Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a44394b-6a40-31c4-a8be-3fed2d02740f.roa
File:                     9a44394b-6a40-31c4-a8be-3fed2d02740f.roa (raw, json)
Hash identifier:          ++tf41iQ0TOjt57Eb10dLLYogiocLbc6+zrZRPZ3OZY=
Subject key identifier:   C5:27:BE:0E:58:D3:99:F8:B1:77:84:74:B6:FB:6E:39:9E:05:A1:14
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04361376686588CF58396B00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a44394b-6a40-31c4-a8be-3fed2d02740f.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        199.182.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:13:76:68:65:88:cf:58:39:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=d79c7591-3dad-407b-b9d5-c1493ab83e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:d7:8a:53:13:20:5a:a6:6e:b4:78:61:08:
                    87:6d:89:f1:7d:b0:ed:35:e8:f9:c2:6d:54:05:9c:
                    75:7f:5c:0d:07:85:e8:c9:ee:6f:49:6e:d6:2e:b8:
                    e7:af:4c:c3:83:91:f3:b3:32:23:fb:db:c2:e5:d3:
                    5d:3e:6a:c0:8c:db:9f:38:fa:72:ea:bb:b6:09:ee:
                    e9:2b:6c:1e:35:6c:5a:33:bc:3a:2c:83:6c:ee:18:
                    c9:51:68:f4:d0:33:44:79:37:91:63:7e:a0:72:42:
                    89:6d:7d:22:6e:bc:02:c0:72:06:06:dc:ed:dd:ac:
                    40:c1:73:db:03:3e:b9:8d:e0:00:a6:4f:9a:af:aa:
                    17:53:18:53:4f:5e:10:f0:b9:e8:44:24:68:55:ba:
                    61:92:19:db:31:39:c6:0f:f3:1c:80:71:72:e2:de:
                    cd:ca:1a:48:12:54:06:9e:39:8e:8c:14:b2:d0:5b:
                    6f:0a:1a:0b:3a:de:06:e6:f7:42:61:6c:a8:9b:9b:
                    8a:ff:b0:09:1e:a4:d4:28:20:7a:2e:6e:85:72:22:
                    e3:14:b9:2e:5f:8c:0f:3b:07:ce:06:9b:a1:66:4f:
                    df:8d:dd:75:f9:28:94:f5:7f:f6:6b:1b:6e:e8:a1:
                    9f:11:d1:2d:3b:20:63:27:2d:1e:44:a2:95:c5:a4:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:BE:0E:58:D3:99:F8:B1:77:84:74:B6:FB:6E:39:9E:05:A1:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a44394b-6a40-31c4-a8be-3fed2d02740f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d0:c7:eb:c7:3e:67:88:9d:82:53:ef:b6:99:ca:6f:2c:08:
         00:6d:12:20:ca:d5:23:f7:2b:67:25:5e:47:3c:a9:be:1c:29:
         38:06:ad:25:e2:83:d2:57:c9:d1:05:08:a0:f9:c7:f9:6f:0f:
         3b:a1:64:bb:e1:67:70:f4:cc:a1:92:3e:fe:a7:37:43:29:c4:
         a1:49:3a:92:88:51:b3:3e:d5:37:09:a0:ed:9f:ea:cb:67:a5:
         4b:89:75:d0:8b:14:16:99:88:46:1c:b0:9d:bb:f1:67:6c:5e:
         bf:95:cb:5f:ad:37:ec:aa:ae:e7:95:5c:40:1e:9d:5f:ed:53:
         ae:88:7e:4d:99:f1:2f:b6:24:43:e6:ac:89:28:12:1d:2f:bd:
         5d:d1:f3:10:28:1c:d2:6d:50:4b:d0:d2:96:a9:1c:5d:a7:24:
         4b:9d:37:ff:e5:86:8e:c0:1d:8a:bb:7f:2d:39:74:ae:6c:a3:
         49:47:92:6d:16:b4:e5:8b:87:92:1f:f0:22:1e:6d:95:2d:04:
         76:a2:e2:1a:82:1d:80:3c:0a:da:d2:8f:00:69:84:73:35:69:
         2d:a7:9b:b7:3e:fb:e4:45:45:09:7c:9b:01:72:6b:18:f8:89:
         e8:c4:cd:7b:a5:31:a8:ad:69:ba:69:31:db:71:84:63:77:fa:
         d8:8a:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:11 2026 by rpki-client