Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c257b708-0182-381c-9fbc-37f195cfec42.roa
File:                     c257b708-0182-381c-9fbc-37f195cfec42.roa (raw, json)
Hash identifier:          AU7GOJMfbFP38NQVGdpgFN82MkcBdwRe8m0RN764d94=
Subject key identifier:   3F:29:B3:4F:3E:2F:03:E9:88:A9:B3:A7:0C:68:95:9C:81:99:3C:09
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D4D5A4028F83040B296D27880
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c257b708-0182-381c-9fbc-37f195cfec42.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     63403
IP address blocks:        199.19.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:40:28:f8:30:40:b2:96:d2:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=0f2441af-4c7b-4637-92dc-7c427de4abd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:b8:c0:f0:da:93:ed:8a:21:78:91:19:68:
                    c8:30:66:10:41:a3:46:bf:f9:a3:06:23:74:95:a3:
                    38:b1:ef:2d:10:6e:91:85:a0:f1:d4:0e:51:4e:37:
                    a1:6b:c8:dd:52:b1:f0:19:12:cf:03:d6:48:ed:20:
                    67:18:00:83:b7:f1:2e:79:29:a1:c5:03:d7:84:0d:
                    58:63:90:21:af:6e:55:9e:c2:25:6e:1a:66:7a:1a:
                    2c:d5:cc:e1:1d:b6:fe:99:e9:a4:3f:6a:75:ba:a1:
                    2e:bf:d8:69:2a:b3:a8:c3:8b:04:4d:b6:a0:11:90:
                    b3:4d:88:7c:11:21:09:34:56:85:af:ba:7f:54:5d:
                    1a:30:e9:5f:27:f7:7d:2e:ae:8d:bb:59:27:7d:c0:
                    8f:cf:7e:62:5f:78:f6:7c:d2:b3:4f:f7:6b:26:88:
                    76:39:3d:03:1f:63:f5:48:9b:ce:01:8a:1c:09:70:
                    dd:34:63:8f:86:83:d5:69:42:75:fc:86:b7:a9:19:
                    35:8a:59:c8:3f:31:87:51:5f:4d:cf:2a:80:9d:9c:
                    5f:f4:90:2e:05:ef:bb:cc:c8:30:0b:fb:08:95:0f:
                    d9:a0:a0:1a:6c:27:33:13:97:56:6b:44:7b:fb:0f:
                    4c:6a:5b:d8:00:00:49:cc:4f:31:56:30:c8:32:05:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:29:B3:4F:3E:2F:03:E9:88:A9:B3:A7:0C:68:95:9C:81:99:3C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c257b708-0182-381c-9fbc-37f195cfec42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:69:1d:bb:88:28:bd:fe:41:41:01:92:7e:71:41:8e:0c:b0:
         31:c0:97:3e:e2:66:2a:43:38:bf:1b:66:3d:4e:80:54:06:d3:
         98:f2:9b:3b:64:b4:3a:fc:b6:d3:3f:ba:ac:9f:90:a0:1b:34:
         0b:83:ae:bf:01:0d:0e:58:cc:90:d5:fb:a2:7c:fe:91:1c:37:
         84:83:7d:8d:e8:7e:71:63:e1:de:2a:ea:b1:fc:35:00:6a:06:
         08:fe:67:46:6e:19:0e:e0:3d:5c:02:a2:56:16:ef:06:0f:80:
         c4:fb:4d:2d:8a:1e:63:cd:14:d0:2c:e0:53:10:55:dc:63:6b:
         71:44:2a:35:74:33:a7:ed:5a:39:28:54:0b:6d:32:8a:0a:50:
         ab:c0:cf:49:42:da:ff:73:11:70:e8:cb:79:6f:bd:6b:f4:f4:
         27:3d:61:2d:d8:9b:64:4e:db:cc:08:cd:e7:54:80:d0:23:d0:
         7c:b0:d0:a3:32:dd:df:0a:6b:ae:03:51:de:98:d3:16:35:4b:
         44:c1:b7:aa:55:08:ec:25:26:4c:8a:17:9f:fa:6f:ba:33:12:
         38:5b:78:81:92:c0:da:0c:98:b5:17:f9:75:ac:87:61:cc:b3:
         4c:01:08:10:de:22:1f:a6:98:e2:c0:b4:2c:87:8e:7c:c1:c5:
         e8:93:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:29 2026 by rpki-client