Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa
File:                     ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa (raw, json)
Hash identifier:          H+NIzuWGtX5tU5qOv4BPVL6bLwwcjCiOCZCQKmdRPuE=
Subject key identifier:   65:BA:2D:91:97:4D:B9:ED:A8:9D:E9:BB:FE:ED:1B:77:1C:CF:01:88
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620235C2672FC0587CB12380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        199.182.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:35:c2:67:2f:c0:58:7c:b1:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=85660f4a-61e7-46bd-b111-e61c71f53fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:f5:ea:78:98:b4:e7:e8:63:70:a1:cf:11:
                    17:ba:8c:1b:10:b8:8c:91:71:20:7d:26:a5:a1:b3:
                    3f:9a:fd:2f:03:6e:3b:db:67:ed:61:ca:a2:86:a6:
                    4b:ea:ab:81:5d:c6:ee:96:14:83:a5:6c:0f:b4:ef:
                    9b:70:e9:b3:b5:4d:6a:ee:95:9c:a8:93:e6:37:3d:
                    c1:b1:62:3c:35:5c:06:d4:20:84:cf:f3:88:7c:0d:
                    ed:c4:39:15:54:a5:ac:6b:5c:15:d5:1c:1f:7b:d3:
                    7d:4b:29:af:d4:4b:ad:f1:52:f1:f1:b4:be:71:19:
                    35:84:56:83:99:b3:5d:4c:dd:42:9a:9c:ed:95:a6:
                    fd:10:40:78:3d:4c:f4:8a:c8:5f:53:11:9a:b4:70:
                    15:ac:7a:a3:9a:68:15:c7:d8:d8:f3:41:34:df:cd:
                    d3:ea:67:37:ee:94:ae:18:32:a2:85:a2:97:1b:e9:
                    14:22:b0:3a:4a:06:e6:55:50:46:b0:ee:d7:84:b7:
                    25:c1:36:fc:64:8d:25:44:7f:53:d9:91:93:66:07:
                    b4:8f:79:43:65:7c:a9:aa:6f:f0:d6:32:f3:9c:d3:
                    14:77:4d:55:0c:5a:7c:81:50:38:c9:d6:1a:3e:c9:
                    ca:e4:aa:a6:1a:9c:76:ee:f2:99:7d:1f:38:3e:fe:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BA:2D:91:97:4D:B9:ED:A8:9D:E9:BB:FE:ED:1B:77:1C:CF:01:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:bd:d2:a3:ce:89:07:fe:f0:79:cd:5e:f7:22:5d:37:03:
         af:eb:08:00:29:e2:c1:9f:6c:17:3b:93:14:16:6f:bf:21:34:
         f0:6a:23:c9:7b:67:2b:91:55:81:f7:9c:6c:c2:5e:88:1f:73:
         23:b8:05:57:82:10:ac:24:6a:a5:98:74:15:5b:01:d3:cc:81:
         3a:40:f1:0f:0f:92:a5:a3:b5:e3:22:5d:a8:34:15:7d:e6:c0:
         e5:a4:9e:d2:71:b9:34:ec:2e:60:5a:49:d1:58:e6:b5:f1:96:
         a4:79:22:24:c2:cb:16:71:b0:df:59:70:7e:2e:d1:55:00:b1:
         f4:85:b1:bc:e4:cb:57:0f:5e:b6:4e:d5:0a:85:5c:ac:aa:81:
         21:38:49:ce:56:bd:16:b5:5b:5b:01:e1:dc:06:3d:7b:b7:7d:
         31:07:73:8b:22:b6:a3:4e:df:b6:90:79:79:ee:b3:62:42:1d:
         e9:72:24:84:22:36:a5:b1:84:9e:91:51:7c:32:b1:f0:79:da:
         bd:38:0f:71:29:a4:cb:d0:80:8e:c7:c0:a7:95:79:b8:1d:bd:
         0c:4a:f8:e1:b1:b2:cc:4d:d0:a8:1a:a9:8d:f0:14:61:8a:6f:
         b2:79:4b:ec:c5:8e:4f:c6:91:f1:cf:4a:dc:7b:d6:6e:93:3b:
         78:75:d5:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjXCZy/AWHyxI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ODU2NjBmNGEtNjFlNy00NmJkLWIxMTEtZTYxYzcxZjUzZmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYT16niYtOfoY3ChzxEXuowbELiMkXEgfSal
obM/mv0vA24722ftYcqihqZL6quBXcbulhSDpWwPtO+bcOmztU1q7pWcqJPmNz3B
sWI8NVwG1CCEz/OIfA3txDkVVKWsa1wV1Rwfe9N9Symv1Eut8VLx8bS+cRk1hFaD
mbNdTN1Cmpztlab9EEB4PUz0ishfUxGatHAVrHqjmmgVx9jY80E0383T6mc37pSu
GDKihaKXG+kUIrA6SgbmVVBGsO7XhLclwTb8ZI0lRH9T2ZGTZge0j3lDZXypqm/w
1jLznNMUd01VDFp8gVA4ydYaPsnK5KqmGpx27vKZfR84Pv4l9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGW6LZGXTbntqJ3pu/7tG3cczwGIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGVkNzM2NTctYjViYy0z
MGVhLWI3YzEtZTg1YTVlZGI5YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoavdKjzokH/vB5zV73Il03A6/rCAAp4sGfbBc7kxQWb78hNPBqI8l7
ZyuRVYH3nGzCXogfcyO4BVeCEKwkaqWYdBVbAdPMgTpA8Q8PkqWjteMiXag0FX3m
wOWkntJxuTTsLmBaSdFY5rXxlqR5IiTCyxZxsN9ZcH4u0VUAsfSFsbzky1cPXrZO
1QqFXKyqgSE4Sc5WvRa1W1sB4dwGPXu3fTEHc4sitqNO37aQeXnus2JCHelyJIQi
NqWxhJ6RUXwysfB52r04D3EppMvQgI7HwKeVebgdvQxK+OGxssxN0KgaqY3wFGGK
b7J5S+zFjk/GkfHPStx71m6TO3h11UM=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:25 2025 by rpki-client