:10:dc:cf:64:eb:ef:39:df:11:
                    e6:aa:cb:c7:c2:65:8c:57:15:f1:7b:0e:8d:d7:31:
                    92:3b:ef:32:d7:b6:e9:e2:5c:58:76:55:0d:d6:a3:
                    30:27:43:4a:5c:44:a4:4a:d3:ab:ae:63:ba:b8:7f:
                    73:24:8a:8f:4f:b4:55:24:f2:c0:47:c5:da:e6:07:
                    96:e9:a5:40:4a:ab:eb:4e:69:e9:db:87:8c:ef:35:
                    39:9b:5e:a7:4a:37:cd:ad:bf:c7:1f:56:6e:b4:29:
                    f2:30:54:f3:c1:b3:9f:d8:e8:53:1c:99:1c:2e:69:
                    05:8b:01:4a:52:14:07:12:6e:94:a7:16:fd:61:b9:
                    3b:dc:fb:e0:a4:9f:81:a8:98:02:3b:c4:ed:63:b3:
                    cf:f7:a9:88:60:c4:e6:f6:f5:df:0b:52:05:b3:7f:
                    ec:d2:6d:6d:3f:50:f0:7b:12:53:e7:93:f8:d4:6e:
                    8d:26:8c:d0:29:10:60:4b:51:a4:74:ab:b7:38:da:
                    9f:8b:ce:93:8e:77:21:18:a4:f9:b8:36:a7:b1:a4:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B1:5E:36:D5:3E:DD:99:42:61:87:98:CA:1A:E3:BB:B3:23:DD:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0e:a2:41:21:97:5d:7f:5d:6d:96:7c:80:3a:f9:63:36:89:
         01:5f:61:10:ee:d9:c6:23:6a:93:9b:40:1b:ff:e6:54:07:f7:
         ac:dc:d6:93:d3:4e:02:66:8b:a4:a7:72:c8:1d:4b:87:0d:b6:
         c8:84:15:34:ab:9c:52:6b:7d:ad:41:cb:d7:ba:db:a4:49:85:
         de:88:65:ca:33:10:e6:b3:fb:d2:b1:b0:54:47:b8:9f:08:55:
         a4:9f:12:21:5e:2f:5b:0d:a6:d1:a9:42:07:6c:47:c6:91:41:
         dd:92:af:1b:b3:b5:82:b6:fb:6d:38:77:63:9a:48:c4:74:98:
         bc:58:39:a3:66:07:8c:68:df:70:63:bd:b7:3f:e2:8e:c2:c3:
         09:9b:c9:e2:5d:d6:9f:df:43:f5:bf:1d:ca:1f:d8:08:5e:05:
         73:5b:c5:a5:be:cf:64:a9:43:89:ad:23:57:2e:0d:43:28:05:
         91:c4:91:23:b1:52:c5:9b:21:6c:2c:2b:c9:a9:76:24:ce:82:
         45:97:fd:8f:94:af:69:26:23:fa:73:a6:88:3f:15:68:77:6d:
         7e:20:36:84:98:9b:86:04:34:36:4c:7c:13:e9:46:b7:4d:2b:
         a0:23:62:2b:0a:07:d1:5d:90:63:68:4b:6c:a8:39:46:ef:9c:
         cc:84:7a:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiBae/U90PCR6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NzljZjdiN2YtNGEwZi00ZTU1LTk4NWItMDg0MWYyMTJhYjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhunpivXWM+I2MNAMQp6rPMtaRUC/q6rFBX7+
Rru/hZgryJ+yX6O8I1BIMZp4w4X9IsMQ3M9k6+853xHmqsvHwmWMVxXxew6N1zGS
O+8y17bp4lxYdlUN1qMwJ0NKXESkStOrrmO6uH9zJIqPT7RVJPLAR8Xa5geW6aVA
SqvrTmnp24eM7zU5m16nSjfNrb/HH1ZutCnyMFTzwbOf2OhTHJkcLmkFiwFKUhQH
Em6Upxb9Ybk73PvgpJ+BqJgCO8TtY7PP96mIYMTm9vXfC1IFs3/s0m1tP1DwexJT
55P41G6NJozQKRBgS1GkdKu3ONqfi86TjnchGKT5uDansaQSRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyxXjbVPt2ZQmGHmMoa47uzI93cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzkzNmQxNGUtZjZjMC0z
YWQ5LTg1MDctNTEyY2Y2ZmQ3NmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAOokEhl11/XW2WfIA6+WM2iQFfYRDu2cYjapObQBv/5lQH96zc1pPT
TgJmi6SncsgdS4cNtsiEFTSrnFJrfa1By9e626RJhd6IZcozEOaz+9KxsFRHuJ8I
VaSfEiFeL1sNptGpQgdsR8aRQd2SrxuztYK2+204d2OaSMR0mLxYOaNmB4xo33Bj
vbc/4o7CwwmbyeJd1p/fQ/W/Hcof2AheBXNbxaW+z2SpQ4mtI1cuDUMoBZHEkSOx
UsWbIWwsK8mpdiTOgkWX/Y+Ur2kmI/pzpog/FWh3bX4gNoSYm4YENDZMfBPpRrdN
K6AjYisKB9FdkGNoS2yoOUbvnMyEekM=
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:21:11 2025 by rpki-client