Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a147eb3a-7bfc-3804-bdbb-b4d9ef43fc1e.roa
File:                     a147eb3a-7bfc-3804-bdbb-b4d9ef43fc1e.roa (raw, json)
Hash identifier:          /7xHSHvkZI2RU9i1CVnpN1C441/Z6Ywx9/4+W4bV7dc=
Subject key identifier:   10:5D:2A:40:16:D5:B3:15:CC:A5:B8:73:A6:CB:E2:B0:DA:BB:C8:CA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814622026C68421C6829E740
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a147eb3a-7bfc-3804-bdbb-b4d9ef43fc1e.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        199.182.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:22:02:6c:68:42:1c:68:29:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=fed5672d-987f-45b4-8336-c496f2461bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:b1:84:48:78:75:30:ce:6c:58:8a:b9:a6:
                    71:85:bb:7f:81:51:c2:57:0d:bd:ba:63:d0:b6:c4:
                    e2:9d:e4:9b:af:fe:68:0d:85:53:24:c8:aa:73:14:
                    d8:22:ee:ad:5f:46:39:87:a7:18:03:40:b6:24:e0:
                    91:9c:4d:55:a1:7a:d6:ba:7b:b8:e9:5c:42:8d:5f:
                    18:37:e6:8f:e1:41:c6:ea:bc:83:43:6b:00:22:65:
                    ac:f9:e9:eb:4d:76:50:45:3f:0f:a2:36:f8:6f:73:
                    af:b6:b6:1d:73:08:58:e1:84:b1:db:4c:48:10:e2:
                    18:af:71:8a:03:a0:e4:17:96:bb:04:c5:7f:c4:ec:
                    e0:f8:77:9e:a2:d7:b5:8d:c1:c9:9f:79:ca:36:60:
                    72:f8:2a:07:77:e7:f5:f1:28:14:82:33:a8:11:69:
                    50:17:e5:96:f0:80:4a:51:82:c3:f5:45:3d:9f:07:
                    29:6b:f2:48:b6:22:e9:01:f7:75:41:a7:3a:a0:95:
                    02:15:54:8a:64:e0:75:86:a5:c0:0e:21:33:4e:b4:
                    a2:58:e1:6b:03:5e:ec:73:96:c8:30:84:5b:b4:c1:
                    7c:1e:75:e2:43:53:8a:af:2d:a1:b6:ea:22:58:41:
                    5f:e1:2a:b4:62:68:c3:86:88:03:e5:5a:f3:da:ba:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:2A:40:16:D5:B3:15:CC:A5:B8:73:A6:CB:E2:B0:DA:BB:C8:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a147eb3a-7bfc-3804-bdbb-b4d9ef43fc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:34:6c:e2:14:ea:5e:0e:13:2b:56:ce:3c:cf:b5:4b:8a:14:
         57:f3:d4:a8:e2:d6:75:4e:35:52:db:38:33:25:a7:2e:47:f3:
         04:53:1e:62:cb:d1:54:38:10:a4:ae:a1:eb:3f:05:cc:90:b9:
         cf:0f:f0:e7:cc:62:bc:17:db:12:d9:1c:1d:45:75:4f:91:fe:
         94:11:ab:14:89:5f:ea:68:c1:7e:e9:df:5f:11:31:23:d8:99:
         46:a5:0e:18:42:df:07:f8:b1:f1:c7:9a:ab:65:dd:44:6c:c2:
         04:fc:78:4a:1e:c3:3c:2c:8c:09:95:90:3c:bf:cf:71:c2:9a:
         f5:27:a1:91:91:07:1e:8a:b8:06:c0:1c:27:94:52:a5:b2:cf:
         b9:34:63:d5:d5:41:1f:63:54:ad:1c:7d:5c:9f:fd:c2:c9:ee:
         e7:a0:00:d5:2c:f4:4a:eb:a7:5c:18:d1:01:15:86:5f:7e:6c:
         eb:49:42:ac:44:83:18:c9:b2:8c:d3:7d:56:e7:be:12:18:64:
         79:4e:28:a4:20:3a:f4:e8:67:33:94:0f:83:d0:71:18:27:08:
         ed:7f:27:93:6e:c1:4d:57:d5:6b:ac:3b:4b:1e:85:bb:2c:92:
         9b:ce:0f:d1:12:68:25:a5:12:c6:44:82:8c:cf:fc:6e:6f:1c:
         95:2c:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:21:30 2025 by rpki-client