Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd07f2b-e974-3619-90f4-a6d8fc2f5c7e.roa
File:                     3cd07f2b-e974-3619-90f4-a6d8fc2f5c7e.roa (raw, json)
Hash identifier:          mMkT4LlvFFQRpANpuDP2Hzd9RjfpDLB+ha3VQ8YDaqg=
Subject key identifier:   7C:1F:FF:9B:B7:A1:7E:D1:04:A3:A6:0A:B4:29:3C:CF:ED:3D:B5:CB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201E3DD274CE34DB67E35C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd07f2b-e974-3619-90f4-a6d8fc2f5c7e.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        199.182.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e3:dd:27:4c:e3:4d:b6:7e:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=fa130d4f-4b30-43cb-b126-7660284cf523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:e6:75:86:ff:6b:b3:c3:a9:d1:df:4b:ba:
                    44:a4:31:81:1d:78:76:c7:b2:bf:c4:56:8e:c3:d8:
                    52:3f:9b:e4:41:90:92:97:6d:19:ab:8f:47:1c:9e:
                    1f:fb:be:5e:d3:8b:ab:66:db:e8:28:c7:fd:ab:66:
                    5a:d7:2a:25:c7:91:04:bf:27:f0:e5:36:10:50:42:
                    55:9e:ab:2e:03:22:1b:1a:38:a6:5d:5d:68:2a:22:
                    fe:0f:59:f4:bf:30:bd:66:3c:dc:e5:3a:85:8d:d3:
                    57:da:cf:4b:c5:5c:55:6b:29:65:2a:5d:5f:99:86:
                    b7:a5:7c:7a:66:54:62:ee:ee:02:50:43:0d:46:ce:
                    9c:f0:d2:61:6e:de:73:0e:57:98:9a:91:dc:e8:bf:
                    30:6e:57:83:11:9f:98:6f:15:36:23:1d:64:24:09:
                    70:f5:53:a5:67:ac:76:5e:e1:a5:d9:2d:cd:dc:49:
                    cb:9a:0d:2c:a2:f4:c7:40:b3:94:6b:e0:5a:5d:e3:
                    5a:46:36:19:9e:61:0b:08:cd:f7:72:5a:da:5d:0c:
                    10:53:fa:61:38:79:a1:c8:6a:09:48:09:6a:1c:32:
                    0e:82:2e:b4:35:a9:cb:0d:da:f4:e1:de:cf:fd:14:
                    cc:b0:07:69:7d:60:a6:1a:55:a4:d5:3c:5e:45:3c:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1F:FF:9B:B7:A1:7E:D1:04:A3:A6:0A:B4:29:3C:CF:ED:3D:B5:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd07f2b-e974-3619-90f4-a6d8fc2f5c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1e:2a:c5:ae:af:cb:4d:4b:f5:cc:06:ac:50:7b:b0:77:e9:
         92:e0:cd:13:93:27:e3:aa:00:3e:18:27:f1:d7:74:43:e9:d6:
         f0:90:b9:d1:8d:20:23:87:62:49:9b:80:af:97:1b:2f:20:cf:
         20:47:a9:7a:0a:b2:48:2b:9c:4b:23:97:e5:92:95:d6:4a:fd:
         a6:5d:21:59:ab:2e:08:7e:87:ad:8d:28:92:7b:c0:02:05:de:
         da:3f:b4:82:a3:1e:31:51:c5:a7:51:30:c5:f4:45:49:ef:8b:
         fd:26:d0:5b:db:ba:fa:1f:94:ee:12:60:f4:58:2e:bc:2f:14:
         34:59:16:30:1a:b9:ad:c7:1c:b6:ab:59:83:99:e0:8a:b2:b1:
         79:d4:3c:12:07:cd:ba:19:38:3b:c0:91:7f:78:a4:49:10:2a:
         a4:52:eb:75:fb:cf:ed:2a:08:d0:2d:7f:f9:e8:77:22:d6:ff:
         e3:71:51:27:94:67:67:70:b6:13:5e:6f:23:9e:db:f5:50:50:
         41:ae:44:28:53:2b:75:00:66:b8:b9:5f:49:e5:f0:9f:20:50:
         88:41:94:6e:ee:b0:5d:c8:c2:7d:0a:86:7c:17:9e:e2:5a:f3:
         f8:96:6b:e8:cd:ae:9a:c5:38:bd:60:24:71:d5:4c:67:7b:98:
         2b:3f:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:58:37 2025 by rpki-client