Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5b9f62d-ee90-362f-a486-312630ce26d6.roa
File:                     f5b9f62d-ee90-362f-a486-312630ce26d6.roa (raw, json)
Hash identifier:          zZQJW1HKPbSztiq3Rd3KXqmnnsnSvbFyQfdnMWTyZ4A=
Subject key identifier:   91:2E:55:98:3B:CB:3D:C8:8A:6B:18:85:B6:01:85:B7:E4:10:4A:B4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A1FB73A7DD75F12505880
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5b9f62d-ee90-362f-a486-312630ce26d6.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        199.182.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:1f:b7:3a:7d:d7:5f:12:50:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=acaafac4-9b59-4aa2-92f6-1a4eb68e8c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:cc:36:9e:29:65:c4:17:2c:c3:51:3f:33:
                    5b:2c:25:e5:96:96:9f:66:4a:da:e1:14:29:ce:b6:
                    0e:f7:ca:f3:74:87:1b:28:44:38:3a:56:75:a2:4c:
                    99:8e:cf:2e:a7:41:7d:9b:d6:88:8c:81:3f:a4:53:
                    fc:37:3b:e4:14:3f:7d:aa:85:72:4f:40:3d:78:60:
                    5c:0b:78:b6:97:8c:5a:a1:88:2a:63:30:f2:67:64:
                    d7:39:45:d0:fa:b7:66:09:42:b1:a0:39:65:3f:2a:
                    46:6d:5e:1d:b5:40:02:14:b9:6c:65:6d:90:b7:63:
                    89:67:85:12:0c:46:9d:92:3f:28:66:f1:1f:8f:39:
                    f3:cc:57:42:48:a1:c1:5c:06:43:9b:78:fe:7f:57:
                    6d:cc:f2:b8:77:39:b2:e0:a5:48:c2:40:6c:e4:d5:
                    16:4a:ee:6d:4e:cb:77:65:52:09:a6:4d:b5:7b:52:
                    82:1f:ca:b0:4f:a6:f7:81:59:2e:6b:34:9d:8e:fa:
                    f2:9a:35:ff:41:43:c0:6f:65:1f:dd:85:9c:f8:15:
                    65:a6:31:6a:67:8f:3e:4d:ab:49:e7:56:bf:9b:18:
                    d9:ea:75:61:04:a5:dc:2e:03:bf:a2:90:e9:8e:f1:
                    c4:1d:66:bb:e2:cf:d6:f4:64:17:e6:cb:9f:c1:0d:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2E:55:98:3B:CB:3D:C8:8A:6B:18:85:B6:01:85:B7:E4:10:4A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5b9f62d-ee90-362f-a486-312630ce26d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d2:f9:e4:c5:d6:09:d0:33:04:d0:17:32:fa:4e:3f:ad:88:
         15:21:77:1a:d3:2a:34:c7:bb:73:cc:02:89:bd:4d:dc:45:5e:
         c0:54:b2:e8:7f:f2:89:b5:96:c4:d7:af:9e:ab:70:8a:16:e6:
         21:1f:f2:71:2c:81:31:50:04:ef:6c:97:47:22:38:9b:eb:f1:
         eb:1c:79:b1:eb:3f:8f:13:67:cb:16:e1:ae:91:65:79:c5:61:
         49:8d:a0:76:9b:0c:71:23:53:5a:0a:c0:59:ce:9c:02:32:49:
         15:e6:bb:c1:88:52:53:9a:0c:c6:5c:3c:94:0e:9c:1a:f3:51:
         7e:98:5a:82:72:19:93:f9:ba:5d:82:9a:f9:e5:f8:bb:9d:c0:
         6b:db:9b:0a:37:77:ff:d5:6d:d5:35:4a:85:a0:d2:29:bc:08:
         0b:ca:32:d8:87:35:88:e8:ac:a5:c5:54:dd:6a:70:fa:72:5d:
         18:0e:21:c4:8f:c8:a0:76:04:ed:27:55:1f:f4:a0:d4:b2:2e:
         8d:35:fc:21:4c:82:8a:bf:21:2d:9f:76:63:05:ec:70:26:f9:
         f1:35:da:06:4d:cf:45:e3:95:62:83:1c:e4:74:ce:26:51:1c:
         b4:55:f0:7b:05:b3:17:f2:73:8b:18:a6:7d:68:1f:68:af:06:
         62:d7:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:21 2026 by rpki-client