Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ba145d-b90e-3d5b-ab15-5422177aace2.roa
File:                     d3ba145d-b90e-3d5b-ab15-5422177aace2.roa (raw, json)
Hash identifier:          jMWPrMljzvUKCVUi8SPaeP6kttrxuBucTfFZ+KT27uY=
Subject key identifier:   A2:3B:69:69:74:54:A5:CA:65:8A:DB:A0:80:90:45:88:4F:D5:08:73
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A3A32B7A1DA0E393E7800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ba145d-b90e-3d5b-ab15-5422177aace2.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        199.182.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:3a:32:b7:a1:da:0e:39:3e:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=781b2ba7-fe7f-42bd-9cd8-8460dd6fd57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:2f:36:0e:16:a9:a2:27:3d:48:16:7e:73:
                    71:5c:cb:44:1a:06:1b:0c:67:28:6d:d1:48:ad:80:
                    f5:b3:12:37:70:1e:8d:25:66:82:d2:b6:94:6b:3f:
                    c6:43:34:82:5a:76:51:40:34:04:cf:bb:95:77:58:
                    01:b6:f1:47:f6:ca:f9:97:17:97:34:0b:5a:ee:64:
                    b1:99:3b:aa:69:7c:ed:e2:f1:ab:7d:2f:f3:4f:bb:
                    bd:94:69:43:41:09:ec:e8:5f:e6:c0:f4:8c:9e:44:
                    3e:73:42:52:31:15:57:0a:6f:1a:ce:fd:e4:e1:52:
                    27:bd:aa:da:ba:56:f3:84:5f:47:e2:c1:2a:a1:bf:
                    33:e1:2a:87:7b:8d:9b:24:25:21:ca:56:1d:3f:60:
                    0e:09:3d:62:ec:88:16:05:4f:ea:1b:de:e3:a5:c4:
                    25:71:41:b9:3c:c0:76:e7:6c:6b:9a:63:8a:42:bb:
                    95:90:e9:49:9b:9e:df:f6:dd:9b:6e:65:f5:5a:ef:
                    2b:b5:3c:08:39:d1:d7:8b:25:77:8a:9c:71:bf:5b:
                    42:43:e0:88:c1:b4:59:5c:f8:f9:ff:b0:df:87:8e:
                    20:a8:c3:17:12:b7:44:18:80:df:15:59:32:5f:6b:
                    9e:7f:f9:66:ec:06:84:7c:7a:47:22:4e:0c:71:8d:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3B:69:69:74:54:A5:CA:65:8A:DB:A0:80:90:45:88:4F:D5:08:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ba145d-b90e-3d5b-ab15-5422177aace2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:23:45:c9:47:62:27:c8:01:c1:32:6e:ab:19:78:01:9e:26:
         3b:7a:3e:8b:dd:db:58:41:5e:ce:e4:2a:d9:77:b9:df:27:22:
         99:4e:5a:f6:9d:a0:c4:fe:8a:2c:1f:5a:9e:27:87:18:dd:92:
         a9:6a:6c:05:ed:ef:59:bf:04:57:38:eb:93:2f:d4:7c:c7:6e:
         5a:93:a1:12:83:b7:14:a9:26:fa:f8:cc:c5:e7:78:28:da:4d:
         94:f9:23:3e:b3:e7:81:72:a6:93:93:9e:ff:70:58:6e:91:46:
         2b:14:78:c2:75:6c:19:8e:b0:d0:45:3b:e9:7f:a0:0f:6d:9f:
         3e:2c:ea:18:52:41:d7:01:9d:04:f0:36:51:7f:3b:ac:c3:04:
         37:43:c3:80:68:45:1c:c6:bc:f6:59:ba:04:a8:0e:07:4a:4e:
         23:6b:f2:a5:55:43:1f:e7:dc:b8:5f:fd:e9:fd:d0:00:ad:d4:
         d7:d9:57:c4:29:a6:5e:83:56:c8:f7:92:eb:7c:77:d3:cf:57:
         e3:b2:17:cc:e1:dd:e1:c8:c2:49:ec:ae:2e:b1:53:2e:d3:66:
         94:e9:c5:1e:85:c7:5f:8a:39:4a:28:f0:10:4f:e5:3b:5c:a4:
         27:8e:0a:df:9e:85:95:4d:4a:28:30:c3:2d:92:c1:25:82:c3:
         74:05:7e:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejoyt6HaDjk+eAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
NzgxYjJiYTctZmU3Zi00MmJkLTljZDgtODQ2MGRkNmZkNTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVEvNg4WqaInPUgWfnNxXMtEGgYbDGcobdFI
rYD1sxI3cB6NJWaC0raUaz/GQzSCWnZRQDQEz7uVd1gBtvFH9sr5lxeXNAta7mSx
mTuqaXzt4vGrfS/zT7u9lGlDQQns6F/mwPSMnkQ+c0JSMRVXCm8azv3k4VInvara
ulbzhF9H4sEqob8z4SqHe42bJCUhylYdP2AOCT1i7IgWBU/qG97jpcQlcUG5PMB2
52xrmmOKQruVkOlJm57f9t2bbmX1Wu8rtTwIOdHXiyV3ipxxv1tCQ+CIwbRZXPj5
/7Dfh44gqMMXErdEGIDfFVkyX2uef/lm7AaEfHpHIk4McY39QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKI7aWl0VKXKZYrboICQRYhP1QhzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNiYTE0NWQtYjkwZS0z
ZDViLWFiMTUtNTQyMjE3N2FhY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEjRclHYifIAcEybqsZeAGeJjt6Povd21hBXs7kKtl3ud8nIplOWvad
oMT+iiwfWp4nhxjdkqlqbAXt71m/BFc465Mv1HzHblqToRKDtxSpJvr4zMXneCja
TZT5Iz6z54FyppOTnv9wWG6RRisUeMJ1bBmOsNBFO+l/oA9tnz4s6hhSQdcBnQTw
NlF/O6zDBDdDw4BoRRzGvPZZugSoDgdKTiNr8qVVQx/n3Lhf/en90ACt1NfZV8Qp
pl6DVsj3kut8d9PPV+OyF8zh3eHIwknsri6xUy7TZpTpxR6Fx1+KOUoo8BBP5Ttc
pCeOCt+ehZVNSigwwy2SwSWCw3QFfgU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:38 2026 by rpki-client