Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0e6f37d-a3c7-3d9c-8282-c3304dfdd3a3.roa
File:                     d0e6f37d-a3c7-3d9c-8282-c3304dfdd3a3.roa (raw, json)
Hash identifier:          Jk7rqP+BeD352jtlmcx5GAhXO+nu3c2as9Ho4CxGjBg=
Subject key identifier:   07:06:14:30:93:24:71:24:34:8A:C7:6B:71:D8:BC:45:20:F7:98:5C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461FDA8FBE9AC50F0FC040
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0e6f37d-a3c7-3d9c-8282-c3304dfdd3a3.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        199.19.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:1f:da:8f:be:9a:c5:0f:0f:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=da60d9a4-a7fc-432b-8420-43625e20514d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cf:15:c1:76:4d:12:da:95:ed:4f:bf:52:29:
                    57:e0:ae:c2:3d:c7:e7:8e:7d:b5:27:20:cc:42:89:
                    a7:e4:37:0d:f2:25:7b:dd:eb:76:75:11:0b:5f:cb:
                    49:90:b5:1b:35:39:ae:4e:d9:85:01:a6:21:c3:61:
                    69:8d:49:4c:3b:23:32:78:0d:72:2a:95:26:d1:45:
                    8a:e0:6c:c5:05:c3:cc:60:dd:19:1b:9b:c4:f5:5b:
                    77:b4:49:c8:46:3e:2c:83:8e:5f:7e:40:ec:45:72:
                    75:d5:6b:d5:8d:07:ac:0c:47:67:da:30:c0:45:e3:
                    6e:ff:d1:28:b8:4c:ba:9a:6d:2d:84:5e:c6:4a:66:
                    34:ba:77:12:1a:91:59:9a:bb:ce:b4:e0:57:46:4f:
                    ef:d0:cb:49:ca:76:b9:b0:03:33:b2:65:7f:38:4a:
                    f0:97:2f:fc:3e:e9:32:75:ff:03:76:be:b8:87:3d:
                    57:36:30:f0:ac:e1:16:83:e8:f2:41:a1:54:47:c7:
                    d2:e9:b0:ea:47:52:92:99:b9:bd:b0:bb:fe:28:6c:
                    b8:76:d7:07:99:71:3f:a9:1d:98:26:d7:9c:78:26:
                    5b:e9:1d:ea:27:eb:b5:32:32:c2:ee:26:7d:7a:cd:
                    80:6d:46:c4:09:dc:39:1e:3f:49:09:16:5b:2d:3d:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:06:14:30:93:24:71:24:34:8A:C7:6B:71:D8:BC:45:20:F7:98:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0e6f37d-a3c7-3d9c-8282-c3304dfdd3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f6:c0:af:b6:29:16:a1:a4:e7:37:ea:95:62:3e:29:98:ea:
         95:92:21:74:d4:db:46:ea:9a:31:20:10:99:b6:b9:1b:8e:dc:
         87:61:77:ac:39:b2:fb:c3:2f:96:fc:38:96:db:b2:ac:5c:cb:
         3c:13:c8:d7:b4:35:c2:c2:02:2e:8a:72:7b:44:32:d8:42:09:
         47:d6:79:6a:ae:a8:d1:93:92:27:c4:57:08:54:3e:08:b5:58:
         a3:80:11:4d:7f:49:a2:c0:7f:b7:b6:4c:17:67:a0:3e:7c:59:
         b8:d4:68:50:b2:c4:3f:77:5b:e4:e6:b2:71:87:d1:c4:24:ea:
         7e:00:10:a5:18:65:ec:43:e2:ab:cc:f2:a1:de:7d:48:5f:19:
         a3:b7:c2:93:ff:6f:a1:13:52:b9:a3:47:05:0b:11:d6:75:fb:
         d3:95:93:c1:3a:3e:ce:39:59:e0:9b:67:b4:9a:35:d0:62:57:
         29:2d:58:5b:8a:81:c1:70:33:07:5c:e0:5a:b8:a8:ce:09:3e:
         9e:19:86:7d:4b:0b:b1:20:12:18:38:86:47:f2:20:d0:13:2a:
         29:68:f7:94:57:45:26:bb:f4:86:56:13:fc:90:39:63:10:a1:
         7b:aa:d8:da:f5:51:1e:86:6e:0f:81:fe:16:40:bc:23:fa:9b:
         23:c5:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:04:49 2025 by rpki-client