Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa
File:                     782350f7-8243-34d3-bc0e-f447c86e0f63.roa (raw, json)
Hash identifier:          nf0XdcHeIUCVcxdmdQwiPYXNa+xtEBOyyVwnjvm42Tc=
Subject key identifier:   51:43:3A:5A:04:49:DE:06:F8:15:85:C2:02:2E:60:DB:9D:F8:AB:C5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F498BCF9B2C35648163E41C80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     29839
IP address blocks:        192.149.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:cf:9b:2c:35:64:81:63:e4:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d89bf32f-1d05-499b-ac5a-4ed10ae1ff57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:48:37:1d:95:e1:2f:c7:e4:a3:e8:2d:fe:
                    ae:71:11:7a:c7:51:16:98:53:a8:ff:26:ae:c9:1d:
                    e6:c6:3a:43:a0:ab:b7:92:14:08:fc:04:e9:92:ae:
                    39:e5:e8:2f:8b:29:a3:d5:27:e0:62:e5:d5:fe:30:
                    20:c8:f1:99:66:c3:13:d1:50:7e:2b:31:0d:88:64:
                    0a:27:14:5a:39:6d:16:e3:0d:64:24:1d:ff:08:81:
                    e0:4f:8e:bd:67:1b:bb:68:78:35:0b:c9:3a:fe:a9:
                    ab:ca:69:9b:e0:3d:8e:6f:e6:07:84:2e:a9:ec:ff:
                    66:1b:52:2b:8d:06:a2:58:5a:38:ee:36:8e:80:a0:
                    ad:33:3c:0f:d6:d5:bf:2d:e9:40:d6:82:36:69:6f:
                    68:8d:d3:fe:bd:7f:f2:19:6a:28:4d:57:e2:f3:ad:
                    4d:32:6d:16:c9:e2:20:96:f8:d8:dd:28:ba:ac:8d:
                    27:e1:08:86:e3:d4:b2:18:0b:cf:e9:ed:be:59:8c:
                    ca:7f:f7:1f:f7:d4:4a:3f:99:18:dd:42:d0:b4:4f:
                    5a:d4:c2:31:0e:8c:6a:65:25:68:1d:5b:a6:f7:e4:
                    8d:47:ea:7f:26:3e:36:26:20:08:be:42:5c:17:ba:
                    e1:84:ce:dd:60:45:80:cc:86:6a:1b:41:c3:cb:38:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:3A:5A:04:49:DE:06:F8:15:85:C2:02:2E:60:DB:9D:F8:AB:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ca:3e:27:8e:7d:7a:51:2f:f7:01:a9:8c:29:9a:58:13:e1:
         96:9f:df:aa:cd:5b:e3:61:8e:d5:5d:66:3e:71:58:9a:64:47:
         d0:fe:d9:8f:b5:04:d2:ec:f2:ec:60:66:03:08:36:3a:76:1f:
         1b:86:d4:0a:b6:e6:8f:75:b9:3d:23:60:7d:52:70:cd:c1:a0:
         9b:a5:7d:f0:67:cc:7d:34:fc:9b:3b:0c:bc:02:7a:4f:6c:c9:
         89:4e:6c:2c:ce:3a:be:e0:14:18:18:57:1a:24:82:7e:51:92:
         ea:43:ea:8e:18:bd:92:bb:d1:aa:5f:9e:b4:0c:7e:67:72:0c:
         36:69:fb:7f:93:15:b0:44:24:8f:ee:a0:38:6b:d4:9e:21:57:
         30:56:a4:4c:62:e6:90:00:cb:d2:73:94:88:d1:7d:5c:7c:25:
         25:c3:1a:1e:6f:14:8b:a3:d6:6d:b2:e1:b5:f1:51:6b:ca:28:
         74:90:03:cb:07:6a:b1:b3:0a:36:eb:13:da:6d:c7:48:35:d9:
         54:eb:73:e6:2b:4a:93:b0:82:7e:96:66:9d:32:06:c9:c5:89:
         25:a1:2c:c4:86:89:49:0e:fc:69:d2:56:88:df:d0:eb:be:2b:
         d0:b4:76:40:c3:b5:d0:b5:37:6c:ab:fd:37:64:cb:78:e5:2b:
         b2:9e:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:57 2026 by rpki-client