Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
File:                     cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa (raw, json)
Hash identifier:          ircGcHt/wc7GcAqJ6iSJUUBi2r4uq8UoSp13OttBJeI=
Subject key identifier:   6C:7D:0E:DA:42:0F:C3:58:78:47:87:AC:7A:CA:10:FD:A6:A2:41:86
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C239CC6ACF5ED4BEDAA00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     207266
IP address blocks:        199.249.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:23:9c:c6:ac:f5:ed:4b:ed:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=159ff890-fb83-4a4b-bfba-77373c674a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:c1:4a:48:fe:84:ff:39:51:6d:33:12:f8:
                    c3:fb:df:2a:71:0f:3a:ea:39:84:f4:25:94:66:19:
                    9f:e0:f8:c6:82:e7:96:0f:69:9c:76:a4:7c:6c:4a:
                    fc:16:df:f7:9e:49:90:a0:15:45:bf:79:23:0c:3a:
                    29:3d:07:d3:45:d3:cc:c0:7c:b0:78:f0:26:28:a3:
                    e7:bd:fc:f0:c4:88:ae:74:66:8e:f5:c2:d9:46:b3:
                    96:76:02:c3:f3:c2:a3:04:be:70:30:43:44:a0:b4:
                    ef:d7:3a:69:ed:cd:ed:eb:b3:46:24:4c:9d:d8:fd:
                    8e:1d:d5:da:39:e1:e1:8d:56:49:6a:f8:96:24:94:
                    2b:2c:ed:11:77:17:bf:9c:6d:c5:7a:17:72:0f:1b:
                    d1:eb:2b:98:61:32:c4:bc:da:94:0f:64:b9:60:fc:
                    8b:ba:a4:b1:3c:22:81:3e:e5:57:59:68:c4:20:49:
                    97:63:c6:25:7e:ab:f5:07:32:1b:de:8d:a9:f4:04:
                    9b:3b:5b:ad:54:a2:18:c0:68:5c:16:2b:79:0a:0b:
                    60:ff:90:fb:bd:8b:2d:e5:61:5c:70:44:c6:26:de:
                    55:65:65:84:4e:9c:d6:c9:74:d3:d4:e6:66:9b:67:
                    e8:3b:b0:43:4f:b3:16:11:dd:1b:30:69:1e:7c:4f:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7D:0E:DA:42:0F:C3:58:78:47:87:AC:7A:CA:10:FD:A6:A2:41:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ab:75:69:9b:1a:11:60:11:4d:43:f3:a9:b7:99:3e:dc:f0:
         f1:74:ca:6f:09:dd:2a:a8:c4:d9:27:ba:17:2b:46:cf:eb:cc:
         38:65:62:3c:ed:18:7b:0a:35:2d:1f:3e:86:a3:46:4a:21:d9:
         54:7b:e8:56:94:bf:b4:17:47:49:b5:81:da:12:ee:ff:0b:64:
         cb:c1:e1:61:e3:27:c6:25:3f:65:dd:da:07:0f:02:a3:89:7f:
         5c:87:ab:31:40:39:85:67:3a:99:96:52:77:13:88:ad:37:2a:
         bf:f4:65:a0:c7:84:26:b7:53:a5:a1:09:07:c2:ce:57:07:0d:
         d6:94:51:7e:14:11:9d:b7:a4:00:0f:75:33:5d:74:65:ac:77:
         a4:94:a7:35:b1:ed:9a:cb:28:3b:8e:bd:c1:90:b6:aa:aa:0a:
         5d:ea:72:a9:08:02:8b:33:b9:48:dd:89:bf:1a:6e:39:2e:8b:
         76:d3:33:cc:5f:29:59:4e:e8:05:d2:7b:27:ae:c1:94:a9:e0:
         38:88:c2:8c:04:b7:75:e6:18:db:c5:52:49:7c:ee:58:0d:b0:
         62:5a:1d:4d:01:f3:a6:eb:b6:30:fd:24:5f:48:69:4e:0a:dd:
         ac:86:fd:cc:5e:f5:26:c7:3d:a7:ec:10:1b:63:aa:e0:eb:3e:
         3a:f8:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:42 2026 by rpki-client