Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1906766-5f73-30cb-86c2-006e76cc7689.roa
File:                     b1906766-5f73-30cb-86c2-006e76cc7689.roa (raw, json)
Hash identifier:          0UIc2ECOvuFzTTDDZoFvf6vcmmGYngxQ/sT72vBhSxE=
Subject key identifier:   2A:F9:41:41:39:9B:32:15:C7:EE:CE:35:07:FC:1B:5B:C7:09:6A:77
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A29627009CFE79BC8B1C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1906766-5f73-30cb-86c2-006e76cc7689.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        199.182.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:29:62:70:09:cf:e7:9b:c8:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=dcdd0a91-4457-430b-970a-ed32c907d4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:bd:1e:ee:95:20:51:42:b0:74:3b:e4:cf:
                    96:a7:a9:27:ec:77:0c:99:bb:b4:82:4c:10:13:35:
                    c6:2d:55:54:98:6a:21:be:b8:e6:30:60:fe:29:35:
                    84:d4:70:87:55:eb:ea:a0:68:d6:30:87:89:ff:e8:
                    34:39:93:82:c4:32:18:15:a8:a5:39:f5:01:ef:f4:
                    a1:7d:ee:89:a6:ed:ec:8a:2b:ba:e8:b6:e8:d7:f8:
                    0c:b5:3b:e6:2b:55:6b:20:4d:43:c2:7a:83:c6:9d:
                    d6:10:93:1c:71:6a:21:46:32:d6:52:89:6e:42:95:
                    d6:b2:d7:b8:b4:92:a9:b2:8d:3f:6c:a5:df:bd:dd:
                    00:45:8d:cc:87:43:c5:b9:8b:44:92:f8:ab:d3:ee:
                    0a:7e:d5:e0:05:38:b0:96:6b:b9:3f:10:48:03:51:
                    ff:04:e1:96:0f:f0:bb:2f:b6:28:29:9e:62:f6:ee:
                    95:ad:f8:7f:30:0d:59:5f:67:b6:b4:c3:bb:7a:02:
                    a9:01:c0:e1:80:4c:91:8f:f3:c5:5c:f5:f1:4e:2d:
                    8e:e0:a8:04:fa:60:b5:d5:e3:f2:e3:79:22:57:11:
                    c9:7f:52:ea:54:8a:85:55:84:21:53:02:81:c1:d7:
                    95:e5:b5:42:e2:a3:54:6f:7a:c8:22:bc:26:04:86:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:41:41:39:9B:32:15:C7:EE:CE:35:07:FC:1B:5B:C7:09:6A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1906766-5f73-30cb-86c2-006e76cc7689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c4:7f:95:ff:e8:45:5d:b2:bb:b6:94:68:31:33:9b:06:bd:
         01:60:0f:1f:cf:30:ad:87:bb:ac:a4:e2:94:de:ef:3a:25:95:
         67:a8:fa:37:a3:23:03:64:d2:ee:15:c5:34:e2:36:93:ac:6d:
         21:8b:96:19:c0:17:4f:c9:84:88:41:2a:ca:9f:ea:c1:4d:38:
         df:00:04:61:83:de:89:c6:86:a7:91:c6:6e:5b:bb:b7:c5:cd:
         11:0d:ce:0e:cc:c5:b9:f1:d2:d7:67:9a:1f:32:07:e8:2e:3e:
         2a:54:22:09:ab:2d:9f:aa:32:4e:71:31:c5:03:03:9c:c3:c4:
         fb:80:d8:83:60:fd:07:e1:6f:a1:d1:2d:15:7a:3f:a0:83:ab:
         1b:68:9a:84:a2:30:19:d3:fb:5d:d7:a8:cf:65:bf:d4:f8:03:
         9e:b6:b8:35:32:08:9a:4b:26:c4:3f:0b:1a:45:98:f5:8c:1f:
         1b:29:cc:ae:72:93:75:e7:40:a4:d2:84:e4:f4:45:0c:23:94:
         78:ab:cd:f7:0c:ab:60:dc:16:49:fe:d9:1e:7d:26:55:a8:96:
         a7:85:21:eb:9d:55:52:ac:d6:ab:8a:96:6f:0e:b1:7e:64:40:
         be:40:0b:32:6e:0a:d7:df:fe:07:77:4a:71:38:70:4c:ae:36:
         99:dd:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:26 2026 by rpki-client