Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d766f13-bfab-38cf-a384-99ce1fa7b924.roa
File:                     0d766f13-bfab-38cf-a384-99ce1fa7b924.roa (raw, json)
Hash identifier:          t+TDyjM41Xlnl/PKMnns4PTsH592zPbdaaCDAiYtN3s=
Subject key identifier:   EA:7A:B2:CA:B7:89:33:08:EF:04:44:5F:CF:FE:5B:43:39:94:19:27
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B636748EAECB359E798060800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d766f13-bfab-38cf-a384-99ce1fa7b924.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        199.249.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:48:ea:ec:b3:59:e7:98:06:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=9804ab37-83a0-490c-9c11-39ce0e5d6f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:c0:5e:6d:00:4b:f8:96:53:e8:c5:a8:27:
                    ca:46:75:e8:a6:e5:e6:18:13:77:d3:99:a0:32:a9:
                    36:18:43:0e:c2:38:10:c8:10:14:be:48:f5:79:47:
                    24:e0:e0:7d:7c:da:78:af:5d:2e:ae:f2:65:bd:7f:
                    85:5d:27:47:40:e6:30:83:82:3f:9c:b2:fe:fc:f4:
                    9a:4f:65:50:95:68:88:41:72:88:09:34:c0:06:e0:
                    b7:80:3f:da:90:4f:6e:30:ca:f1:ca:bc:29:57:5b:
                    66:43:18:89:e6:c0:38:be:54:fb:e1:55:d4:5a:58:
                    ab:e8:d0:bf:2f:d7:73:84:bd:e7:ee:3f:91:89:9f:
                    ff:6e:f6:84:d6:5d:c5:62:53:ea:56:78:b4:35:d8:
                    62:fb:b6:7b:14:ad:20:23:c4:ac:1c:75:ef:25:b6:
                    b0:95:e8:6d:fa:9a:7c:ab:1f:cd:14:f2:a2:2e:25:
                    b2:a0:37:1e:dd:bf:54:14:3f:8d:69:4e:b2:7c:9f:
                    29:d8:d3:91:47:b5:88:00:f6:d2:7d:d8:8d:38:3e:
                    1a:26:ca:86:e8:80:95:ff:d2:d9:44:d8:9c:c5:aa:
                    f8:cb:95:93:69:b6:41:12:79:fa:2e:a9:82:f2:02:
                    98:b7:aa:7a:ec:0d:d6:53:a6:f9:d0:0e:cb:af:04:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7A:B2:CA:B7:89:33:08:EF:04:44:5F:CF:FE:5B:43:39:94:19:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d766f13-bfab-38cf-a384-99ce1fa7b924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:ec:5a:1f:84:66:c9:3a:ba:00:ef:37:cf:b3:49:e9:bb:
         40:0a:97:f2:bc:77:50:00:01:1b:49:0b:40:a3:78:b7:94:09:
         4b:d6:41:e6:d2:0b:e0:67:df:d1:41:8e:ea:1c:ee:e9:f6:57:
         5d:f8:3c:5b:19:06:20:c4:81:c2:c7:d5:e8:d3:87:f8:c7:5f:
         98:7f:69:6d:96:1f:f4:74:b9:f3:02:59:78:6d:cd:4a:3b:46:
         f0:0d:b0:f6:c9:a4:4e:b6:39:10:0e:36:26:52:d5:12:51:a4:
         58:9c:81:91:7a:34:dc:9e:ae:35:f6:bc:e1:be:33:19:e2:12:
         82:c6:4f:42:45:00:9e:5f:6e:4f:99:ec:35:3e:35:ea:44:29:
         22:ae:3a:1b:b8:56:c7:35:8e:16:1b:13:a4:a3:ec:80:df:f5:
         94:af:36:19:21:64:ed:45:1c:89:13:48:13:fe:c6:94:ae:61:
         a1:42:f1:fb:f6:64:33:13:fc:2b:0e:1e:c8:b1:fe:36:27:4c:
         bc:97:eb:3c:ee:4a:47:ed:9b:47:53:29:49:6f:cc:8a:41:64:
         ab:fa:be:bf:63:89:7e:ed:34:dd:38:09:ef:6e:b1:4c:16:be:
         c8:29:cb:43:1a:81:4c:47:0d:6a:b4:a0:2d:e5:b9:bb:83:f8:
         a6:7b:17:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:49:03 2025 by rpki-client