Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa
File:                     8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa (raw, json)
Hash identifier:          /DUOufySvYThTl6tydNYPx4SvqCrx9VZxQhRyM4Mj4I=
Subject key identifier:   67:17:19:AA:4E:59:01:0B:26:4D:0B:E8:35:F1:E7:5C:12:D9:AF:CC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79CB1EA79E6EA0B48540300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.254.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:b1:ea:79:e6:ea:0b:48:54:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=416c7074-2220-4861-bece-0f53e98c69da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:07:aa:d8:8a:68:f0:45:fd:2c:83:46:95:
                    7d:75:4d:43:e6:cb:76:a3:b0:9a:54:6b:2f:20:52:
                    66:13:dd:3d:48:f7:56:6e:2a:18:ee:f3:d2:57:44:
                    a7:15:f2:8e:7c:d7:67:c4:93:bf:88:2a:9b:88:a5:
                    33:c7:eb:20:1b:7b:cf:4d:5e:4d:2a:73:79:1d:95:
                    91:e0:e5:0a:14:41:3c:60:3e:52:2b:83:90:ba:77:
                    7e:28:6b:05:64:ba:f4:61:93:39:50:9a:3c:88:7c:
                    a4:36:b3:09:b8:67:6e:38:25:ba:ec:82:54:62:74:
                    fd:0e:c5:68:6d:d2:3f:8d:0c:48:3e:b9:56:be:41:
                    92:bc:d3:56:a8:7e:80:5f:5c:5d:c3:a3:72:3d:11:
                    61:63:8f:a4:f9:7b:24:9b:c7:87:fd:66:58:72:0d:
                    99:c9:30:41:5f:4f:89:18:c7:a7:48:0d:93:73:c9:
                    95:34:98:7e:f1:1d:f1:71:93:68:4c:54:b9:25:44:
                    a5:45:8a:3b:e9:66:23:7d:c6:90:d2:e6:e2:c8:5f:
                    98:dd:65:91:52:81:5a:35:05:a0:f6:56:0e:25:0f:
                    b6:03:cc:e0:77:08:11:3d:c4:e5:4f:5c:12:e5:1d:
                    72:25:d5:aa:cb:fb:2d:25:03:09:b7:89:8d:a6:22:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:17:19:AA:4E:59:01:0B:26:4D:0B:E8:35:F1:E7:5C:12:D9:AF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:dd:88:5c:04:7e:01:63:13:f4:b0:ec:9a:27:78:68:82:77:
         6f:3b:07:37:a3:5f:85:47:f6:f8:f9:2c:4e:7b:d4:f2:55:94:
         9a:84:6f:1f:85:81:0b:2e:1d:15:17:32:c9:59:c0:af:47:91:
         7e:83:76:1e:ee:c3:69:72:6e:52:1d:b0:80:7d:d9:c2:bd:a5:
         90:e1:31:06:c5:3f:dd:28:8a:18:b1:14:e7:7a:f5:21:fb:b4:
         86:48:65:06:a4:a2:ee:14:e4:55:f1:43:fb:e2:95:fa:e7:a1:
         c6:67:43:ed:5b:33:87:58:d8:cc:d2:88:2e:92:9a:ca:a3:46:
         fa:bd:65:4a:1d:be:f6:b4:96:62:0e:51:26:09:0d:63:fb:b8:
         db:9d:b7:82:c4:c8:cc:90:11:9c:fe:8a:9b:79:9b:b2:d2:44:
         43:72:56:fe:84:1b:95:ea:5f:f2:f5:15:e1:88:5c:bf:59:7d:
         f8:b1:55:aa:86:e6:a2:17:e2:ea:4e:72:d6:df:de:21:ef:8b:
         b6:c9:99:e8:24:a3:23:e0:9c:62:e3:64:9d:23:65:af:a8:b3:
         2b:a1:4b:9c:9b:a7:c8:40:20:a4:9e:85:56:f7:dd:d9:7e:9e:
         0d:83:c0:0c:c5:7d:b2:ce:d6:fa:50:37:5e:d3:c9:49:3b:ad:
         03:77:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:54 2026 by rpki-client