Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa
File:                     cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa (raw, json)
Hash identifier:          glozk5d20nNeZ9XlRHwKpke901wp6tJMzoCERVw5KeY=
Subject key identifier:   05:1D:AE:8A:97:43:A3:FB:7D:E5:F7:32:7F:63:E6:F4:29:01:85:E4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79BBE84D525177CDC69FB40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.249.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:be:84:d5:25:17:7c:dc:69:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f86c8691-aca4-44c4-8d78-82ce7fe76c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:09:7e:bd:50:1a:c2:d2:67:45:90:33:4a:8a:
                    3c:47:73:3a:5e:18:36:5b:a6:d0:a2:dc:b2:83:18:
                    26:bb:fe:60:6a:a2:2e:6d:b9:b4:b0:04:e4:0c:d8:
                    07:f8:4b:78:c1:2f:05:1c:34:28:90:55:e0:11:89:
                    b2:c5:7f:70:06:8c:c3:ef:06:d0:5b:11:76:36:27:
                    08:ba:48:a7:73:9f:c5:3d:a8:60:23:74:d9:31:c5:
                    64:9b:21:5a:e0:69:b4:0e:e3:38:01:2c:a7:70:25:
                    fe:be:ea:a2:31:38:97:3d:8c:92:ea:d0:b3:bb:b9:
                    5b:1f:ad:ee:f3:12:9d:f7:ec:48:2f:d5:5a:98:a0:
                    23:76:91:58:c6:f2:7e:86:94:6c:c6:27:a2:78:fc:
                    28:d6:27:d4:bb:93:35:9e:b7:8d:92:6e:dc:db:b5:
                    89:3f:6b:da:14:18:23:6b:df:26:69:fd:da:0d:f2:
                    2f:2b:d3:90:0d:cd:a4:07:0f:5b:5f:b9:4a:c3:af:
                    65:43:b5:57:a7:be:34:16:52:f6:7e:e2:3c:59:97:
                    dd:65:99:a0:bc:7a:0a:62:5c:a2:c2:de:10:06:ca:
                    72:ba:06:75:a4:2b:88:35:74:c5:3f:c0:92:33:57:
                    a5:74:93:62:04:28:4d:e3:26:7c:a7:c8:fe:73:99:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:AE:8A:97:43:A3:FB:7D:E5:F7:32:7F:63:E6:F4:29:01:85:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:d2:ee:21:91:67:0f:44:53:f2:6a:1c:d3:26:2e:9d:a4:
         e4:af:d6:14:d8:91:05:ce:9b:5d:a9:2c:bb:de:d4:ee:95:1c:
         aa:c1:e2:20:4d:7d:dc:f3:51:2a:df:bd:95:e7:91:43:d6:e7:
         5b:29:54:ea:5f:02:85:2d:a5:6a:b6:52:a5:dd:3e:e1:2b:20:
         20:1b:30:ad:c3:a8:63:c0:bc:ee:71:6d:a4:de:b5:60:0c:fa:
         28:de:75:4d:cd:23:f9:23:25:7b:74:bc:a4:04:e6:9f:1e:5c:
         98:0d:55:a6:60:4d:73:26:91:02:66:3a:a3:97:89:5d:3c:0b:
         ae:07:15:ce:92:dc:a0:fc:50:fc:4f:22:60:ce:28:3f:52:01:
         8d:7d:5c:6f:f7:90:bc:22:b0:1c:a4:77:c4:0f:7f:71:4b:e8:
         1f:7c:2d:c5:ab:33:5c:a7:1c:f5:15:89:1f:5c:28:c0:fc:5d:
         2d:f5:51:13:c4:fd:e6:9c:57:86:0a:1e:00:2a:9a:6c:94:3a:
         cf:e5:70:3b:24:a3:6d:50:e8:56:32:89:6a:b4:08:be:2e:49:
         11:37:22:3d:5e:3e:35:84:01:27:68:94:69:a7:13:5a:8a:05:
         ee:86:bf:4a:f4:89:7a:c2:b8:9a:ab:03:6c:c7:67:6d:9a:a5:
         b9:4f:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:27 2026 by rpki-client