Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa
File:                     e71a788a-468e-3e8a-9c79-12c81f2fa063.roa (raw, json)
Hash identifier:          ho/oRtB9eHaCo+nEmVgfgm5eSHMoa2lpo2fc7IXVZxA=
Subject key identifier:   EA:67:05:16:85:C7:B9:0F:91:AF:65:EB:54:DC:22:CF:4F:1D:E6:50
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D2379F715EF5F7ADAC398CA80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        199.115.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:79:f7:15:ef:5f:7a:da:c3:98:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=b287fe20-d373-4d98-afbc-fc6338226b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:21:45:0c:d4:c2:c3:86:b9:fc:0d:26:47:c1:
                    ad:ce:19:de:49:62:3b:27:1e:0d:28:1d:6e:5b:19:
                    3b:6d:cc:b1:18:a4:4e:49:13:14:49:2d:13:f4:2f:
                    00:38:c8:a0:a5:71:33:83:af:83:85:aa:80:03:fd:
                    ba:f9:a8:21:34:32:07:b8:0c:6d:1b:b4:58:54:96:
                    07:60:55:ac:9c:8a:d7:b9:ac:1d:db:bd:f0:66:a4:
                    ae:02:25:46:96:5f:4e:2c:23:e2:6e:97:6d:b0:28:
                    c8:2d:f6:b6:88:31:fd:24:d3:13:88:47:69:06:5c:
                    e6:28:0a:8e:fc:c4:80:8a:4e:fe:a5:27:fb:6c:2b:
                    49:70:d3:cd:64:95:7e:5a:a0:95:9e:f9:ef:68:9b:
                    cc:f3:ae:78:99:25:1b:86:93:22:4d:15:04:9e:f0:
                    27:5b:0c:bc:98:71:94:38:13:a3:ba:4e:3b:d4:cf:
                    43:9c:73:b0:e1:9a:f5:09:a0:ce:f2:78:af:04:a2:
                    c4:c3:e2:0a:0b:1f:d7:3a:ed:d5:d2:25:78:6b:d1:
                    bf:02:26:11:a5:17:47:1d:47:e9:c7:26:40:c6:23:
                    5c:2c:18:aa:03:40:16:73:67:2c:41:a3:34:62:aa:
                    66:15:c7:f6:19:47:f7:82:fb:2e:66:a2:41:58:9a:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:67:05:16:85:C7:B9:0F:91:AF:65:EB:54:DC:22:CF:4F:1D:E6:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c1:62:07:35:8c:f5:b0:d3:26:5f:57:34:9a:e7:dd:10:3e:
         e7:ed:5d:5a:ba:e6:c5:2e:df:8e:19:53:fd:46:71:e7:e5:0c:
         f9:f3:fc:83:e3:ce:37:5d:7c:61:2e:5d:b3:4b:81:ba:7e:c9:
         dd:2a:24:91:a5:38:45:e1:a0:f4:4b:5d:92:a7:05:db:e9:32:
         c9:3d:a6:59:be:e2:7f:c3:e0:b0:87:d9:39:c5:2a:48:7e:11:
         0e:a0:b4:0e:ff:da:5d:30:a3:63:99:ba:b8:50:bc:73:a2:ab:
         b4:a3:77:d5:ed:4a:f0:9a:d9:14:3b:62:e5:4b:42:06:0a:ff:
         b6:66:26:bb:8b:85:20:cf:90:32:43:79:44:fd:1c:9b:b6:50:
         56:09:03:99:d9:f6:1f:00:c4:78:96:76:89:4d:3c:7e:ce:7a:
         30:2f:33:28:70:c9:1f:76:0b:35:ab:da:70:c8:07:f5:d0:10:
         53:ed:24:7a:27:3f:2e:ca:70:35:68:f2:40:cb:8a:e0:46:1e:
         f7:eb:58:69:2f:8a:1f:31:89:20:b2:cc:22:fc:9a:8b:ac:6e:
         04:9f:cf:ae:ef:f7:32:61:9c:3d:2d:19:77:4c:c7:c1:13:14:
         86:72:c8:f4:db:9b:8b:84:5f:47:55:e0:f2:d8:ca:ac:93:63:
         79:f0:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:17:27 2026 by rpki-client