Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fdfccced-bf3e-30e1-9072-f28a05196371.roa
File:                     fdfccced-bf3e-30e1-9072-f28a05196371.roa (raw, json)
Hash identifier:          mnNiKmT1cIDVEP5X9b9cdpHY2GI3WLYCHaPInZF3ygk=
Subject key identifier:   7C:90:19:34:B4:45:3D:49:5E:DA:7D:28:FE:3D:43:AF:73:C6:55:B2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146237DE612B4C7DF566BC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fdfccced-bf3e-30e1-9072-f28a05196371.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        199.249.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:23:7d:e6:12:b4:c7:df:56:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=4ff5947a-6731-4f81-af58-df245c55f3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:ea:52:cb:60:3f:c0:c5:84:c0:1f:44:41:
                    30:f9:05:c8:26:64:71:a0:3a:fe:49:4e:6b:13:54:
                    76:c3:be:71:47:3a:a8:3d:7c:4e:a9:0d:15:51:60:
                    a8:0e:55:1b:91:61:ac:49:a1:f5:18:65:b3:ec:50:
                    98:ed:ec:e4:bd:9b:36:ec:eb:5d:d5:4b:3a:4d:bd:
                    fd:0b:d7:e3:b6:48:ed:8f:ed:c8:3f:c6:75:e7:82:
                    97:fa:98:23:5c:04:f3:5b:ee:1d:93:e0:e6:05:3b:
                    a3:25:76:dc:40:b6:54:26:3a:ba:c9:8f:a8:bf:40:
                    c3:e1:08:05:3e:94:40:81:3d:4a:02:e8:6b:9d:07:
                    d4:0c:33:a4:2a:e8:24:77:df:e6:e2:0f:bc:ba:99:
                    61:27:96:3e:1f:6c:79:03:07:95:a9:0e:e0:96:a7:
                    5f:be:f9:c1:e3:35:14:5f:7a:d7:04:03:f9:71:a7:
                    79:0c:9f:da:17:f7:08:0c:85:6d:4e:1a:b7:46:5d:
                    62:e1:01:3c:2a:1d:d3:08:0e:4e:62:5b:bf:af:16:
                    71:1a:2d:df:fe:35:88:14:a5:f9:e2:f9:54:cb:55:
                    f2:d7:7f:7f:45:f4:44:23:6e:28:26:d9:12:d2:eb:
                    b0:70:d7:8c:fc:85:5e:25:07:4b:5e:3a:8e:a8:2a:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:90:19:34:B4:45:3D:49:5E:DA:7D:28:FE:3D:43:AF:73:C6:55:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fdfccced-bf3e-30e1-9072-f28a05196371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9d:25:db:78:77:50:38:12:98:30:ba:3f:f1:11:1e:f2:7a:
         02:5f:64:51:ae:38:15:07:ec:e7:82:2e:04:9d:7b:76:87:8b:
         84:65:63:a8:f5:cc:fe:7d:55:61:60:02:26:56:c0:1a:68:36:
         90:e9:d4:60:b8:e7:30:c5:33:c8:b5:20:ad:88:72:dc:45:94:
         bb:b9:a6:3d:0c:56:57:9c:81:6a:41:4a:a6:79:50:b5:0e:15:
         32:4e:11:31:03:e1:36:71:44:97:6f:74:74:8e:34:9f:72:66:
         1c:17:90:8e:fb:6a:d9:df:94:a3:85:b0:44:a3:0a:96:11:f7:
         77:3d:d7:a6:ab:ea:06:4a:9c:36:68:b9:ee:d3:85:2c:a8:2d:
         31:25:82:4c:09:5b:9a:a2:4a:42:c4:b5:c9:0f:48:f7:d8:2d:
         4e:f6:fb:33:e7:3f:a3:41:72:6f:fc:6b:0f:f5:ce:bc:47:de:
         1b:48:c8:a4:e0:45:6d:5c:e9:64:31:be:d6:4c:57:25:6d:39:
         fb:0a:52:99:a9:34:6f:de:9f:9d:e0:13:2b:c9:f7:94:8b:86:
         ee:a2:a3:8f:38:da:04:e7:dd:36:58:36:e6:16:9a:1a:d6:fc:
         fc:69:97:64:47:70:ef:72:51:28:73:7e:47:75:d7:1a:22:58:
         e3:8b:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:08:18 2025 by rpki-client