Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa
File:                     7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa (raw, json)
Hash identifier:          dVZmtFHh++LIaqcx87XXsPGRB7jykplTMyq+qvetwmA=
Subject key identifier:   17:A9:90:F1:75:D3:E3:4E:08:AE:AD:38:20:AE:45:50:EF:0A:96:03
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A0A3515495227B0266900
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        199.182.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:0a:35:15:49:52:27:b0:26:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=929f050d-5532-4807-adeb-d2abaf5f2e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:77:bf:f3:9f:ca:ed:2a:c9:52:2d:b2:7d:
                    f0:06:04:87:f1:5f:a1:ff:ce:c5:5c:32:44:7c:e3:
                    a5:f1:00:f8:15:96:83:d4:46:49:de:f3:9a:6e:ce:
                    31:e1:80:3d:82:7a:7a:13:09:6b:b0:4d:9a:42:70:
                    f3:1f:c9:82:e0:e1:d2:22:62:d1:80:cf:f2:8e:59:
                    57:b8:b7:a7:3d:c0:e2:8f:63:92:da:09:8e:89:b5:
                    19:79:c6:3c:4c:05:da:e7:2d:a0:e6:01:0c:f3:47:
                    7d:6e:f9:bd:85:aa:35:43:47:e3:e2:12:7f:f9:e6:
                    b7:13:38:22:0b:d3:65:28:18:fd:2c:68:3c:5c:15:
                    e1:f1:00:31:6f:ad:c1:ae:ed:11:89:5e:f4:04:99:
                    1c:88:23:8f:47:c3:92:eb:90:5c:24:f5:70:98:40:
                    24:92:5a:2e:eb:a7:81:17:33:a3:50:20:04:01:df:
                    0c:59:13:f0:fa:63:87:26:76:3a:03:ea:56:89:5c:
                    fd:d8:0f:3f:5e:18:49:ca:59:61:99:90:b5:e4:81:
                    c7:50:f4:84:d6:d0:7b:d5:e2:42:18:8e:eb:30:7e:
                    85:33:61:9b:be:88:82:cc:7b:a0:45:65:6c:85:fe:
                    68:99:52:d3:d2:64:30:41:61:8e:b6:f6:16:94:c1:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:90:F1:75:D3:E3:4E:08:AE:AD:38:20:AE:45:50:EF:0A:96:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:f1:d5:05:32:69:67:6f:c9:ba:c3:0f:34:d5:be:08:6a:
         22:8c:78:8b:d5:8f:ab:53:88:f4:89:a5:a3:84:8b:84:81:d1:
         05:35:41:b6:38:93:81:99:e4:c4:b3:0f:d3:ed:aa:f6:89:d7:
         0d:95:12:fb:84:15:2b:5a:f5:02:91:12:17:ff:69:0b:a8:51:
         ae:dd:71:78:54:a0:03:6c:77:37:3e:bb:93:21:ed:2f:03:ad:
         3a:6b:34:a2:bc:2c:10:16:08:ae:79:3a:59:ff:a2:2e:2f:f3:
         d3:83:da:e2:5e:24:16:99:63:a0:30:3a:91:f0:82:5f:1f:a0:
         6a:ab:d1:5d:f0:fe:2e:e8:05:67:b5:e6:af:19:61:cd:7b:0b:
         28:cd:e6:70:58:48:1c:e7:63:a6:e9:02:8e:21:3c:d7:bb:58:
         49:59:01:9f:19:37:da:25:08:d0:93:b4:03:86:25:48:9f:73:
         5b:60:ca:98:c1:4f:fb:cc:d6:c5:bc:83:91:69:c4:5b:5c:dd:
         c4:2d:0a:e7:17:0f:ed:d5:4c:c9:40:fa:d1:fb:97:21:b8:9c:
         f5:b2:dc:5b:51:ce:34:67:40:ac:ed:e2:98:e9:7b:d8:12:8a:
         24:3a:1f:b5:89:93:0f:3a:a8:b5:4a:c3:b6:7a:b6:f1:f2:f0:
         be:45:ce:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jego1FUlSJ7AmaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
OTI5ZjA1MGQtNTUzMi00ODA3LWFkZWItZDJhYmFmNWYyZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP13v/Ofyu0qyVItsn3wBgSH8V+h/87FXDJE
fOOl8QD4FZaD1EZJ3vOabs4x4YA9gnp6EwlrsE2aQnDzH8mC4OHSImLRgM/yjllX
uLenPcDij2OS2gmOibUZecY8TAXa5y2g5gEM80d9bvm9hao1Q0fj4hJ/+ea3Ezgi
C9NlKBj9LGg8XBXh8QAxb63Bru0RiV70BJkciCOPR8OS65BcJPVwmEAkklou66eB
FzOjUCAEAd8MWRPw+mOHJnY6A+pWiVz92A8/XhhJyllhmZC15IHHUPSE1tB71eJC
GI7rMH6FM2GbvoiCzHugRWVshf5omVLT0mQwQWGOtvYWlME2CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBepkPF10+NOCK6tOCCuRVDvCpYDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzkzNmQxNGUtZjZjMC0z
YWQ5LTg1MDctNTEyY2Y2ZmQ3NmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDs8dUFMmlnb8m6ww801b4IaiKMeIvVj6tTiPSJpaOEi4SB0QU1QbY4
k4GZ5MSzD9PtqvaJ1w2VEvuEFSta9QKREhf/aQuoUa7dcXhUoANsdzc+u5Mh7S8D
rTprNKK8LBAWCK55Oln/oi4v89OD2uJeJBaZY6AwOpHwgl8foGqr0V3w/i7oBWe1
5q8ZYc17CyjN5nBYSBznY6bpAo4hPNe7WElZAZ8ZN9olCNCTtAOGJUifc1tgypjB
T/vM1sW8g5FpxFtc3cQtCucXD+3VTMlA+tH7lyG4nPWy3FtRzjRnQKzt4pjpe9gS
iiQ6H7WJkw86qLVKw7Z6tvHy8L5Fzjw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:28 2026 by rpki-client