Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa
File:                     e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa (raw, json)
Hash identifier:          PvfBr0qiADLlblI7hdlaUC3OIEzzMMNpVi5hvs6dYMI=
Subject key identifier:   57:74:2F:E6:68:40:A5:9F:BA:75:23:75:C7:C7:9B:7B:9C:D8:38:C2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B63673C41AEB93E3FFDDD3540
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        199.249.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3c:41:ae:b9:3e:3f:fd:dd:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=48adde14-c0f5-4297-a1b6-d4acea46e93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:18:8d:c1:de:27:a7:44:e8:e3:76:a7:86:b2:
                    ab:bc:d5:08:0f:10:56:f8:76:21:0e:60:be:84:80:
                    21:a9:8e:de:1a:25:ea:5a:4a:1b:3d:ed:1e:77:ef:
                    fb:15:bd:bb:a2:2e:d2:6d:ba:5d:fc:13:04:cd:fb:
                    b9:9b:c9:c5:a9:3a:d7:5e:84:4b:3e:07:5d:5f:7a:
                    e6:67:c9:09:81:0d:c4:ef:3e:1a:d9:f9:81:cc:c0:
                    7c:a3:a7:59:7b:66:4a:c2:c7:c1:2e:b5:f6:6a:f8:
                    9a:d0:80:21:10:af:5a:ff:fa:ee:cf:bf:91:b5:a5:
                    9b:1b:51:dc:1e:bb:f6:0d:5c:1d:bd:8f:da:52:bf:
                    25:72:05:1d:ac:38:15:d2:33:ef:09:44:3e:af:2f:
                    de:c4:a9:ab:53:73:32:ec:bd:de:49:52:8e:26:56:
                    7f:57:6a:00:e7:2f:f2:7d:45:bf:62:db:00:39:69:
                    d0:43:6f:7f:01:a0:9b:83:63:cd:b7:41:ce:64:5e:
                    99:3e:79:65:74:ed:c8:cd:d7:5b:79:db:2e:72:24:
                    14:90:3a:42:a1:24:22:4e:f8:ba:6f:92:1b:a5:e8:
                    69:5e:a2:03:e2:e0:ca:a7:c3:27:8d:26:4a:3c:95:
                    62:b1:ba:0a:b7:8f:67:95:64:70:28:f2:30:88:16:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:2F:E6:68:40:A5:9F:BA:75:23:75:C7:C7:9B:7B:9C:D8:38:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:1d:ec:30:ec:60:65:43:d2:2f:44:e5:0f:3c:49:a6:ce:65:
         4a:27:32:6f:ba:12:80:ef:02:f9:50:53:ac:94:f0:a3:83:d2:
         15:c0:94:6a:5c:0f:80:86:87:88:13:0b:77:20:6d:50:32:73:
         89:a8:ab:96:94:24:77:b8:f7:fc:35:b3:ef:35:de:79:ad:8c:
         8b:57:c1:46:bf:60:c6:85:68:23:1c:88:db:cc:57:5e:65:52:
         9c:b9:60:cb:60:f2:01:82:a5:08:6c:7a:6b:a2:52:5f:8b:e2:
         64:9d:a8:f5:2d:67:f6:4f:e4:2f:ec:a5:1e:bb:f8:4d:5f:24:
         96:3a:a2:58:aa:7f:dc:68:18:11:c9:73:c6:ab:21:a9:4f:2c:
         70:6e:63:e7:dd:03:f0:9a:b2:d0:ef:b4:42:e1:76:6b:20:63:
         01:9c:6c:e4:e1:af:1f:9c:7c:46:1c:d4:88:ce:33:a5:5e:a8:
         c1:0a:6b:b6:7f:c8:2b:32:53:29:4a:93:7f:b6:5a:57:4a:0a:
         2f:79:c7:c6:9b:33:96:a4:d4:f6:b0:78:5d:e4:a3:53:c5:ea:
         c2:54:24:08:18:86:b8:35:70:eb:70:34:31:0d:32:a4:32:a4:
         b6:b0:0d:f6:34:8d:90:3c:ca:82:a5:cf:25:27:d3:2e:66:8f:
         2f:ae:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:21:55 2025 by rpki-client