Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
File:                     f15a33ca-7a2d-307f-98ec-5856967563b3.roa (raw, json)
Hash identifier:          OepXEF2YWJdaqx3xvHDaIMy8mZAdGKx2naJ/KXRJi1s=
Subject key identifier:   D1:D2:86:68:AA:36:06:F3:B3:47:0D:4D:9A:E2:94:1F:F5:7C:48:B1
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584E6F3A4546031FDDA92A5FB700
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     54574
IP address blocks:        65.49.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:45:46:03:1f:dd:a9:2a:5f:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4e1ceaf1-4e62-4593-bace-1fed9272c5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:da:28:cc:ca:52:14:92:8e:14:9c:b3:f1:
                    99:d9:83:cd:ed:6a:35:1b:d0:7c:6d:24:2f:b4:9d:
                    10:a0:ea:96:5c:d0:9e:b3:a9:cd:bc:81:cf:bf:d0:
                    9a:1c:40:f2:a5:0d:0b:81:d3:cf:dd:dd:2a:81:4f:
                    be:68:5b:9c:2f:3f:0a:2f:fd:e7:ea:87:b9:59:f4:
                    98:aa:7c:21:0f:6e:c0:ab:2c:11:61:4a:1d:7c:76:
                    f8:87:2a:91:28:05:8a:70:8d:d8:e2:03:7f:ef:cf:
                    24:b9:0a:3c:c9:cc:a9:e0:af:45:c7:84:02:59:2f:
                    f5:cb:31:8f:44:2e:09:f7:91:77:56:f3:fc:ae:01:
                    e2:fc:b5:4c:8d:f3:a5:00:bc:91:3d:22:fc:71:f7:
                    72:2b:24:06:2e:c9:fe:61:99:eb:ec:25:53:e2:3f:
                    47:b3:7e:eb:29:4d:12:43:b6:7b:2b:9a:00:f3:6c:
                    e0:63:13:5e:ce:8e:7c:6f:da:00:ac:6f:68:09:b6:
                    fc:16:1f:4c:6f:a8:fa:97:68:e8:9b:9d:1c:20:33:
                    84:9d:0c:5d:bf:44:fc:38:ff:64:56:62:52:51:67:
                    da:93:9b:61:3a:cc:5a:07:6e:d5:01:b8:11:19:a4:
                    3e:69:b6:0e:0d:14:1d:f1:bd:b4:a0:1f:83:10:ab:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D2:86:68:AA:36:06:F3:B3:47:0D:4D:9A:E2:94:1F:F5:7C:48:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:0d:4a:24:73:84:a9:a5:91:d5:3a:fd:b3:ee:02:37:3a:
         3d:70:b7:47:7a:58:94:4e:21:b5:2b:3a:db:19:11:86:f8:bd:
         14:c1:4c:f9:c9:c0:fd:49:59:1b:05:8f:5e:59:17:65:d2:75:
         04:c0:d1:f1:10:5a:7e:ed:b7:91:5f:3d:95:dc:3b:dc:1d:94:
         af:1f:a2:54:6e:a2:b8:bf:c0:dc:51:9a:ea:f6:9d:23:94:40:
         94:c1:7a:92:56:6e:e6:bc:61:be:d4:97:9f:76:6b:60:59:ac:
         3a:6f:59:75:31:b7:4b:a1:20:64:0f:75:f5:92:4f:56:3e:f1:
         be:72:25:5c:c1:47:da:e0:5e:43:b2:69:d3:f0:63:d4:3f:4b:
         30:6e:e2:40:3b:9c:88:9e:06:ec:ca:56:84:91:5d:76:a6:1b:
         f7:72:28:b9:b8:30:b7:59:3a:6f:40:d7:80:e9:23:f6:8b:c8:
         5b:3a:8d:91:89:72:b3:c5:35:ec:bf:c9:f6:a8:72:61:85:85:
         02:71:e8:c2:b6:d8:bb:82:73:8e:e7:cf:24:d0:a7:46:94:cc:
         0a:9c:d8:22:54:2b:f0:f5:12:27:63:18:8a:29:3c:b6:f0:47:
         03:cd:b3:a6:36:e7:7a:4d:5f:d0:9c:fe:9c:9c:82:62:b4:40:
         ea:17:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 00:00:43 2026 by rpki-client