Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa
File:                     897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa (raw, json)
Hash identifier:          uTC2d4KAGfT+nMKWuGv3XGRbvAP0uWwAMmwRTMA4iUg=
Subject key identifier:   4A:51:1F:60:3C:4E:03:C8:9F:C9:81:F8:DF:6E:03:8B:6E:1E:29:19
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4987B38E285D0AF4D7150700
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        199.254.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:b3:8e:28:5d:0a:f4:d7:15:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=42b542ab-8e95-41c7-8242-0f6434ba615e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ae:70:a3:3b:ac:9f:a1:00:28:0d:61:b9:25:
                    22:11:4e:4b:90:ca:9e:16:bd:93:fe:0a:98:57:35:
                    e7:bc:11:bf:62:3b:45:d2:7b:b8:55:06:55:e9:27:
                    c7:c9:b7:0a:ea:19:32:77:92:cc:12:8b:37:35:67:
                    e4:a5:66:60:53:27:5d:ed:36:47:28:37:5c:38:fb:
                    fd:c9:30:a3:49:48:a3:34:6f:8a:5e:b4:c1:0b:a6:
                    94:07:01:42:ae:e5:b8:c9:af:a9:51:9f:33:65:75:
                    26:4d:9b:93:ab:bd:57:82:fe:47:25:06:b3:9f:37:
                    c1:d0:61:0a:2a:c7:56:b7:9d:a3:51:a5:c2:62:c0:
                    ac:6d:24:c1:fc:0d:f6:d1:b4:5e:b6:27:5f:0e:bc:
                    1f:72:c0:89:35:6c:36:a1:97:04:ce:41:0d:80:e1:
                    e2:b0:a1:e4:8e:bd:b8:ba:bb:1a:a7:af:af:1d:4e:
                    ff:2a:b1:b2:44:4a:25:55:5b:03:09:24:f2:08:a3:
                    a8:60:20:5a:c9:59:68:08:40:34:60:03:0b:c3:32:
                    ca:19:70:d4:43:fa:86:04:09:65:ed:c1:0b:cd:12:
                    5e:dc:f9:fc:5c:3c:39:54:d6:cc:f9:2d:f9:4f:d5:
                    2e:63:5d:6d:17:cc:dc:81:90:9a:60:90:8a:86:32:
                    5e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:51:1F:60:3C:4E:03:C8:9F:C9:81:F8:DF:6E:03:8B:6E:1E:29:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e1:37:81:55:bf:8d:a2:4a:c5:9f:d2:10:4c:57:4c:21:11:
         c1:1e:d7:17:f4:a0:8d:e1:d5:e6:b1:4a:de:c8:74:59:e2:1e:
         d3:61:94:b0:dd:f9:e7:94:d0:ca:ba:b7:20:21:d8:9b:92:0e:
         53:2c:69:fd:fd:b3:91:33:fb:cf:29:07:f5:16:06:b1:8c:8e:
         66:e2:9f:44:0c:45:66:9c:be:f1:e5:2e:0b:33:53:0c:04:1e:
         5d:00:14:e6:83:84:10:33:20:1f:a2:af:57:06:79:6d:61:5b:
         47:1e:31:c4:51:7d:c6:9d:3e:d2:2a:fd:99:64:9c:f0:10:16:
         52:66:4d:20:c8:73:c8:b3:dd:c1:a4:3d:95:5c:18:b7:7f:57:
         df:88:b8:a7:6a:06:18:4b:03:a9:79:d9:0c:b2:43:37:55:11:
         32:7a:5c:f8:78:2d:62:b1:63:35:65:65:bc:d4:30:c9:42:69:
         36:db:88:ec:2a:3c:f6:68:09:bb:b9:4a:2d:1f:fd:ef:fd:22:
         9c:29:7e:6b:89:ed:ad:a3:87:48:b2:20:2d:31:89:0e:56:3f:
         fe:25:58:fb:cf:e3:e7:51:22:b5:d5:fd:3d:8e:f2:b3:f6:d0:
         fb:48:ea:3e:21:45:31:c3:9f:38:14:02:a4:0a:9b:dc:3c:81:
         b5:c4:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:55 2026 by rpki-client