Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa
File:                     de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa (raw, json)
Hash identifier:          1CmJTnfHlAJhZ/HxG1HLw5SVExdpost83CSiQTwxBsI=
Subject key identifier:   E3:2B:F4:99:57:1E:47:F4:7A:7B:D4:0A:67:40:95:85:4C:C2:87:3F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435D31D95B9EB4F1F20A700
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        199.249.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d3:1d:95:b9:eb:4f:1f:20:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=ca585b2a-b82a-4eaf-ba58-8b478ddfe977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:f0:63:30:d5:74:bd:a5:af:fd:87:de:20:
                    0d:82:e5:1a:68:dd:f8:5a:e3:65:51:e3:7b:a2:5d:
                    89:c9:16:7e:c0:51:e6:db:1c:60:25:6d:a2:71:b3:
                    6c:b4:0a:25:5b:38:21:c0:a4:21:c8:60:d8:f2:d6:
                    53:5e:50:78:a0:17:59:4f:3d:50:49:29:0d:16:40:
                    3a:d2:b0:30:3c:25:f6:46:f4:0d:1c:eb:ad:06:52:
                    14:d0:ca:eb:38:fb:5e:22:29:b9:7d:0c:0f:df:6e:
                    3d:d5:8c:64:97:d9:4a:20:31:0c:88:3b:e0:f1:69:
                    c2:db:bb:57:6a:c5:7a:4c:d6:06:b3:b2:f1:b2:ed:
                    8c:76:b5:6b:cc:2a:dd:2f:61:37:ae:c7:ed:ea:1b:
                    e2:b2:36:6a:f3:18:f8:05:79:06:81:6d:8e:36:ef:
                    e9:c9:dd:e8:ca:34:03:d0:b8:71:4f:2c:76:ed:8f:
                    ca:85:f2:b5:a4:43:0b:60:50:ed:a8:34:cc:ed:e9:
                    dc:42:cc:8e:96:db:80:3c:74:8c:ef:5e:4f:8e:94:
                    d0:d6:de:db:83:8b:f6:23:2a:1f:b6:3a:84:4d:21:
                    9b:85:e7:09:ef:be:5b:64:1b:cb:d4:5c:89:8d:ad:
                    6e:43:bf:ef:e9:fa:85:d6:f2:32:fc:ea:fc:78:57:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:F4:99:57:1E:47:F4:7A:7B:D4:0A:67:40:95:85:4C:C2:87:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:35:76:fd:57:52:d0:4d:08:0c:f0:41:57:0f:66:b2:b2:61:
         48:50:2d:c7:7c:42:12:99:8f:0f:20:55:a4:b2:1e:69:76:1e:
         c6:55:fa:93:5d:29:fb:0f:33:e3:24:87:bb:2f:8d:b7:72:bb:
         fb:8f:1d:9e:a3:06:43:93:a9:5f:84:45:66:f8:06:09:8a:f5:
         95:19:b0:df:8c:55:8e:c9:6a:96:f1:ff:25:f6:5f:c6:04:7a:
         b7:bf:ca:c6:58:ce:a7:c9:2a:74:49:fc:39:fc:0c:a9:a1:5e:
         96:95:73:71:31:03:28:e7:1a:38:96:92:d9:7b:db:a9:66:1c:
         cf:e4:6b:3b:0a:bb:40:3b:0c:fa:24:12:c0:32:14:c6:52:d7:
         53:6f:92:08:e8:e3:85:54:2c:32:aa:0d:dc:b3:af:bd:3e:21:
         79:9f:a5:47:95:97:02:d4:eb:c7:44:9b:2e:6f:3e:45:c5:72:
         b7:c0:f2:14:22:02:a8:2e:b2:1f:f8:b2:37:82:6d:0c:45:cb:
         33:59:37:9a:1c:f1:42:f0:d6:6e:8b:6a:7d:33:22:9d:ae:6c:
         ed:a8:ea:9b:05:ab:f6:82:1e:46:4b:26:fe:b1:9f:95:73:18:
         45:82:ac:e0:c0:f4:a0:83:dc:71:db:49:e7:63:22:1d:58:0f:
         3c:77:0a:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdMdlbnrTx8gpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
Y2E1ODViMmEtYjgyYS00ZWFmLWJhNTgtOGI0NzhkZGZlOTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xvwYzDVdL2lr/2H3iANguUaaN34WuNlUeN7
ol2JyRZ+wFHm2xxgJW2icbNstAolWzghwKQhyGDY8tZTXlB4oBdZTz1QSSkNFkA6
0rAwPCX2RvQNHOutBlIU0MrrOPteIim5fQwP32491Yxkl9lKIDEMiDvg8WnC27tX
asV6TNYGs7Lxsu2MdrVrzCrdL2E3rsft6hvisjZq8xj4BXkGgW2ONu/pyd3oyjQD
0LhxTyx27Y/KhfK1pEMLYFDtqDTM7encQsyOltuAPHSM715PjpTQ1t7bg4v2Iyof
tjqETSGbhecJ775bZBvL1FyJja1uQ7/v6fqF1vIy/Or8eFfaiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMr9JlXHkf0envUCmdAlYVMwoc/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGU3Yzg3MzEtOWJhOC0z
YTlhLWJjMmUtMWNmOWI5ZTAyMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ41dv1XUtBNCAzwQVcPZrKyYUhQLcd8QhKZjw8gVaSyHml2HsZV+pNd
KfsPM+Mkh7svjbdyu/uPHZ6jBkOTqV+ERWb4BgmK9ZUZsN+MVY7Japbx/yX2X8YE
ere/ysZYzqfJKnRJ/Dn8DKmhXpaVc3ExAyjnGjiWktl726lmHM/kazsKu0A7DPok
EsAyFMZS11Nvkgjo44VULDKqDdyzr70+IXmfpUeVlwLU68dEmy5vPkXFcrfA8hQi
Aqgush/4sjeCbQxFyzNZN5oc8ULw1m6Lan0zIp2ubO2o6psFq/aCHkZLJv6xn5Vz
GEWCrODA9KCD3HHbSedjIh1YDzx3CgU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:18 2026 by rpki-client