Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa
File:                     2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa (raw, json)
Hash identifier:          o9REVjkA4nVJraYwsahoRpNxRwluZXXhHuv/me49MsQ=
Subject key identifier:   1E:5F:68:C7:38:FE:ED:2C:97:B1:11:06:99:FA:CB:7E:3F:A8:80:C5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A44A4EFF5EDB204E86980
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        199.115.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:44:a4:ef:f5:ed:b2:04:e8:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=51583263-a6e2-4acd-88e5-c4e3a5c9817b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:65:19:fe:6d:3c:9c:67:9c:3c:54:b5:38:
                    0f:f4:49:d3:69:60:fe:07:8a:9c:1c:73:f9:91:45:
                    d6:2b:1e:40:26:5b:f4:8c:4b:d7:45:a4:5b:f5:c5:
                    9c:0f:84:9a:6d:0e:02:59:80:35:ec:04:66:85:f0:
                    83:39:18:8d:c5:d0:ed:fd:f8:91:15:f2:b5:b2:84:
                    1b:be:fe:7b:c6:26:03:67:07:2f:46:06:5f:a5:84:
                    6b:96:34:f8:c1:4c:e9:fe:ca:24:49:82:20:e8:67:
                    f4:af:68:ec:17:fd:e0:5f:3e:85:2b:60:dd:80:eb:
                    5c:5c:ff:cf:24:ad:d2:c2:b4:23:cb:49:92:3c:af:
                    15:4e:2e:52:dc:81:77:cd:52:60:27:48:7b:86:ed:
                    89:25:29:93:16:62:c7:58:c3:71:e7:b5:38:d2:96:
                    c8:bf:8f:04:f7:94:22:e2:d3:4c:dc:e0:25:13:a1:
                    65:b0:aa:ba:f1:68:57:58:1b:aa:42:42:e4:01:f6:
                    a4:ee:d9:4e:97:75:9c:1f:d2:35:f6:10:a2:ce:e1:
                    d3:7e:d2:62:91:f5:2e:00:ad:19:99:38:6d:f7:5f:
                    c9:58:d6:6f:48:12:cd:3d:60:d1:3f:d1:a9:8a:2e:
                    c9:c8:3f:fd:39:b1:af:64:5e:7b:d9:c0:ed:d2:3c:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5F:68:C7:38:FE:ED:2C:97:B1:11:06:99:FA:CB:7E:3F:A8:80:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:25:a7:de:0c:8d:3e:b1:87:d5:6b:6d:f3:28:da:c9:ef:c0:
         c2:6d:61:42:df:73:e9:e6:b0:78:6e:7a:0e:78:77:04:b6:f8:
         b3:58:81:f6:04:07:f7:b7:85:95:20:16:22:e9:1c:a9:ff:14:
         e1:53:75:d3:2a:f1:01:30:2d:93:ae:2d:92:fb:58:8d:00:88:
         7f:2a:bb:62:97:56:b2:bc:3f:5f:f5:9d:c1:1d:6d:bd:c2:c6:
         85:13:c5:6e:f3:b4:fc:d2:59:db:21:72:65:5b:6f:44:e7:6d:
         e0:b3:fa:58:47:1f:71:49:bf:d0:a6:0e:80:81:f6:bf:51:e0:
         46:b6:2f:be:00:9e:60:0f:0b:df:07:4b:64:5d:5a:40:ed:4b:
         0b:2e:9d:cf:57:51:a2:c7:6d:f7:87:3b:f3:6a:c0:e4:53:66:
         dd:62:47:a8:20:e1:55:d7:6d:35:80:0a:82:79:6a:33:43:92:
         78:ae:93:c4:9d:87:51:4f:88:10:99:c9:3c:73:6f:28:2a:96:
         b1:da:11:43:51:fb:7d:1d:89:88:9d:d7:fc:57:c9:2a:0c:0a:
         e3:b6:e7:11:ae:c7:c2:b2:58:a5:74:88:12:ab:05:8f:f2:be:
         83:14:f6:ab:6b:7f:29:20:1b:99:7e:41:44:c7:70:57:36:89:
         3d:53:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:30 2026 by rpki-client