Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
File:                     307496da-fe61-363a-a8e1-2546045308d5.roa (raw, json)
Hash identifier:          kvm1rJP6N9gypMl5oJpkKqiiJ1BIpDUojtJtVcsBSSo=
Subject key identifier:   F6:AD:F2:FE:36:F5:AF:4A:87:64:36:AD:AD:05:4D:D9:49:82:A2:5D
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584B970CE9094979312242D8B180
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     12129
IP address blocks:        199.249.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:e9:09:49:79:31:22:42:d8:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=5336b97b-11c0-4075-892b-7efccdcc7e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:0a:f4:50:cd:c9:62:1f:dd:41:14:79:55:
                    cb:84:91:c1:0f:2d:0e:96:b0:a1:26:88:72:31:cb:
                    d6:09:77:87:33:60:62:73:94:d7:92:7c:fd:64:4a:
                    62:33:97:f7:07:fd:11:d5:01:a1:1d:65:b1:6a:8a:
                    bf:8b:94:66:e2:0d:53:81:b1:c9:32:54:47:d4:50:
                    e7:7b:46:88:b7:ce:f5:8d:69:79:c8:b3:c2:5f:a2:
                    9b:9b:aa:d8:29:3a:d3:68:b8:ce:d2:57:a7:88:81:
                    38:6e:e5:64:c7:7b:cd:c6:0a:d0:43:a9:bc:bf:1e:
                    4d:ae:b6:fd:45:1e:98:e2:54:59:05:25:ae:d5:c0:
                    2e:77:e8:a6:96:b1:56:6a:27:9e:11:cf:b3:34:2b:
                    16:30:5e:6b:89:9d:04:aa:57:16:68:71:99:a1:ba:
                    73:fc:c6:22:02:06:f9:01:38:e3:72:e9:04:fd:d9:
                    86:51:5e:82:8e:26:f3:71:be:63:b2:05:d1:1b:29:
                    dd:97:ca:ef:22:36:21:2b:d3:1c:76:ec:ec:93:0e:
                    38:2c:cd:0f:dc:52:00:77:80:6b:f7:ad:5c:7d:a1:
                    12:61:c7:e1:d0:10:66:19:4f:78:7d:49:81:4c:d8:
                    a5:6a:9a:12:43:74:c9:f8:64:8a:5c:71:72:26:1f:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AD:F2:FE:36:F5:AF:4A:87:64:36:AD:AD:05:4D:D9:49:82:A2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:1d:4f:97:f5:17:42:42:e6:1f:13:b0:f1:10:54:f9:fc:
         d4:df:0e:76:d4:cd:2e:d2:ae:9e:49:ed:67:e0:a3:68:ae:07:
         2c:ea:39:cc:79:f8:1d:ae:50:fa:98:9b:56:95:61:a0:74:e9:
         df:26:0b:de:e3:11:d6:50:8f:cb:8d:91:64:cd:ec:43:83:36:
         57:a1:29:1d:ad:e4:3c:18:a2:49:af:c7:5d:9b:27:89:e4:ed:
         5d:a5:95:4a:39:ff:89:f1:a8:0a:e4:3c:2d:6b:b4:e6:e8:ec:
         31:3b:ad:dc:d0:79:a3:ce:c8:fc:37:4f:0e:95:2b:e3:56:18:
         52:b4:90:4d:70:10:e4:cd:b4:8d:23:6f:06:b2:f1:a2:a6:a0:
         54:67:6d:77:0e:08:06:38:1f:72:4f:92:77:11:5f:15:60:03:
         e8:5c:9c:45:92:59:bd:f5:d6:a3:8b:48:28:ad:5b:95:d0:68:
         42:3b:d7:42:2e:df:cc:56:0a:00:4f:b6:6b:ae:86:58:db:fc:
         9f:1c:85:ab:1f:4d:0f:da:02:b4:78:a7:bf:d8:14:c0:45:8e:
         78:1d:cd:f7:6e:6e:7a:50:3f:6c:a9:49:de:91:3a:d1:10:62:
         49:b0:d4:3e:0d:36:f5:e5:5a:83:38:e8:39:bb:3e:b2:d3:91:
         df:58:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:09:46 2025 by rpki-client