Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47f9ad12-51fb-32a8-ba04-b5a8b65fd61e.roa
File:                     47f9ad12-51fb-32a8-ba04-b5a8b65fd61e.roa (raw, json)
Hash identifier:          iIWERpP70cS/Mn6Rbx42ou4ZTheUeB+2396YNxL8a3M=
Subject key identifier:   B5:9A:79:3B:49:83:9B:45:72:FD:CD:21:59:BA:E9:2E:D0:07:6B:23
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4986E996B828B3928000F500
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47f9ad12-51fb-32a8-ba04-b5a8b65fd61e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        199.182.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:e9:96:b8:28:b3:92:80:00:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c258bc8c-f728-443e-bd0a-df6672246a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:9f:4a:0a:5c:1f:b1:68:0a:1c:69:b8:a9:
                    8a:f4:ba:e2:04:3b:e0:f9:92:64:57:fd:7e:90:28:
                    4d:47:e9:2f:3b:11:a4:c2:d2:38:2a:f8:a1:f7:aa:
                    c4:c7:95:0b:ca:6c:b9:1f:72:46:b6:51:90:ca:3e:
                    25:55:e7:d8:66:fa:03:b7:da:9d:e1:4c:69:82:b0:
                    72:eb:58:50:73:71:98:dd:4c:ef:5b:3d:a9:1f:8a:
                    e5:c9:f1:a9:e1:e5:f8:86:80:0b:d9:bd:e0:6d:93:
                    98:05:41:d0:88:ea:cb:16:05:cc:27:39:d4:e4:c0:
                    42:1c:64:41:c2:5d:af:22:7f:d3:52:11:96:5e:3f:
                    69:1d:a5:74:4a:c7:47:60:17:95:01:3c:32:9d:39:
                    b7:3a:f7:23:6a:aa:c2:5c:16:eb:98:89:eb:c2:6b:
                    f6:bc:79:30:2b:30:c7:99:8a:00:33:ed:1e:52:25:
                    6e:35:bf:12:2b:e0:a2:bb:f3:0a:df:55:df:06:65:
                    14:07:37:3d:99:af:93:fd:c2:9e:8e:35:ba:1d:c4:
                    40:86:68:f0:bd:f3:27:c8:d9:6e:f3:a2:41:02:14:
                    dd:57:c3:37:1c:a1:c3:42:d2:b5:a1:dd:49:03:a8:
                    cf:16:d8:21:ee:fc:2f:25:4c:53:21:f3:bc:d1:4c:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9A:79:3B:49:83:9B:45:72:FD:CD:21:59:BA:E9:2E:D0:07:6B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47f9ad12-51fb-32a8-ba04-b5a8b65fd61e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:fc:fe:69:95:9c:8d:25:92:51:2f:55:95:e2:cd:5d:64:5b:
         04:79:91:ca:38:8f:3a:55:fb:3d:03:dd:c3:e8:d1:15:2a:31:
         31:fa:d7:fe:4d:eb:06:7b:bd:a0:70:2c:b4:89:e4:b7:3a:76:
         f2:ba:95:cd:8f:12:58:72:e8:2c:80:f2:86:00:69:c9:cd:4e:
         1c:96:b6:83:cc:04:eb:9f:cc:4a:2e:a9:4a:e9:ed:bd:77:47:
         9d:1e:9e:7a:08:09:e6:be:27:b7:6a:2a:2f:d4:16:9a:a5:c7:
         1c:97:63:27:13:69:77:a6:93:69:ad:70:b3:8a:45:f0:27:01:
         4b:fe:51:73:f3:bf:f4:63:4b:e3:f2:b9:6c:c9:53:73:39:3d:
         8b:ce:32:1a:26:49:fd:0c:e4:bf:cf:5c:fb:9a:3f:cc:46:32:
         f2:48:17:a6:75:3d:4d:6c:83:3b:60:3b:01:c6:a8:c4:66:ba:
         ae:ee:ea:81:01:ef:7a:b3:ae:c4:25:9b:d0:3b:96:03:4c:c4:
         01:b9:11:6a:bf:1a:41:9d:77:af:92:35:d1:34:04:3f:eb:0e:
         12:02:57:71:8f:5c:62:f6:0b:b4:ee:a6:3d:84:ce:1e:18:3e:
         cd:0d:02:56:da:8c:e5:d8:75:53:21:c0:5d:75:26:53:76:30:
         7b:26:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:31:21 2026 by rpki-client