Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa
File:                     d3126372-297f-334d-8c96-7abcf2d19c7a.roa (raw, json)
Hash identifier:          EryzQ3ZIK+KJdXHUw/bmtNXACYB2gTH7CMtAgbmFAFY=
Subject key identifier:   B5:70:6A:39:C0:27:62:39:71:1B:6C:0E:CA:10:02:AC:28:3B:59:35
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435EB1F5F2F2D273EDFDA00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        199.254.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:eb:1f:5f:2f:2d:27:3e:df:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=ff09e0a9-7932-473c-bf4b-06257e68763e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:cb:eb:93:e3:2d:03:d8:12:f7:ec:9c:5f:
                    ed:7f:13:91:4a:91:07:4b:35:7e:45:83:70:ca:f4:
                    81:aa:52:1c:19:21:db:fd:51:2e:26:93:8d:de:2c:
                    5b:f1:cf:b6:86:bd:2b:62:50:54:00:cc:f3:2f:11:
                    1f:7f:50:89:68:79:e1:fc:bc:70:0d:fb:8d:c1:9d:
                    56:95:19:fb:aa:5f:e9:d4:f5:61:6c:c0:f7:82:1f:
                    5a:e6:4e:32:af:5d:f9:ee:1b:51:01:37:cc:02:12:
                    2f:37:d8:0a:bb:18:c9:e5:62:ef:ea:cf:ff:e8:cd:
                    64:1f:8c:93:53:b6:e1:fe:42:f5:31:7b:48:3c:ec:
                    70:0e:0d:85:e3:53:81:c8:c5:6c:19:9d:7f:a3:46:
                    71:5a:ba:29:91:08:47:1e:c4:4b:b5:69:52:14:22:
                    bb:41:be:70:1e:18:6f:a3:b6:ea:9e:22:df:8d:6b:
                    79:38:d1:7a:3d:f7:7c:80:71:4a:09:7c:d0:06:dd:
                    5a:8b:f1:53:0a:95:08:e0:8d:8f:53:fe:33:10:a7:
                    79:f4:4e:c6:6e:3f:75:41:83:89:a9:3a:6e:f2:8d:
                    18:f9:db:c2:3b:02:30:58:24:69:67:d1:72:89:cf:
                    45:4a:5b:d0:bf:0e:3a:69:d4:63:db:b2:8c:f1:c1:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:6A:39:C0:27:62:39:71:1B:6C:0E:CA:10:02:AC:28:3B:59:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:72:f8:3d:6b:6a:85:f6:ca:15:ed:5e:78:4c:59:44:7f:
         15:de:05:26:64:0e:ee:45:80:ed:12:ec:ff:0e:d4:01:0b:12:
         6d:42:35:4e:91:a3:40:c8:cd:5b:cb:a6:a7:67:68:d0:c0:19:
         c4:b9:84:61:10:ab:92:6b:ad:2e:01:08:4b:fb:39:62:b9:fd:
         59:b6:5e:71:d8:cc:ce:a4:25:59:fa:06:d9:8c:dc:e7:47:43:
         6d:69:e7:37:17:09:a3:34:3e:e2:02:0c:05:e9:b3:55:51:24:
         28:4e:e8:66:14:56:46:ec:ef:0e:ca:6b:80:fe:f8:c2:ad:8e:
         1e:19:76:16:31:a6:06:81:e8:b7:19:c7:12:10:78:e8:31:f7:
         b4:c1:16:3f:4f:a1:35:71:9f:88:ac:61:ee:f4:0c:b6:e6:85:
         06:77:9a:75:af:8e:3f:1b:d4:8a:75:d9:d5:21:e5:35:49:9b:
         67:ad:2d:66:6d:ae:5e:7e:9f:c1:36:61:ee:13:0c:3a:9b:7e:
         e9:53:78:b0:eb:fc:3c:98:f3:de:60:72:5c:44:49:99:68:5b:
         8d:e5:ba:46:27:0e:58:d8:0f:80:1d:4e:52:0d:7e:25:b4:b6:
         3b:bf:14:73:2a:73:56:55:14:e7:16:6e:44:18:01:26:40:97:
         e0:f5:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:29 2026 by rpki-client