Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8583e434-5788-388d-a0c9-f14a5c8c7ebe.roa
File:                     8583e434-5788-388d-a0c9-f14a5c8c7ebe.roa (raw, json)
Hash identifier:          h+iAEBsFcyN4OiN53089MkLp/gI+x2FwJEQtmmzZx6Y=
Subject key identifier:   C2:E7:EC:73:8F:14:35:C4:40:65:82:FF:3F:73:04:6E:0B:34:C1:6A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814625358F99D5FC32668180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8583e434-5788-388d-a0c9-f14a5c8c7ebe.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        199.254.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:25:35:8f:99:d5:fc:32:66:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=4c9d96d3-9f50-4a38-8d56-e5adc0d906ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:e5:c2:b9:6f:a3:cc:39:d8:8e:69:49:ac:
                    2b:23:67:88:a4:69:80:c1:54:4d:a6:79:aa:d6:69:
                    59:83:50:b7:ea:3e:9e:c8:cd:96:ab:0e:c8:be:2d:
                    b4:04:c0:69:d3:f0:4e:96:44:e5:3d:b1:ca:43:52:
                    45:46:c4:07:39:98:59:15:31:31:2a:c5:30:be:ec:
                    e4:2f:62:3d:db:a2:6c:03:fa:f5:79:b9:41:9b:c2:
                    c0:9f:61:03:93:02:3b:cc:54:d6:ee:75:da:12:d8:
                    b8:bb:eb:99:4a:1d:b4:12:d2:d3:fd:6d:44:df:0c:
                    7e:83:6a:4b:6b:8f:77:26:64:21:f0:b9:cc:46:23:
                    fe:55:c6:0e:c4:f0:08:c2:4d:07:b1:06:b6:1f:0a:
                    1e:3f:eb:f5:19:6a:7f:c6:d4:43:4c:ef:5c:4a:f0:
                    45:6b:10:58:7a:f2:76:56:cc:5a:69:f7:b0:98:b9:
                    01:25:72:a9:01:1f:5e:e6:1b:3d:88:ac:66:d7:3a:
                    be:3f:e8:8d:fb:1d:90:b6:42:8b:82:1e:d2:7e:a2:
                    ee:fd:c7:f4:58:5b:1c:fd:0d:3d:da:86:fe:c7:54:
                    b3:48:84:be:1f:ee:36:9f:cc:8d:67:f5:fc:31:39:
                    f4:68:05:25:1d:87:3d:30:30:ca:13:4c:2c:f0:c3:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:EC:73:8F:14:35:C4:40:65:82:FF:3F:73:04:6E:0B:34:C1:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8583e434-5788-388d-a0c9-f14a5c8c7ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:32:77:7d:2a:3c:76:33:1c:9e:8f:6e:f6:29:c4:5a:2d:33:
         48:0b:cc:57:32:53:15:7b:a0:ee:72:d7:f3:82:16:57:32:01:
         d1:2a:77:f9:0c:06:c2:ee:6b:2a:f0:72:ef:d8:78:d2:90:0c:
         9e:af:e2:f1:2f:c4:d9:f8:f3:95:8e:59:73:02:c0:1c:df:56:
         fc:d3:e7:03:a9:17:6e:85:5b:2b:71:17:8e:42:dd:11:80:bc:
         90:ec:55:15:12:40:8c:b0:57:36:d5:14:ec:88:89:80:89:79:
         a3:86:d8:eb:2b:d5:ed:98:39:66:ca:76:d1:a9:46:91:42:c8:
         e5:9f:e7:1d:6e:ac:77:85:62:d3:ce:88:1a:53:d3:45:80:2f:
         8b:c1:46:1a:ec:73:33:e7:81:75:c8:d4:05:b4:48:0d:65:b3:
         a3:ee:e2:8a:1b:a8:ef:0e:4a:33:9c:70:df:aa:44:d0:67:61:
         fa:84:78:26:d1:73:72:36:b0:de:f4:c9:52:69:03:b9:19:55:
         a7:01:0c:37:88:31:c5:97:ae:d4:a7:3c:92:e7:cc:09:16:a8:
         ed:bf:aa:2d:b0:89:7f:c8:31:b8:2e:4e:ee:80:eb:80:f9:79:
         c4:15:80:c2:7c:07:f6:58:2a:38:1c:9f:3d:7a:de:d0:e7:1c:
         03:08:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:11:45 2025 by rpki-client