Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6155041b-ceab-322f-83f5-59df4b81aaba.roa
File:                     6155041b-ceab-322f-83f5-59df4b81aaba.roa (raw, json)
Hash identifier:          Ofw1Vc3qAR7LVc+2qGoXT2L8hRXe5ohQtAFOIMKYDbQ=
Subject key identifier:   E1:5D:8C:79:36:52:E0:C5:20:C8:30:59:49:9E:3C:AB:34:5F:58:A0
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201E276D7D681BFC69D5800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6155041b-ceab-322f-83f5-59df4b81aaba.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        199.182.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e2:76:d7:d6:81:bf:c6:9d:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=18a522a1-92d4-4cbc-965d-db5f818ca7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:1c:6f:51:ed:f5:69:85:1b:be:18:94:73:
                    35:6b:8b:a2:0c:af:3a:00:8b:69:52:91:ab:59:8c:
                    09:fb:aa:f3:cc:69:7d:45:00:ef:32:47:b6:6d:7a:
                    fc:06:0a:5d:25:05:76:9b:8b:5c:0b:76:6a:e6:8c:
                    50:a6:f4:3c:14:23:ac:94:32:c3:66:c7:eb:ea:50:
                    2b:a8:a2:74:2b:3a:8a:6b:21:30:5f:36:39:89:41:
                    a1:3c:71:51:d6:56:da:b8:54:c4:a5:6a:74:9c:a4:
                    5b:4c:e7:e8:97:4b:8c:fc:13:80:15:37:32:f0:f0:
                    12:8a:cb:a9:6e:2e:e0:46:b2:34:5b:44:39:1f:a2:
                    e6:d2:8a:62:6d:03:f7:c7:78:42:7b:1e:0f:17:79:
                    54:0e:c2:a2:ae:ac:cd:79:a0:af:1d:5e:d4:1a:c2:
                    f5:52:18:89:87:01:8c:dd:5d:ac:06:a7:ac:eb:db:
                    36:96:56:2f:03:7d:c2:ef:23:9c:59:a8:04:e3:a3:
                    1d:c0:83:1d:07:97:0d:6e:00:ca:03:ac:bb:e9:49:
                    92:e6:b4:b4:a9:dd:bf:40:93:6b:d4:d0:65:21:51:
                    15:5a:5e:c8:08:79:ef:05:18:d4:65:de:26:12:d7:
                    f9:5b:91:32:ae:bc:2c:e7:6e:cc:8d:e3:a7:96:69:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5D:8C:79:36:52:E0:C5:20:C8:30:59:49:9E:3C:AB:34:5F:58:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6155041b-ceab-322f-83f5-59df4b81aaba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:19:ec:78:03:c7:9d:b0:57:b2:97:7d:24:3a:6c:09:67:80:
         38:3a:50:f8:5d:ca:fa:b9:72:37:f2:75:9d:d3:80:e2:2b:1d:
         63:06:7c:30:4b:be:64:eb:95:90:4a:25:95:a0:a6:53:16:3b:
         3d:d2:21:94:43:59:2a:29:72:9c:db:9b:3f:e0:cc:4b:3a:97:
         e2:b4:5f:6f:89:c3:7f:0e:f3:dc:01:49:1b:32:f8:17:0f:e9:
         33:63:fe:c1:b3:44:12:43:8c:b8:20:25:5c:31:ae:e0:f4:99:
         a4:91:4c:e8:fc:9f:b0:1c:76:3e:c0:90:15:e5:78:3d:37:6b:
         97:8e:bd:2c:6c:51:e6:50:af:0f:e4:d4:d6:74:ff:d6:6c:30:
         a5:22:44:eb:a0:54:4b:6f:65:4b:32:34:b0:fa:f1:bf:56:06:
         4d:71:96:2a:c2:3d:16:49:0b:c8:3e:3a:8f:75:c5:e0:e8:10:
         2e:9c:f8:f3:8c:a5:64:36:f3:10:39:ad:c4:5f:b6:88:ed:64:
         28:81:eb:94:61:79:08:68:9a:3a:c8:26:89:44:f7:4c:4f:42:
         e0:53:82:f2:b3:5a:cc:74:90:5c:38:23:a5:4d:72:5a:c0:7b:
         bd:99:09:51:a4:d4:70:4c:f8:d0:79:e8:bd:60:be:4d:d1:04:
         77:75:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:10:23 2025 by rpki-client