Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf25226c-37a1-3ed7-958d-d0b604834fdf.roa
File:                     cf25226c-37a1-3ed7-958d-d0b604834fdf.roa (raw, json)
Hash identifier:          dYcp1qvGbpN9XSg5XMdnQNKKpkAQmTrcbJLajLgQuW0=
Subject key identifier:   86:17:66:47:9D:98:7D:74:7C:76:DC:36:37:D5:86:03:05:3B:E6:41
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62022806DEDA04485422B700
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf25226c-37a1-3ed7-958d-d0b604834fdf.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        199.182.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:28:06:de:da:04:48:54:22:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=f4cc46e1-6be9-4155-8121-dc0340c3d4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:f9:72:32:98:3d:47:2a:32:be:cc:d3:b1:
                    c7:9f:a6:36:6e:68:56:14:08:4b:cc:64:8b:42:1a:
                    b3:07:ef:35:f6:1e:8f:ae:49:2d:5a:d4:66:b5:c4:
                    3c:14:7a:6d:35:b5:63:67:0f:d4:46:84:21:36:2c:
                    e0:2b:59:46:07:82:5c:a9:9d:07:f0:fb:f3:56:7f:
                    d1:93:bd:6a:42:97:6a:6a:2c:c2:88:0a:11:34:f3:
                    36:b6:1a:31:2a:3d:e9:db:bb:1b:fd:5c:ed:61:4d:
                    b4:e0:04:ca:df:82:10:ae:f8:10:aa:3e:3e:82:39:
                    f2:ea:94:2b:2e:66:25:af:19:c4:bf:6e:1a:58:9f:
                    6d:ed:fc:61:aa:1d:1e:30:a0:7f:c0:19:e0:6f:22:
                    12:fb:a2:ea:ca:2c:15:18:20:4f:c7:94:a2:c2:d3:
                    5c:57:2c:83:10:74:4d:07:68:14:6b:64:82:0b:3b:
                    56:3c:d9:09:6e:bc:64:0c:93:7e:e8:16:b1:5c:60:
                    3a:3d:a7:8e:1a:13:aa:fc:0d:af:40:cc:2b:10:df:
                    2c:cf:0f:9c:f9:4c:b2:50:ea:e1:ad:fa:f2:65:9e:
                    30:b6:0b:d3:5f:e2:c3:cf:60:ff:9c:0b:f8:a0:c9:
                    67:2e:61:d2:8f:18:9e:89:8b:28:e7:2e:23:17:b5:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:17:66:47:9D:98:7D:74:7C:76:DC:36:37:D5:86:03:05:3B:E6:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf25226c-37a1-3ed7-958d-d0b604834fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0c:cb:c2:3c:a7:c0:67:fd:16:3b:bb:fb:72:a8:1f:ac:09:
         90:82:ea:95:3e:c4:0f:cd:bb:4e:2e:30:24:a3:b6:99:c4:23:
         d7:7a:0c:d1:d2:63:47:91:0d:26:81:24:43:68:b8:1a:f7:5e:
         5b:d4:b1:06:2b:76:73:b1:e0:8a:18:ed:b5:f2:71:da:64:11:
         74:d2:8c:14:42:8e:f2:aa:1d:7f:0a:d8:16:d7:6a:3d:cd:26:
         68:81:f3:ff:6c:c2:07:3d:cc:db:f0:05:9e:2b:3c:43:51:b5:
         a3:c0:da:a8:a5:8d:05:e8:de:8d:c4:b0:db:bd:cc:5f:25:e0:
         1b:d9:f8:1a:16:ee:35:62:0d:1e:f9:0a:56:b1:7c:30:2c:e9:
         e4:2b:36:f7:73:0c:a5:d2:8a:87:86:8a:29:4e:63:0d:90:96:
         40:0f:91:60:6b:01:b0:06:cd:b1:5b:67:2a:b6:f7:d4:f6:5d:
         44:ee:1d:9e:96:47:e5:9c:00:89:3f:b9:4f:18:1c:42:09:09:
         d6:8e:79:75:f5:57:7f:57:88:e1:99:21:b2:fc:0d:ab:ce:da:
         80:02:1b:07:d3:33:2f:ee:e5:b1:db:ff:83:6f:85:80:f7:9c:
         17:14:81:9e:cc:a6:e2:59:e8:ef:65:79:b6:fa:44:9f:fa:de:
         11:dc:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:57:33 2025 by rpki-client