Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eb2eb3f3-2372-33a9-8d18-328246bb72d9.roa
File:                     eb2eb3f3-2372-33a9-8d18-328246bb72d9.roa (raw, json)
Hash identifier:          ln+gYVmoEChpyZebrE36+2E2/3lFLIkDS+pth8lhcfE=
Subject key identifier:   4D:46:20:DB:D9:C0:5D:D9:EA:25:7D:29:A7:D1:52:FA:FA:EC:C1:01
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62021A1DC6F0174E584FE360
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eb2eb3f3-2372-33a9-8d18-328246bb72d9.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        199.249.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1a:1d:c6:f0:17:4e:58:4f:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=6cc50b85-80a0-4f79-b2c7-c86aeca5354f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:be:82:a0:06:1e:8f:f9:7a:7a:08:96:bd:
                    d6:a2:7e:2f:96:ba:5d:e5:2c:58:40:5b:e0:3d:95:
                    d5:47:35:18:08:40:c2:c7:7a:bc:a5:bb:17:e8:cd:
                    ad:74:e5:fa:a8:02:bd:72:5e:7b:15:09:25:66:7e:
                    c9:63:0c:f6:93:20:d7:60:ab:a3:a1:67:cb:10:99:
                    71:26:ba:d9:c8:e2:3a:41:7b:40:2d:b6:01:94:52:
                    05:a6:be:fd:b7:90:dd:c1:69:e5:03:af:47:dd:f3:
                    59:6a:5c:a5:95:9a:47:00:3e:5f:62:aa:9a:c8:5d:
                    4d:f1:21:50:73:42:a5:46:20:a0:b0:1d:5a:7e:b7:
                    36:b9:05:03:d4:97:52:f5:42:d7:2b:ad:6a:6f:f4:
                    12:ad:7f:2b:0d:f0:7f:d5:bb:83:79:46:e4:c8:e4:
                    63:40:14:ec:e1:e3:53:5b:c3:14:e1:b0:ea:7e:8a:
                    c6:24:90:97:00:f0:07:7f:ab:c7:78:24:63:d7:ba:
                    3c:18:76:f6:59:9e:23:3a:5b:65:40:78:d8:31:8f:
                    bd:f7:6a:c3:28:ef:7e:66:e1:ea:18:fd:e8:a4:23:
                    a7:6b:07:d5:4d:cc:c8:06:84:f3:a1:e4:0b:e1:ef:
                    99:d1:39:2d:cd:98:06:b9:89:26:8f:c9:e6:c2:16:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:46:20:DB:D9:C0:5D:D9:EA:25:7D:29:A7:D1:52:FA:FA:EC:C1:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eb2eb3f3-2372-33a9-8d18-328246bb72d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:ce:f2:f7:32:d8:88:0d:70:22:92:6d:26:6e:66:f2:97:cf:
         1c:2a:7f:9a:02:e0:62:25:11:0c:df:07:c0:fc:34:80:b7:4b:
         2b:aa:ef:23:89:0d:c4:3d:48:99:61:7a:b9:9c:b4:be:a1:b2:
         13:f3:e7:35:9f:0b:7a:ea:4a:0c:5a:b2:7b:23:f9:85:b0:fd:
         a2:fc:29:d4:ce:0f:43:80:72:b2:81:55:67:3e:94:8e:cb:b3:
         d6:83:6e:e9:e2:de:b1:ea:97:fa:8d:c8:c6:c4:39:a9:68:15:
         b8:01:c0:1d:40:a7:13:c9:7d:c2:bf:a9:bd:50:42:3d:be:49:
         8e:a8:3f:f6:a8:12:32:09:7e:9d:a7:c0:b6:5c:7d:e7:49:da:
         7b:76:af:27:40:8c:a1:67:ad:12:cf:a8:d1:7c:6e:b3:cd:23:
         c1:a7:3d:fb:03:6b:21:33:03:ec:2e:02:70:5d:fa:15:c4:0c:
         b9:b6:ac:c2:59:59:a9:13:12:f5:6f:79:33:0f:32:d7:e0:a9:
         75:11:78:01:cd:fd:37:ca:e4:bc:a1:dd:b5:99:ee:ff:a7:b9:
         c4:b5:44:79:6c:02:dc:c9:c9:68:0c:69:1c:2c:a8:7a:8f:2d:
         9d:f3:e8:72:c8:98:4f:a1:9e:c2:f2:19:8d:68:78:3f:01:f3:
         d5:9a:f0:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhodxvAXTlhP42AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NmNjNTBiODUtODBhMC00Zjc5LWIyYzctYzg2YWVjYTUzNTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7W+gqAGHo/5enoIlr3Won4vlrpd5SxYQFvg
PZXVRzUYCEDCx3q8pbsX6M2tdOX6qAK9cl57FQklZn7JYwz2kyDXYKujoWfLEJlx
JrrZyOI6QXtALbYBlFIFpr79t5DdwWnlA69H3fNZalyllZpHAD5fYqqayF1N8SFQ
c0KlRiCgsB1afrc2uQUD1JdS9ULXK61qb/QSrX8rDfB/1buDeUbkyORjQBTs4eNT
W8MU4bDqforGJJCXAPAHf6vHeCRj17o8GHb2WZ4jOltlQHjYMY+992rDKO9+ZuHq
GP3opCOnawfVTczIBoTzoeQL4e+Z0TktzZgGuYkmj8nmwhZ5cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1GINvZwF3Z6iV9KafRUvr67MEBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWIyZWIzZjMtMjM3Mi0z
M2E5LThkMTgtMzI4MjQ2YmI3MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALrO8vcy2IgNcCKSbSZuZvKXzxwqf5oC4GIlEQzfB8D8NIC3Syuq7yOJ
DcQ9SJlhermctL6hshPz5zWfC3rqSgxasnsj+YWw/aL8KdTOD0OAcrKBVWc+lI7L
s9aDbuni3rHql/qNyMbEOaloFbgBwB1ApxPJfcK/qb1QQj2+SY6oP/aoEjIJfp2n
wLZcfedJ2nt2rydAjKFnrRLPqNF8brPNI8GnPfsDayEzA+wuAnBd+hXEDLm2rMJZ
WakTEvVveTMPMtfgqXUReAHN/TfK5Lyh3bWZ7v+nucS1RHlsAtzJyWgMaRwsqHqP
LZ3z6HLImE+hnsLyGY1oeD8B89Wa8Gc=
-----END CERTIFICATE-----
Generated at Sat Oct 11 06:02:12 2025 by rpki-client