Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0e6f37d-a3c7-3d9c-8282-c3304dfdd3a3.roa
File:                     d0e6f37d-a3c7-3d9c-8282-c3304dfdd3a3.roa (raw, json)
Hash identifier:          eR83IJ11s94HpLiTfm1bgZ3kpqfwZxyy9/fbSW41rv4=
Subject key identifier:   1F:A9:CC:16:D3:BC:86:C2:87:BA:5D:29:87:DF:F8:EA:EA:8D:D7:10
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620217AE5FBEC3FF9B552A00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0e6f37d-a3c7-3d9c-8282-c3304dfdd3a3.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        199.19.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:17:ae:5f:be:c3:ff:9b:55:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=60f5b093-ffc3-4c11-a321-4d3b38007dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:27:c6:50:fd:c5:b8:8b:03:9a:55:8b:f0:b5:
                    7e:02:67:82:77:c9:46:b1:44:6c:16:6f:7a:6f:97:
                    d8:95:ed:c2:45:50:b0:8d:26:9d:9b:81:08:36:0d:
                    22:23:13:bb:b7:de:96:b5:5c:c6:2f:60:4e:6a:42:
                    b4:c1:db:9c:fe:ff:7c:bb:26:b7:87:da:70:6a:f9:
                    b8:ff:98:ef:83:ad:0c:8e:66:ab:31:dd:21:5d:b0:
                    82:bc:4e:62:20:ac:ea:0c:be:80:e9:71:12:e6:cf:
                    14:b6:2d:8a:d4:96:cb:94:41:0e:d3:e1:b8:ae:ab:
                    a1:a2:f0:c5:a8:20:dd:7a:f9:e2:a8:21:83:21:44:
                    0d:5a:5a:69:4d:e0:58:c4:f6:06:bf:4e:66:91:63:
                    5f:15:fe:58:51:0c:26:7d:17:c7:2b:ea:92:cc:a2:
                    05:e9:f1:c1:ea:ec:1f:e4:ff:b2:7a:f5:ea:4d:9f:
                    33:cd:45:08:d7:b2:19:92:ba:5a:eb:9d:19:7a:a9:
                    e4:2c:cc:49:aa:e3:2c:cd:a4:26:dd:dd:4f:9d:95:
                    62:51:fd:fe:42:36:77:96:d3:71:e8:d8:f2:a4:b9:
                    87:d1:31:fa:66:00:96:bd:e8:51:c9:98:41:6c:6d:
                    5c:9c:c1:af:00:34:ee:09:2e:b6:dd:0e:58:31:fa:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:CC:16:D3:BC:86:C2:87:BA:5D:29:87:DF:F8:EA:EA:8D:D7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0e6f37d-a3c7-3d9c-8282-c3304dfdd3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:63:0c:dc:73:3b:d3:60:15:c4:1e:6b:75:8e:08:bd:04:9a:
         d8:32:4e:d3:3c:cd:bf:45:1e:85:f4:5f:9f:30:ac:20:c7:f8:
         b2:f7:a6:9e:4b:ab:d2:11:7f:b7:00:27:9f:b4:7b:ef:a3:51:
         c8:61:2c:84:05:1a:d2:de:2c:44:83:3d:64:5c:d7:f0:2c:7a:
         f1:01:69:6a:7f:3d:c5:f6:36:cf:5f:5d:b5:20:38:29:12:94:
         be:21:20:72:52:38:37:d5:25:f4:ba:55:ee:ab:9f:0d:db:49:
         7d:ae:35:85:ab:d2:fa:c6:2d:93:52:12:aa:fa:2c:c1:e3:71:
         b3:01:9d:13:2c:ae:2a:5f:07:ba:e9:af:4e:5c:dd:86:04:9a:
         75:a2:69:72:8f:4c:23:d3:ec:c9:37:df:42:af:77:99:c2:43:
         c0:60:2e:27:11:fe:f6:a8:5f:b7:5f:ed:46:44:6a:1c:24:d7:
         9e:ca:61:79:d3:95:b7:a9:e8:67:a5:81:2c:a5:f1:d3:f4:3e:
         f7:fc:01:3c:10:e1:49:22:fb:a1:7d:7d:ab:22:12:d9:29:01:
         c6:7c:d0:b8:59:34:eb:5a:36:1f:5a:a5:92:ef:1d:b7:27:e0:
         b7:19:e2:ad:be:bb:88:ca:df:ce:9c:de:d9:aa:3a:77:3d:b8:
         f4:0e:8b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:56:08 2025 by rpki-client