Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa
File:                     e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa (raw, json)
Hash identifier:          kVf7VscNLWNAzX9BWWcWuX9EtYtmR7oSfQXT0MjG01M=
Subject key identifier:   D7:B4:06:AF:F4:A8:EF:25:BF:73:9E:FB:D4:BA:A1:7C:F1:49:7F:DA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C1260978F3CA66A529080
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     207266
IP address blocks:        199.249.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:12:60:97:8f:3c:a6:6a:52:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7970646c-25ac-495f-b5d0-2b8b236a3e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:6f:2b:69:c9:00:6a:55:49:e3:3a:f6:e2:
                    7b:17:94:70:e0:e2:1c:24:cb:bb:09:2d:28:3a:30:
                    b3:ce:84:b5:13:6e:fb:9a:58:e4:c6:e0:be:c3:54:
                    40:e5:99:87:5a:ec:c1:61:3e:f0:1e:cd:f1:68:1a:
                    d0:48:2f:29:4e:40:1b:37:ab:a3:02:f5:2c:55:d4:
                    26:f4:45:eb:33:c5:9d:8e:0f:23:05:85:59:6e:47:
                    5f:2c:7e:e2:01:0a:4d:b4:f1:f2:66:0b:39:98:3c:
                    0e:ef:88:2d:41:6d:35:30:47:62:fb:9f:51:3b:71:
                    cd:b8:28:d6:4e:84:9b:5f:52:ff:fe:13:05:c7:a3:
                    bb:64:eb:0d:46:d1:1a:26:ce:60:01:38:40:b2:7b:
                    ad:b8:85:f0:cb:f3:f3:6a:8e:ae:bb:33:60:3d:8b:
                    db:38:6a:5e:12:25:3b:24:30:c3:b2:46:a3:ae:4d:
                    44:8b:63:88:70:9a:d8:42:65:40:82:df:ac:6b:13:
                    ed:e9:a3:a2:c9:84:47:f9:5c:05:d3:fe:64:1a:34:
                    0b:ed:e4:3a:4d:5a:a4:c2:67:9b:e3:42:b8:cf:97:
                    e3:d9:ab:80:1e:57:45:3b:79:96:4d:2f:53:b0:73:
                    81:8c:49:f5:96:28:2a:93:5c:f9:90:80:9e:db:51:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B4:06:AF:F4:A8:EF:25:BF:73:9E:FB:D4:BA:A1:7C:F1:49:7F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:81:e0:e1:62:c6:b9:61:8d:6c:47:40:7e:56:41:f5:e9:8f:
         0d:ca:84:2c:f4:dd:ca:c5:b6:e3:57:d0:bb:34:69:04:2a:19:
         20:8d:09:31:52:28:62:01:50:90:65:07:6f:0a:69:2f:cc:b4:
         39:2e:cf:c5:47:c1:62:29:87:21:5d:f7:3d:38:01:b7:94:de:
         3c:53:88:e1:ca:f6:45:5e:85:5d:9b:61:d7:ab:73:97:bb:ff:
         b8:2c:9d:d4:42:48:75:b2:8a:a9:f8:4b:19:b6:16:52:c8:ae:
         25:69:aa:76:f0:bf:da:39:7b:21:c2:88:26:3c:99:35:64:4b:
         1d:c7:43:aa:5e:cc:d5:55:78:55:4c:db:ce:5d:fc:f3:18:c7:
         62:80:99:85:ec:3d:c6:21:06:46:29:27:6d:93:7e:0b:0a:eb:
         a4:9e:42:06:9d:32:c3:1a:82:15:84:19:8d:af:a2:02:1b:25:
         46:5c:2d:87:87:66:e2:f3:b9:0a:33:b9:ab:51:44:91:1c:a7:
         26:19:e1:d6:82:a7:ba:e3:a2:4e:20:b9:7c:4e:0c:ee:c9:13:
         b5:47:3a:a2:70:12:1b:65:c2:d8:27:34:71:55:10:4c:fc:04:
         af:66:99:fb:a3:70:2c:6e:da:e1:d4:18:23:1b:93:e1:0f:f3:
         a0:bc:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:34 2026 by rpki-client