Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa
File:                     f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa (raw, json)
Hash identifier:          3oVTywZ9BkF4+mwIVuMsFc43riNRYILVAsgYPW2W8Mw=
Subject key identifier:   C6:C0:81:C4:76:A5:F8:33:0A:01:5F:46:07:97:4E:E1:A6:EF:4D:49
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C951903366042D5E97FB8
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.182.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:95:19:03:36:60:42:d5:e9:7f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6a220655-5bfc-4cfa-9052-6785e81908a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:fd:4c:d3:5c:ee:18:34:6c:26:83:17:52:
                    bf:f5:81:57:e6:78:82:40:e9:aa:0b:3f:61:46:32:
                    66:0f:32:71:21:1d:6f:90:02:fa:96:35:64:ff:ea:
                    57:93:7f:8c:1b:b6:50:f4:83:85:e8:ed:f2:02:15:
                    b6:93:97:5f:38:bd:bd:8e:84:a4:f0:11:37:3d:fe:
                    9a:db:1d:e3:c4:27:c7:3d:ce:8a:b0:4c:34:9e:fc:
                    9a:33:b0:4a:0b:7b:d7:54:55:da:b5:fa:47:a1:44:
                    a9:62:8a:ee:53:4b:96:bc:ac:d5:8d:9a:a4:f5:f8:
                    ff:b4:d0:b9:e2:3e:97:ac:76:32:3d:b1:72:a1:3c:
                    63:b4:81:44:b6:f4:49:aa:11:3a:9c:55:c8:d2:54:
                    1d:ce:42:d7:a9:f0:6a:d0:bd:7c:1b:70:84:96:b8:
                    96:dc:f6:65:fd:15:6a:55:46:de:e0:91:a6:c7:08:
                    da:40:86:35:20:7b:c7:cc:35:ec:fc:67:1a:71:2d:
                    ab:95:c6:f5:c4:73:de:05:5c:d7:b4:10:6c:09:dc:
                    2b:7b:f0:0f:c4:53:bb:1a:fb:4e:ae:a4:ea:63:0e:
                    06:1f:2d:c7:60:54:bc:a2:c4:a3:7c:9a:c1:65:0d:
                    ef:49:31:5a:5a:6f:b3:13:3d:f0:29:1a:20:f0:9a:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:81:C4:76:A5:F8:33:0A:01:5F:46:07:97:4E:E1:A6:EF:4D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:20:51:c2:01:c3:d4:90:a2:ef:c2:06:d3:75:3f:ab:09:e2:
         ba:cd:c0:e7:a9:e6:d9:eb:7c:b4:ae:90:3e:51:4f:2a:96:ab:
         ca:39:08:17:b9:4a:30:97:15:0b:76:f7:4c:60:ec:e8:25:fd:
         53:6f:d0:0d:55:35:68:9d:c2:9a:82:02:03:e5:9d:44:db:8d:
         a7:4e:ea:44:8e:84:93:c3:41:56:a3:6f:f3:44:eb:1a:ce:3c:
         5d:55:62:d0:38:97:51:65:be:f6:93:74:e8:03:b0:d0:1d:d6:
         99:89:89:86:4e:39:65:6d:87:1c:1c:62:0f:d7:12:76:7a:dc:
         ff:00:1c:01:47:0c:5d:d5:8f:59:14:22:69:12:e2:05:30:38:
         9e:35:e9:aa:03:0f:ee:f9:e0:6a:cc:a7:71:54:92:af:9f:68:
         30:d9:19:f3:d5:35:36:67:28:52:c5:24:e2:e5:27:7e:c0:00:
         39:94:7c:e2:b2:20:e2:af:63:7a:75:05:0f:7d:24:9e:39:8d:
         56:b4:46:83:ed:11:71:4a:35:54:3f:3e:0c:d5:cd:b3:58:43:
         c1:51:5f:2b:fa:25:17:75:34:3d:0e:34:0b:77:6c:3e:29:45:
         4e:0b:bd:97:13:ce:d9:1d:73:5b:5f:d4:c9:4b:2e:76:4c:20:
         de:b6:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:52 2026 by rpki-client