Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa
File:                     cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa (raw, json)
Hash identifier:          ULz+sgO+/7SZj6Y7yiNKAV/SEClKajbMQvVre/6O5y0=
Subject key identifier:   76:74:9B:76:03:07:70:F5:D4:3A:C1:E8:08:69:30:A3:C9:82:E9:20
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C9B124D2F850A8B3E6140
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.182.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:9b:12:4d:2f:85:0a:8b:3e:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c6a1bc33-07ea-4012-b7b8-110347ac15d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:75:f2:fb:6a:4a:7c:06:95:15:56:99:27:
                    b2:33:95:9d:b9:10:2e:08:16:72:4c:dd:45:ff:3e:
                    ee:52:c8:8b:d7:d1:ad:e8:43:12:c0:b6:cb:62:b5:
                    f5:85:47:32:c3:56:fd:93:74:ad:69:fc:6a:86:9b:
                    30:79:cf:bc:af:e5:d4:81:3b:b9:9c:9d:e4:b4:05:
                    f2:ab:6f:85:37:2c:0a:f4:d6:6d:41:d6:c8:7b:16:
                    1d:a6:5f:1c:6a:4f:e9:6f:04:44:dd:8c:17:13:e2:
                    3e:95:aa:91:25:82:69:34:b9:99:1f:49:4c:1f:c5:
                    c4:df:48:34:39:b4:03:64:a3:04:1f:74:52:e8:b2:
                    7d:13:24:fb:d3:88:06:ab:81:95:99:c1:75:c0:76:
                    37:7b:4b:61:78:67:23:20:94:1d:8d:6f:04:13:a0:
                    3a:a1:d7:6e:2a:2a:81:aa:e7:cc:2c:6e:9c:b2:da:
                    01:20:a8:f9:96:f1:f8:95:c8:ee:93:5c:90:a2:a0:
                    3d:47:bc:d8:d6:5b:96:29:e0:3b:6a:09:f3:c5:96:
                    68:eb:31:aa:e7:5c:74:7c:86:11:f7:ba:65:9d:0c:
                    e0:37:30:00:9a:d4:07:f2:2b:95:71:a3:1c:17:10:
                    f2:c4:05:f5:ad:cd:47:b2:dc:28:67:f6:c6:99:26:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:74:9B:76:03:07:70:F5:D4:3A:C1:E8:08:69:30:A3:C9:82:E9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:28:b0:9a:ae:55:a0:45:7c:8c:da:1a:6a:c1:eb:1b:3d:9b:
         b7:20:c9:f3:63:b8:86:67:99:4c:8e:3b:4e:4c:37:0c:7c:0f:
         d5:7e:6e:65:02:de:40:44:fe:c9:9c:38:7b:11:8f:72:a8:ce:
         5e:99:95:6d:99:83:ee:5a:dd:03:9b:a9:3a:50:68:3a:ec:e1:
         6d:90:6a:9d:3d:e1:cb:01:e4:90:61:e4:a5:1d:4f:46:fb:64:
         43:62:49:aa:dc:dd:8c:26:ac:74:ee:21:d9:5d:99:cf:43:19:
         1a:ed:e1:19:7f:f7:51:27:a7:31:3a:61:88:14:6e:0e:a6:1e:
         10:97:34:89:79:d5:e7:df:2c:fa:c5:49:31:88:d7:00:e2:43:
         6a:55:b3:03:67:28:cb:19:1c:45:28:20:b8:eb:32:57:c9:d1:
         d7:b0:51:4a:2e:75:cb:a6:f4:0c:97:7c:42:90:47:64:b4:0b:
         eb:1f:73:7b:9f:d0:39:a9:18:c1:4a:5c:79:5a:d8:28:c8:1b:
         c8:70:59:39:72:37:9f:37:f0:55:e4:a0:a6:b1:c2:32:91:a3:
         b6:b4:7b:eb:e8:34:0b:8f:2b:8e:3d:52:ef:a6:ab:df:00:66:
         6b:ae:f2:42:18:20:ea:85:b0:5d:22:de:11:04:59:80:90:59:
         ac:a2:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:18:04 2026 by rpki-client