Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa
File:                     479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa (raw, json)
Hash identifier:          aRT3Knbxrl5kHXPzLs/k7IjoqyZjvl6pexm9awRafPs=
Subject key identifier:   21:F5:8B:EA:8F:D0:1D:7D:2C:97:CD:E9:F5:87:65:94:AB:4E:82:50
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62022E7CCC4B14FF9E08D9C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     13714
IP address blocks:        192.149.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:2e:7c:cc:4b:14:ff:9e:08:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=1551f73f-c3c4-4a14-908c-c62dac356f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:24:cc:a7:23:a9:2f:1f:4a:21:15:09:90:54:
                    75:6f:b1:3e:e9:47:6d:1a:3b:c8:5d:91:e1:da:cd:
                    aa:4a:0e:2e:26:d2:34:16:89:2d:a3:3b:00:ce:a4:
                    60:5d:6e:20:e1:f0:3a:ca:6e:85:3c:bd:50:ab:8e:
                    15:76:ef:0a:c8:c1:c7:d2:66:df:ca:1f:b4:14:62:
                    74:92:a1:7c:54:44:9b:99:bb:00:0c:87:29:ee:a9:
                    f1:3b:ef:01:06:4e:99:eb:8e:26:50:5a:f2:8f:c9:
                    3c:ec:54:85:60:e0:90:2b:87:ce:b9:f6:0b:83:01:
                    d3:ed:78:b8:59:8d:11:54:35:9a:2b:e3:80:74:0a:
                    e6:fa:2b:54:b6:57:dd:b0:ad:bb:83:0b:03:ee:56:
                    a1:89:17:02:10:8f:61:8e:b8:77:c3:0e:2a:3b:aa:
                    1c:0c:6d:24:d2:7d:c3:46:0d:7e:e1:38:5d:57:a2:
                    2a:66:28:a6:16:fb:07:89:8a:99:b8:f2:e4:d6:93:
                    f2:17:c9:08:5e:b7:24:0c:96:3d:2c:30:43:ee:b8:
                    d1:22:cb:35:0b:cb:c6:b4:49:fe:2d:6f:e8:46:54:
                    70:87:9b:3f:3f:d4:09:b9:8f:be:79:b1:55:53:c9:
                    e2:cc:14:04:cd:35:f1:91:df:cb:27:00:47:b8:ef:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F5:8B:EA:8F:D0:1D:7D:2C:97:CD:E9:F5:87:65:94:AB:4E:82:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:05:96:ed:36:92:bf:c2:22:f2:95:ea:0a:09:12:cd:d8:
         d8:ef:a4:54:6b:d5:a6:a1:37:21:0e:51:66:35:b8:12:49:81:
         e7:a4:e9:9e:52:0e:b2:5f:32:2d:f9:54:64:72:38:62:8b:7e:
         18:4b:02:51:3d:15:ff:76:43:c5:26:44:f6:e1:4c:86:06:7f:
         e6:7f:a2:74:90:d0:ca:4c:41:e1:a8:07:ea:19:5e:5d:2e:d3:
         ec:87:c0:b1:3f:2f:2b:aa:a5:a6:7c:fc:45:53:18:b0:86:5a:
         58:c9:35:15:20:a6:1f:47:d5:ab:65:4e:44:8b:1a:ad:a7:f8:
         a1:39:00:aa:6b:a2:53:a1:dd:9a:a7:b6:b9:68:f3:5f:85:0a:
         04:5d:f7:ca:e6:5f:02:20:fc:cf:9c:27:cd:03:08:44:62:26:
         95:b4:e4:2d:4d:a4:14:a3:a5:69:0d:c5:2d:81:55:7c:19:7f:
         aa:f5:5c:f1:54:1c:fe:6b:cb:85:31:75:3f:56:24:86:dd:f4:
         c3:92:5c:c7:3d:8f:91:c7:b9:b5:0d:89:ce:c4:eb:99:35:7f:
         1c:ac:3d:92:f6:96:f9:ec:3b:3b:48:6d:69:2b:45:af:b3:aa:
         10:d4:2a:06:36:22:25:91:5d:92:76:6d:bd:84:d8:2d:f1:34:
         da:f0:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:15:58 2025 by rpki-client