Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc0d11c-2acf-36af-abaa-4604661b2844.roa
File:                     fcc0d11c-2acf-36af-abaa-4604661b2844.roa (raw, json)
Hash identifier:          pDiI42vx+Lj0XyNbY18hRC1ZCdbiJzbJzjJazW+K0qQ=
Subject key identifier:   50:A7:E6:28:7D:2A:83:2E:EA:9C:51:E0:93:4E:01:64:37:80:98:4F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81462180593FEFC9F3A70A80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc0d11c-2acf-36af-abaa-4604661b2844.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        199.182.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:21:80:59:3f:ef:c9:f3:a7:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=67bc4e96-0320-47f6-a15e-31759fa7cec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:12:29:5f:6e:54:60:3d:7b:ac:67:47:0c:
                    fe:7b:e9:a5:43:64:34:2f:86:41:eb:4c:41:54:7b:
                    26:83:65:8e:7c:35:f7:04:0c:d6:4f:06:13:c2:96:
                    28:12:4c:98:eb:54:47:7b:2d:20:1e:36:f7:8d:90:
                    d8:97:2d:77:70:c0:63:d8:0e:77:16:83:72:95:7c:
                    9d:4b:02:94:1c:eb:24:3e:5a:38:9d:37:c4:c9:8e:
                    db:55:3c:b5:c3:ac:4a:64:c7:56:62:a6:00:cd:d8:
                    2c:73:cc:5f:de:64:34:8d:7e:6b:cf:f3:58:d2:65:
                    f4:a5:25:bc:dc:68:fa:1b:61:63:e6:93:0a:1c:56:
                    e9:26:37:62:fe:66:55:2c:28:60:98:d1:32:12:6f:
                    cc:32:39:87:89:0c:90:14:5f:f6:2a:c2:d2:7a:33:
                    2e:13:32:09:e8:64:d8:3c:30:45:8e:e2:b9:79:ae:
                    37:39:5a:e4:94:e4:47:08:6f:29:d9:7e:cb:e3:cb:
                    a3:4c:07:35:66:aa:c7:ce:33:a4:1e:84:7f:28:fa:
                    36:9c:39:f1:e5:c9:fb:0f:db:1b:59:8e:84:31:a0:
                    3b:db:08:1b:d8:a0:e8:99:bf:58:8b:3c:e3:23:a6:
                    b9:b5:50:ac:29:7a:f3:95:f0:9c:b8:30:5b:88:e3:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A7:E6:28:7D:2A:83:2E:EA:9C:51:E0:93:4E:01:64:37:80:98:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc0d11c-2acf-36af-abaa-4604661b2844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:dd:6c:2c:29:6c:aa:d9:20:d0:6b:c7:4d:4d:5a:e3:1b:57:
         e6:60:9b:1c:e4:35:e9:eb:de:c8:88:ad:5a:66:69:4a:fd:86:
         7f:ee:c1:df:c7:d6:1e:43:54:cd:1c:16:28:0e:b6:de:91:5a:
         40:24:da:64:55:84:ad:3e:64:1b:10:32:d8:fc:ab:46:c4:d2:
         b1:99:7f:a7:b4:4e:44:b7:28:ce:e5:7a:48:dd:c1:eb:4c:2f:
         cd:aa:9f:62:09:a5:6b:7d:f4:76:92:53:fa:7b:82:20:92:c0:
         4a:03:3f:57:ac:ff:e6:1e:4e:b7:c9:e8:2d:27:93:65:27:15:
         f6:c4:5f:96:b6:f7:dc:43:93:2c:21:27:56:ef:19:5f:2c:23:
         e0:6d:4c:1d:b6:86:ee:3f:7b:6c:75:8e:0b:0d:51:2c:5c:91:
         a8:f1:a3:59:a6:14:c4:db:6b:33:a0:7e:4b:58:3f:dc:38:de:
         0a:bf:3a:6a:0b:4f:17:00:c9:9c:c4:df:a6:82:89:b8:8a:e9:
         6a:d4:b7:62:93:c5:2b:e0:f7:15:ce:07:a2:8a:31:44:56:41:
         f5:23:9b:1f:93:aa:27:7e:80:41:b3:76:c6:31:39:bf:b1:da:
         68:bc:4a:60:77:b6:b7:fb:b9:d9:ea:f1:e1:01:18:32:e2:4d:
         74:f0:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:01 2025 by rpki-client