Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa
File:                     31d6b714-fc08-30e0-80b0-f05d486bd52a.roa (raw, json)
Hash identifier:          0f0aFz/g8jxpPNCZzSKwGwh8wDi6Jh1e+LXsm4/WCRE=
Subject key identifier:   7C:B5:60:D8:F2:22:3F:15:C1:9F:7D:C7:7F:D7:CB:89:B6:7D:AB:01
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04362354EA5992AA847E1200
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:23:54:ea:59:92:aa:84:7e:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=7a30881a-975e-4f67-bc20-a36a87f82955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:59:51:74:72:b7:f6:a7:a1:67:44:85:4c:
                    b2:1f:97:26:16:c7:20:25:2c:e7:6a:31:1b:bd:d6:
                    68:d5:e5:36:47:72:6c:37:ab:46:b1:dc:b4:74:cb:
                    73:d0:9b:73:1f:dc:de:e8:6d:5c:92:14:1a:4f:57:
                    ed:c6:33:7e:80:52:c0:96:66:d3:f8:ce:c1:0c:96:
                    e9:d8:b4:8d:ed:8a:e5:40:70:43:35:60:42:e7:a2:
                    ea:c5:0a:83:28:1c:61:ae:8e:57:dd:14:ce:d3:5c:
                    98:1d:b4:dd:2a:38:70:77:8e:e2:a9:86:53:ee:cc:
                    1d:cf:0a:04:4f:fb:1c:da:79:ab:f0:4e:a8:8d:f6:
                    16:d8:8d:9a:8c:02:c8:f0:32:6a:f8:c0:21:e8:62:
                    30:57:d6:9a:03:ef:45:6a:01:1f:a3:4c:b8:0b:4c:
                    16:6e:c0:3f:8c:1c:79:7e:dd:47:d5:8c:41:10:5e:
                    8f:5f:d1:87:a8:43:83:45:cf:94:e1:51:89:9c:83:
                    48:f6:35:5d:07:21:3c:d5:ca:68:30:0f:96:d6:4b:
                    3b:a2:0a:af:17:85:0e:81:09:b0:98:a2:de:30:7b:
                    b7:6e:63:53:75:e3:d8:d5:fb:a6:68:69:b9:e4:e3:
                    0d:65:92:6a:c5:47:4b:8b:6e:47:2b:b7:29:33:1c:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B5:60:D8:F2:22:3F:15:C1:9F:7D:C7:7F:D7:CB:89:B6:7D:AB:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:07:25:21:17:61:ec:cd:6a:a5:38:5e:fd:68:61:33:cf:0c:
         c9:2a:1f:88:07:7d:a8:28:ae:fd:42:99:49:ee:1a:aa:4c:ea:
         be:af:f3:93:d0:85:de:b4:c5:4e:18:80:5f:55:93:b6:ce:eb:
         7a:27:2e:12:65:66:c5:c7:ab:62:47:63:6d:c6:fa:88:f7:48:
         77:dc:7c:da:45:9b:6e:4e:71:c1:db:be:ed:75:df:02:76:59:
         d3:52:00:5f:65:12:93:73:73:0a:fb:c2:0e:1a:15:16:af:5b:
         54:69:5d:1a:39:66:63:3e:cc:8e:01:0c:ce:f1:39:0f:00:3b:
         12:ca:c2:2f:6b:c8:8f:0c:87:85:a9:cc:3c:5d:b3:19:c9:7b:
         b3:d4:91:c0:33:37:06:f8:52:ed:69:9e:74:00:e6:24:28:72:
         5f:2d:47:5e:fe:29:e5:0f:71:9b:d3:5d:35:46:31:69:a0:7c:
         09:cb:2e:fa:a9:19:cf:95:14:10:ec:5a:9a:cd:3d:e7:d2:62:
         ba:db:52:bb:d5:88:24:38:bd:57:ba:18:5d:d8:de:2d:bf:03:
         a2:0a:82:5e:30:20:f2:c1:6f:2d:45:85:cb:87:76:c7:cb:5c:
         08:6c:43:29:eb:73:6a:16:61:94:18:f7:90:9b:cc:bb:2c:3e:
         79:a9:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:13:57 2026 by rpki-client