Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa
File:                     782350f7-8243-34d3-bc0e-f447c86e0f63.roa (raw, json)
Hash identifier:          NLO25JweZXr5bTECJZvweYzCFqd9XBUmmuMgnxlZOQk=
Subject key identifier:   5B:55:17:BF:B6:DB:DA:C7:FC:70:A9:79:A9:65:24:9F:CD:3F:4D:47
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A5A548D3C45B12540F880
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     29839
IP address blocks:        192.149.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:5a:54:8d:3c:45:b1:25:40:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=67cdfc1f-6b9b-4207-b8dc-e3afc00b6105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:df:fb:b2:1c:25:c8:e8:ac:39:a5:7c:7f:75:
                    70:80:93:d6:ac:1d:a6:9f:00:97:bc:67:62:ab:e6:
                    26:23:4c:e7:d6:a0:07:85:b0:d3:62:7e:06:9f:7c:
                    b7:f1:a1:ec:c7:cf:12:be:c3:73:14:a4:10:44:34:
                    d9:48:5d:30:e6:41:d2:51:f1:11:3f:c4:ce:d4:39:
                    a6:ef:e9:23:08:cb:1f:fb:90:29:66:08:19:7f:52:
                    3a:f7:3c:bd:58:e2:9b:67:44:26:03:5f:e3:f4:b2:
                    7a:67:93:0f:a3:0c:1a:93:0d:33:68:d9:57:32:23:
                    48:a0:9b:1f:b6:61:87:71:2b:d2:a2:18:fd:9d:fb:
                    9b:ce:ac:84:e7:31:4c:79:51:05:d9:8e:03:71:10:
                    80:4d:36:5c:80:df:d8:21:89:15:61:31:a8:68:84:
                    5e:17:f7:a3:e6:c0:04:cf:8b:b7:e9:bd:4d:a2:4d:
                    74:e5:18:1f:ea:23:d1:2c:5c:bb:52:09:0d:ec:d0:
                    f9:ef:05:ba:f8:40:03:04:8b:12:cd:2f:05:e6:91:
                    b9:0f:d3:13:d2:26:c0:fb:cd:00:c4:7d:8d:1b:b9:
                    66:6d:5c:04:7b:39:17:d7:39:f1:f1:44:34:ca:69:
                    ce:0a:f7:af:ef:58:69:fc:d5:ee:04:63:6e:8d:2f:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:55:17:BF:B6:DB:DA:C7:FC:70:A9:79:A9:65:24:9F:CD:3F:4D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:06:02:92:1e:3c:8e:b5:df:d1:6a:fe:2a:29:35:ab:2f:03:
         6e:26:71:18:d8:7c:c6:ac:83:e2:56:62:4a:44:a4:47:db:c3:
         cd:be:ad:be:a5:d4:c6:90:73:34:d5:53:ff:c8:74:d0:0e:a8:
         13:5b:05:58:83:1c:61:38:a1:50:6b:fd:04:f6:db:92:0a:b0:
         03:78:60:38:59:b1:6b:28:04:31:88:1a:b1:ad:14:6e:ac:df:
         e9:0e:7b:34:18:2a:fa:9d:3a:58:4f:f7:a5:55:80:0c:6d:ac:
         b3:b3:5f:ba:85:5b:2d:92:56:90:88:83:3f:c1:62:ec:2e:fa:
         3b:2a:00:ef:cd:4b:08:5d:e3:11:db:f3:21:d9:ce:79:c4:5e:
         3b:c6:03:31:97:22:1e:a4:79:d8:23:02:f6:bb:2f:cd:b7:23:
         5d:a1:20:04:08:bf:b0:fa:5b:58:2a:54:65:52:92:79:b7:c5:
         01:01:01:18:cb:7b:12:11:f2:3a:b1:d5:86:7a:f2:af:28:3b:
         14:79:42:2c:88:cb:18:a9:03:0e:60:44:39:1c:b0:a0:36:3c:
         b2:e3:4b:7d:0f:d8:26:a8:2a:4b:c3:4e:b2:dd:61:96:8a:15:
         12:2e:e2:dc:fa:f9:2a:83:bb:83:f0:c4:b2:f9:6e:39:65:ce:
         c8:94:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:34 2026 by rpki-client