Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bbdab0af-f460-390e-875d-bbd5368788ee.roa
File:                     bbdab0af-f460-390e-875d-bbd5368788ee.roa (raw, json)
Hash identifier:          AIiqE+ZdkTmcVipfxuCEqPDsTvcPN8MuLmmLCqZ5ZV0=
Subject key identifier:   AB:0B:F9:BA:8C:41:AE:7B:2D:DF:86:ED:86:E9:DF:44:51:D4:3F:48
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C67116239EF5AB8B87E40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bbdab0af-f460-390e-875d-bbd5368788ee.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.182.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:67:11:62:39:ef:5a:b8:b8:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1b113132-e25f-4443-8b77-c46a1d7f4ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1b:79:9d:2e:35:d9:83:d4:08:73:75:4e:5d:
                    1a:3c:6e:3f:46:aa:ab:a0:e3:9a:6d:17:ee:83:cc:
                    bd:47:4e:a0:cd:11:c4:9f:4a:74:5f:96:2c:71:b9:
                    0a:54:a6:b7:e5:09:e1:d2:4a:91:aa:03:ea:82:a3:
                    1a:04:8f:d2:73:8d:ee:11:fc:36:f1:b4:f2:48:2e:
                    c5:22:53:03:f2:3d:a9:42:8a:93:36:f3:ae:cc:8c:
                    03:af:84:35:aa:92:e4:e3:cf:bb:3e:a3:eb:ea:14:
                    8b:a0:d5:13:1e:ac:0d:a7:88:af:92:1d:c1:62:ec:
                    fa:16:ac:fa:e2:b6:0d:fc:09:52:2c:81:da:ad:1a:
                    0b:91:8d:05:f3:61:b5:ff:bb:77:88:3c:0e:f7:35:
                    4a:ee:72:91:b8:5b:7d:3c:51:a6:c8:20:32:29:67:
                    f9:58:16:4c:1d:1d:96:73:fd:53:c3:af:c1:1a:99:
                    48:19:1b:cb:ec:93:9c:68:af:f2:8d:be:c4:03:66:
                    6c:77:47:30:21:14:6a:12:2c:70:bc:4f:d9:98:e7:
                    d4:f4:d5:b1:0b:73:da:f9:9c:b5:fd:6b:d9:45:d2:
                    f4:aa:fe:39:79:12:c0:1e:a7:96:e5:ee:56:46:db:
                    46:d1:84:af:df:5d:ae:f5:7c:6a:fb:e7:03:52:e6:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0B:F9:BA:8C:41:AE:7B:2D:DF:86:ED:86:E9:DF:44:51:D4:3F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bbdab0af-f460-390e-875d-bbd5368788ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:75:dd:ce:dc:95:c3:52:4f:87:e0:7f:d4:91:19:f1:c6:
         da:00:5f:a6:1c:f8:e9:18:60:60:20:8b:64:ef:90:23:78:2b:
         03:b0:d9:3d:d8:47:4d:38:6a:94:e8:90:c2:6c:b0:14:de:b3:
         55:c0:7e:ba:00:6c:e8:f0:5a:84:c5:9c:af:2f:97:be:e1:e1:
         d7:63:f0:03:fc:61:b3:c5:73:bb:ac:a3:7c:42:71:c0:6e:ef:
         34:ca:2b:a7:13:88:27:8e:78:54:02:c2:5a:64:27:50:8a:79:
         da:89:9c:53:9e:20:42:26:13:58:af:a0:a7:0a:76:c9:4b:b0:
         11:c5:ff:df:11:46:de:6d:6a:1a:9c:b0:3f:e9:3a:ce:b1:1a:
         2d:86:61:c2:37:02:e4:fa:9a:25:40:23:ca:74:15:18:c2:47:
         ca:87:bd:cb:f3:2e:37:48:4c:37:a4:fc:cb:fa:f6:56:d4:3f:
         ce:1a:67:81:18:60:e6:42:a1:b7:23:e0:af:6a:e4:e8:14:b6:
         b6:d7:d2:16:9c:2f:5f:01:b4:1e:5c:c6:2d:fc:59:7c:d7:a9:
         c7:79:19:34:53:44:71:94:ba:60:b9:e7:28:7a:4b:d4:4d:74:
         bf:d8:70:f3:d7:92:ee:e7:47:c6:2b:a4:cf:b5:90:5b:04:9b:
         0b:50:7e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:23 2026 by rpki-client