Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa
File:                     782350f7-8243-34d3-bc0e-f447c86e0f63.roa (raw, json)
Hash identifier:          OrslbgNXyaKoumlElvDS9bWIuTGy7sA+UCW7S2NI9Pg=
Subject key identifier:   F2:CD:9F:A3:D3:D9:BC:DD:86:D0:0B:B2:C6:4A:C5:D3:0E:FD:0D:8F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62023AFDE585858810418040
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     29839
IP address blocks:        192.149.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:3a:fd:e5:85:85:88:10:41:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=8abdc841-a268-4100-b05c-bd02cbaf5de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:f4:c5:45:fb:5d:e4:2c:ca:de:7d:14:d6:
                    6f:39:5f:6a:a2:3f:a7:a2:09:88:d7:e7:98:51:7c:
                    59:c8:0e:36:23:53:b9:c8:10:ad:f6:87:7c:18:20:
                    78:ed:b3:21:1f:22:ec:69:23:f7:47:77:71:bd:18:
                    6b:70:71:4f:8a:ac:88:45:4c:49:c9:53:02:79:1b:
                    58:ee:ef:70:ce:04:99:e9:c0:f0:5e:e6:d0:8f:0f:
                    a4:8b:86:3d:14:50:82:7a:1f:16:18:f6:aa:61:97:
                    ef:ac:b6:16:08:6b:af:d4:23:ec:cd:2f:2e:fc:2e:
                    8c:f4:4e:ad:86:89:43:8b:29:c8:15:23:d4:16:18:
                    17:e5:06:85:17:88:b3:66:35:c1:2b:1f:d1:4f:ea:
                    92:60:b3:f7:37:6c:4a:3a:53:b2:1b:65:92:7c:fb:
                    93:74:df:5a:b1:7f:5b:b3:9d:46:f8:da:e7:f1:99:
                    c3:86:8e:fa:e9:25:d5:36:05:b6:d2:ca:46:8b:07:
                    cd:8e:37:a4:13:09:7e:65:96:25:81:31:76:13:ec:
                    92:b6:bb:8c:ac:03:e7:f1:ac:75:77:77:83:01:7a:
                    5a:60:bc:e8:d9:b3:cb:dc:ec:80:bd:c3:87:27:f8:
                    55:45:3f:0c:dd:3b:db:1e:f0:1c:57:e8:d4:28:65:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:9F:A3:D3:D9:BC:DD:86:D0:0B:B2:C6:4A:C5:D3:0E:FD:0D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/782350f7-8243-34d3-bc0e-f447c86e0f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:ba:fb:97:fa:0e:fb:53:10:6c:7c:62:22:87:0d:d9:b2:
         cb:20:14:1f:04:b3:5b:3f:bf:e9:7e:a6:cd:4c:15:9b:51:2e:
         a8:7a:12:c5:4e:d7:bc:a7:74:7e:f5:88:9f:d1:15:d2:aa:55:
         f8:0f:9f:c8:9f:d2:91:56:41:ef:d6:d1:3f:66:d9:d2:a2:36:
         17:bf:16:f0:2b:05:17:5d:6f:2e:fe:91:00:d9:e6:23:d5:13:
         4c:82:d7:bc:be:af:5f:53:bc:39:de:cd:12:31:e8:44:14:33:
         e9:55:9d:63:b7:c0:be:69:28:fe:f8:bd:4c:60:13:03:42:f4:
         e4:f9:e9:f7:af:38:93:9c:b1:d3:d4:1e:81:2b:6a:9f:41:d7:
         2e:eb:9c:d2:4d:63:d4:e7:dc:b2:c2:6d:59:84:c7:20:f6:8b:
         66:43:07:7e:cd:e4:b6:6a:dc:cb:70:f7:79:71:1e:b4:51:a3:
         c9:c0:29:20:a7:06:80:64:6e:52:35:db:6b:a2:16:b0:37:9d:
         66:a5:e5:42:65:87:43:ef:d6:d2:53:c6:a9:c8:c1:5a:bb:44:
         78:1b:a8:03:ae:bf:c4:42:a9:30:27:ca:95:0e:c8:6a:ec:92:
         c9:f9:a7:6f:19:77:1a:06:fd:97:e4:52:d7:79:92:c4:94:1d:
         11:aa:a5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:23 2025 by rpki-client