Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa
File:                     3785b371-e802-3801-bd81-df056b6e23ae.roa (raw, json)
Hash identifier:          v2AxGMHs57/9ymFNgxDvDqoPwbawEL70Pbjnquu++U4=
Subject key identifier:   BE:E9:5C:D0:8E:8B:EE:F8:0C:00:BC:95:B5:2C:8B:03:C1:0A:F5:71
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435F85726D31747D83CA6A0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f8:57:26:d3:17:47:d8:3c:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=1418f0f8-f6b2-47c7-8e55-9a027c1bf00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:17:9d:6d:f6:2e:3e:dc:83:87:70:e7:b3:
                    67:7d:11:72:00:57:74:f4:80:9a:25:30:77:b2:65:
                    df:e7:b5:db:5e:e7:4e:60:9a:d4:de:94:ec:30:51:
                    b4:81:38:6b:22:c8:b1:e4:1d:61:d8:26:3f:39:5e:
                    66:6c:a6:88:b2:d1:c1:58:3c:48:18:4e:0e:6c:4a:
                    82:9d:36:2a:16:e7:65:d2:e1:9d:fb:71:1b:48:2d:
                    27:28:ac:ee:7a:a0:d4:83:4a:b0:cf:0e:61:31:98:
                    f2:ec:8f:eb:1c:3f:a5:68:5b:7f:18:83:d8:27:34:
                    36:87:71:45:e2:c2:ca:9a:9e:4b:5d:16:05:61:53:
                    96:57:e3:89:cd:7e:9b:90:d3:ac:74:0b:a5:a2:24:
                    e5:a5:1e:d5:db:08:0c:94:8a:e9:d5:28:87:73:32:
                    1c:4a:72:05:ed:0e:59:20:b9:68:9c:a1:85:c3:5f:
                    9f:cb:d8:21:0a:74:9f:f0:82:39:bd:05:5a:c4:48:
                    e4:59:e2:74:fa:1f:c7:8b:3c:76:bd:ba:a6:cf:0e:
                    38:a3:eb:94:89:7f:a5:04:b7:13:1d:8f:4e:ff:74:
                    09:d1:ad:00:bb:76:ad:74:08:16:de:3c:a0:71:86:
                    32:4e:ac:e7:1e:66:ea:01:ab:19:7a:a8:54:13:a5:
                    ee:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E9:5C:D0:8E:8B:EE:F8:0C:00:BC:95:B5:2C:8B:03:C1:0A:F5:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:53:e9:28:be:50:35:17:3d:6e:45:62:29:08:17:05:d4:17:
         83:a0:3d:3f:3c:3a:ef:08:9e:9a:92:9c:7f:a5:34:a8:b5:6e:
         63:52:fc:d1:5c:d8:7f:7c:dc:df:e2:41:45:81:fe:0d:bf:91:
         6e:28:35:60:1f:1c:fd:5a:0d:81:c6:01:97:ef:60:65:41:fb:
         3d:3f:2d:c0:d3:5f:24:aa:10:19:07:3a:b8:f9:4c:c8:37:91:
         c9:34:de:0d:92:74:88:39:6e:27:5d:a0:e9:ee:5d:65:88:c8:
         72:21:f6:72:9e:20:19:6d:5b:29:59:d9:e7:6f:14:be:1a:ae:
         07:fa:ae:df:62:f9:23:19:e6:14:40:8b:b4:d8:3a:ba:d0:e6:
         9b:19:a3:af:b1:a1:7e:f7:82:85:3f:d4:7a:be:79:53:d8:ad:
         a3:c0:cc:0b:1b:52:d8:7c:10:cc:38:bb:e7:fa:85:29:78:44:
         d5:60:46:a5:6a:e6:ed:e8:2c:53:f6:c1:f2:06:0b:4d:42:33:
         44:84:6c:08:e5:67:09:66:16:b0:34:64:6a:69:20:74:12:0b:
         53:32:2c:c4:7b:0d:86:9d:20:63:9a:5e:85:ad:f4:c0:fd:87:
         38:1c:1a:07:2c:78:bc:b6:20:e6:22:f5:fb:b9:8a:9d:f2:c0:
         88:5c:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:05 2026 by rpki-client