Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5547724-6052-325f-bb9c-096edba08b8c.roa
File:                     f5547724-6052-325f-bb9c-096edba08b8c.roa (raw, json)
Hash identifier:          iIVkhKva+lGPAmwKXRelm5+mlIoczinR0rGIbBHKZYM=
Subject key identifier:   A7:E4:2B:36:7F:9E:8B:B9:94:2C:3E:7A:02:06:1F:7E:50:4E:9A:4C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C30A4DF1DE900D44B9F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5547724-6052-325f-bb9c-096edba08b8c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        199.182.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:30:a4:df:1d:e9:00:d4:4b:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ed1ada3f-3e89-43df-b336-4397e221d8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:1c:d9:98:54:86:49:99:2b:90:7b:2b:9a:
                    cb:00:96:4a:84:44:d7:a7:51:b5:72:17:cd:35:14:
                    ac:77:d1:9c:b7:f6:e1:f0:76:3e:67:96:58:81:16:
                    e9:ab:80:8e:2a:04:b3:8d:26:ac:45:0b:97:a0:66:
                    1c:47:c5:3d:a4:75:e3:e6:ad:03:8d:5f:94:6a:5e:
                    27:b4:07:8c:a6:9f:14:a3:f1:c1:75:bf:63:7b:89:
                    00:ee:65:b7:af:bc:77:b1:f3:4b:13:7a:87:c4:3a:
                    10:4c:9b:b0:da:03:46:02:57:80:40:db:1c:45:c6:
                    d4:fb:f9:87:64:ff:a1:a8:d0:db:24:da:ea:e0:ab:
                    25:fc:a3:4b:96:63:a2:a7:af:58:33:ac:0b:80:79:
                    30:bf:2c:9d:46:61:16:29:1a:54:59:ca:7e:10:c9:
                    b2:4f:6c:c0:b9:97:2d:f5:7c:c3:63:bc:0a:9f:aa:
                    98:17:9e:e5:86:e9:cc:b6:c1:1a:a6:dc:f5:77:0f:
                    79:82:12:8c:b0:09:65:85:21:b0:8e:79:6f:12:b9:
                    34:cd:01:c5:78:a2:8f:3f:97:b4:01:75:1b:a7:b2:
                    9c:5d:71:f5:9e:4a:69:6a:aa:f8:7c:3c:bb:3d:61:
                    5b:e4:e5:42:2c:a1:52:29:ab:48:1f:9d:96:fb:4d:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:2B:36:7F:9E:8B:B9:94:2C:3E:7A:02:06:1F:7E:50:4E:9A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5547724-6052-325f-bb9c-096edba08b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:14:f8:02:db:1c:bb:57:5a:88:18:84:2d:0c:84:d8:db:26:
         f6:7d:de:5e:3e:0e:d2:6e:07:1d:58:0f:43:67:8c:09:b7:d2:
         62:19:2a:1d:98:32:69:44:a9:c3:55:24:8d:02:29:2f:b7:9b:
         ae:97:b1:84:ec:61:bb:0b:f2:7a:cb:1a:8a:1b:38:99:2e:7a:
         b7:a2:ff:73:79:a4:e7:f8:05:bf:1a:99:5c:91:39:66:1a:26:
         a5:ce:99:ee:02:29:87:8d:78:40:7d:1b:e3:34:9b:f6:ed:97:
         d0:e5:5b:e0:53:ed:d1:ac:4f:2f:92:0f:56:22:92:7e:90:90:
         de:70:2b:96:3c:1c:7f:2d:72:40:0f:5a:b7:b5:ff:33:78:33:
         2f:21:07:03:97:2f:74:8d:49:48:93:27:2a:da:94:4d:d7:1a:
         4e:4e:cd:30:2a:51:02:2b:ab:b5:25:64:1a:fa:03:c8:ba:67:
         db:ba:e4:ad:05:b2:da:6d:44:1a:87:1c:12:73:6f:8c:b6:28:
         3b:ec:70:c4:d2:da:bd:87:7b:31:48:c6:f1:fd:4e:27:fc:f3:
         32:ea:f6:c0:e6:ce:57:82:70:14:60:dc:3f:19:37:ee:15:22:
         c8:94:97:b5:9e:12:5c:78:ca:56:39:26:a9:e4:97:65:96:0c:
         da:0d:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:15:34 2026 by rpki-client