Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa
File:                     05076cad-cb47-3d06-82b6-3e54446be25f.roa (raw, json)
Hash identifier:          Yy+dALJbLc/P5LAGIDjMJiWRZcAy/oIo4517We3FqQM=
Subject key identifier:   1C:79:EA:6A:63:2E:EA:6B:98:86:B9:18:5C:58:8C:F8:03:3C:81:6B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435F17A3C3BFACB6D509500
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f1:7a:3c:3b:fa:cb:6d:50:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=2246d937-6058-46ec-92b1-c24ba425c504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:df:0a:94:ae:23:37:12:b5:7b:6b:c9:76:
                    34:9e:29:27:4a:92:c8:17:21:92:da:38:d6:57:49:
                    76:a1:c9:b0:2f:80:fb:05:88:d1:c0:02:74:ba:58:
                    ca:82:a0:21:cc:86:d0:73:a9:d2:35:b8:56:f9:f7:
                    d1:ff:05:64:eb:5b:6e:66:cb:3e:cc:ee:b7:0a:cf:
                    b8:2e:21:70:99:82:e4:2a:81:b9:fe:0a:e1:43:0b:
                    17:c6:7d:ff:fd:3a:6c:d3:d4:43:77:09:1d:60:69:
                    0e:67:8a:b1:da:95:04:60:6a:5f:c0:41:2a:2c:0b:
                    0b:0f:20:a0:d7:0b:87:d4:05:59:4c:31:6d:87:18:
                    43:a3:9f:0b:6c:91:71:b3:dc:0e:bf:46:04:d9:73:
                    8d:62:9c:2f:98:97:2a:6f:56:6a:02:42:4d:21:8a:
                    f7:f9:22:f9:13:cb:e8:3d:f2:d9:35:34:1c:4d:0a:
                    3f:75:5e:31:b8:80:2f:39:1d:0b:23:ee:c8:1a:bb:
                    73:b3:97:f1:2c:4f:c2:d2:77:53:88:72:e1:2d:27:
                    95:8a:89:b1:da:e9:62:af:ee:c2:24:5b:26:76:eb:
                    6f:60:1d:8b:d6:b2:7e:c8:48:a3:33:81:97:0d:04:
                    08:4f:10:c2:fd:4b:c0:96:a2:55:b9:38:bb:4b:58:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:EA:6A:63:2E:EA:6B:98:86:B9:18:5C:58:8C:F8:03:3C:81:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:f0:8d:3d:64:03:65:bf:d5:93:3c:f6:35:a9:ec:fd:0c:
         43:cb:c3:79:7a:1c:9d:f0:ba:af:bf:b7:21:bd:1f:2a:13:08:
         b9:f0:0b:c2:8a:4a:10:19:4d:2a:9b:6b:df:81:53:85:d6:06:
         bd:09:80:f4:69:89:d4:fd:88:18:9d:f0:5d:93:eb:b9:ba:bf:
         ff:bd:d3:be:66:8b:44:72:3e:18:05:a5:53:57:39:9b:74:9f:
         e3:b8:cb:d6:c4:0a:56:69:ee:9c:ab:35:59:ab:21:f7:68:af:
         98:70:6a:fb:37:b6:4a:78:25:2d:7d:f6:53:8e:65:6b:bc:3e:
         70:c9:f1:32:90:af:65:0e:f0:bf:48:6c:c3:a6:72:4b:1e:15:
         99:8a:a5:7f:f8:f8:4d:9d:4a:a5:c1:e6:25:80:f9:f9:45:35:
         b4:70:7f:b3:39:3c:fd:18:1f:32:a9:bf:57:8a:c4:e5:85:e8:
         5a:14:1f:7f:83:ab:bb:54:b7:6d:64:c1:90:ae:52:82:2b:f0:
         c6:2f:63:55:ea:83:58:3f:0d:b1:75:26:81:81:1b:41:b8:bb:
         f6:69:bb:af:de:0b:bb:e7:1a:4b:b5:22:02:58:89:7d:c6:e1:
         c5:df:89:a6:ba:80:69:12:07:4f:56:1a:a7:01:93:4c:0d:9e:
         a8:b7:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:10 2026 by rpki-client