Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d1087f-7ed1-3797-a0c9-fe5ea49c7558.roa
File:                     e3d1087f-7ed1-3797-a0c9-fe5ea49c7558.roa (raw, json)
Hash identifier:          BLnBonmNFtQu/1yKJ0YWM2R+yh1L0wsRtK8dyIKftv8=
Subject key identifier:   69:CD:11:01:33:82:E8:89:F3:18:90:4A:A5:15:DD:0F:3D:8F:C8:58
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C9BBFC619F9393D40A700
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d1087f-7ed1-3797-a0c9-fe5ea49c7558.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.254.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:9b:bf:c6:19:f9:39:3d:40:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea217cc6-f29d-4655-86bf-6e3dae55e0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:b9:7c:f5:17:6c:dc:f0:d3:22:4c:a4:61:
                    f8:e9:b1:3a:e7:d9:57:13:f5:c1:77:eb:02:11:c4:
                    13:d2:b1:d4:f6:af:42:c6:04:89:30:11:0e:1e:e4:
                    6f:a2:e3:69:e0:34:2c:b9:f0:e9:1b:cd:15:c7:b8:
                    12:84:69:54:74:ab:91:c4:ed:54:e8:87:09:19:ac:
                    21:6a:71:83:5a:7e:a4:9b:a2:2b:13:58:65:c0:ff:
                    3d:37:c1:eb:91:ec:83:56:4e:18:da:f4:50:19:fa:
                    f7:ea:40:49:a3:9c:06:8b:80:a8:25:ce:dc:92:c5:
                    49:b7:1e:df:dd:56:0c:80:77:f3:62:c7:72:50:d4:
                    e2:21:2d:e0:e7:f5:1b:2d:fd:ed:4d:ed:13:49:b9:
                    ad:ba:54:1c:18:a5:e5:cc:b8:e1:81:66:48:84:3a:
                    44:af:a5:55:6e:57:52:c8:05:21:48:b7:5b:21:94:
                    c5:41:e9:53:4a:d5:fa:a0:a7:e8:d3:8c:5c:ca:5a:
                    91:64:7c:7a:83:c7:0c:93:49:4f:80:bf:28:cb:ce:
                    81:a3:08:c5:d0:2f:eb:b1:8f:b6:04:0e:9c:07:a9:
                    9d:0d:6b:0d:ac:ae:b5:a9:5e:0f:d8:3a:7d:88:50:
                    a2:13:b7:fa:d9:df:35:8b:92:73:87:e2:df:c9:6a:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:11:01:33:82:E8:89:F3:18:90:4A:A5:15:DD:0F:3D:8F:C8:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d1087f-7ed1-3797-a0c9-fe5ea49c7558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:44:09:4f:d6:bc:41:5d:2f:ea:1a:8c:72:32:4e:9a:54:
         b7:f0:37:a0:2c:82:af:ee:f4:00:29:3f:2d:87:d9:85:4b:d7:
         6d:cd:22:c7:07:6c:b0:03:41:95:cd:a3:66:06:c0:0f:ac:a5:
         e4:bf:58:b9:8a:e8:26:e4:70:9d:df:88:65:61:f6:3c:86:81:
         04:e9:7c:32:55:c1:a5:76:53:dc:0b:7f:46:5a:90:69:1b:e0:
         5f:c6:3b:c3:1f:7e:ee:e2:be:e0:28:3d:2c:ba:a0:9b:a9:96:
         2f:e9:4d:2b:1e:76:12:bb:e0:42:a9:b5:8e:8e:8f:d4:82:a4:
         42:45:6c:d9:13:32:d3:c8:e4:33:77:ec:82:2e:47:d2:29:f2:
         0d:b2:2e:28:cd:b0:52:95:30:8e:25:3e:fe:74:35:17:16:41:
         6f:73:f3:cc:c4:e2:d2:b4:62:2e:48:46:41:e1:61:eb:dd:dc:
         b0:a1:b6:cc:0d:c7:95:96:9e:b8:68:b6:3c:08:29:69:57:d4:
         45:b6:6d:6d:92:d3:7c:aa:05:c2:cb:6b:9b:c4:b4:59:10:17:
         2d:8e:f0:80:8c:7c:ac:79:16:23:74:f2:37:50:b3:11:8b:32:
         85:8b:0b:ac:45:9e:af:04:ef:d1:c6:7d:c1:a0:0a:dd:01:33:
         8c:9e:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:25 2026 by rpki-client