Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa
File:                     594c4987-02d1-3bc5-a8c0-729e094b6649.roa (raw, json)
Hash identifier:          OJ7YEu4FjNG8K0y5LlWsFvnzwZgtqyTgjNnoCBUyqn0=
Subject key identifier:   75:81:F0:AC:D5:D0:F8:B4:FF:FF:C0:53:A7:53:7A:AC:61:E7:EB:4D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435D6D582F4CEB021FE0380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d6:d5:82:f4:ce:b0:21:fe:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=02053fd5-b512-462e-b25c-5bd055b0a8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:4b:08:c0:70:1a:68:fd:98:57:6d:0d:15:
                    ba:f6:73:90:fd:ad:bb:de:3a:5e:8d:b4:04:a2:fd:
                    d7:17:0c:1e:3e:d8:5b:0e:5e:e7:48:12:7c:c3:99:
                    0f:97:10:36:f8:16:be:e7:3f:f2:7a:ee:ce:81:36:
                    8c:70:de:12:ba:a7:c0:b1:ff:83:61:f7:35:e4:9b:
                    a0:25:03:21:28:0a:19:e6:95:cf:3b:73:7a:d5:e6:
                    9f:c7:24:c2:5c:33:3b:d9:b8:4e:72:7a:f6:80:87:
                    fe:7c:f6:ce:9f:14:83:81:f4:c7:46:f1:02:e5:0d:
                    3f:b6:4a:d0:b0:c3:fe:fc:24:a5:cb:20:34:ef:05:
                    07:2f:52:60:1b:48:a1:64:2c:58:bc:04:e0:5c:4a:
                    02:4e:a8:53:62:8c:92:1a:4c:ed:c4:c1:a0:63:cb:
                    0f:5e:cd:97:99:4d:53:76:de:04:50:fc:22:31:91:
                    1e:61:47:c5:db:a7:3d:e7:12:68:c2:32:0c:59:29:
                    e3:2b:8f:65:c2:8f:c8:41:9e:26:19:7b:ba:3b:a5:
                    a0:af:69:9d:e6:7c:01:8a:0f:90:ab:a0:39:07:97:
                    f8:4b:9c:a7:f5:26:86:89:fe:7d:1b:66:d2:b9:4a:
                    d0:b2:a1:b1:1a:9a:9c:b7:55:13:ba:f3:49:f2:7b:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:F0:AC:D5:D0:F8:B4:FF:FF:C0:53:A7:53:7A:AC:61:E7:EB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:5c:29:13:5a:2d:19:ef:42:f2:10:04:02:01:50:dc:16:
         e4:40:18:bf:d1:8b:49:c6:2d:b3:c1:85:1c:e5:5c:65:f8:fb:
         5b:ce:2f:c0:8a:1e:a7:b7:59:71:e7:43:77:da:73:e5:cc:82:
         56:8d:60:8e:8f:60:c5:f5:bd:c0:74:e6:8b:90:13:ec:61:88:
         6b:8b:dc:e1:04:9d:2b:6e:78:84:30:c5:82:64:5c:b0:2d:22:
         75:45:f8:29:6a:a4:6f:38:f1:3b:98:c7:68:87:81:1c:22:29:
         25:2f:23:51:0c:1b:e1:31:38:2a:fd:88:ac:d3:b7:f0:9a:7c:
         6c:18:63:1e:5e:99:ad:6f:d3:66:6f:c6:9f:e2:9d:a4:1a:97:
         27:ad:f8:f8:60:7b:50:99:29:4a:39:c5:5d:d3:11:50:a6:6f:
         91:80:72:eb:5c:d6:fc:1a:b6:71:85:e2:34:8e:65:61:96:c5:
         94:f5:eb:c3:4d:40:46:c3:56:88:ae:8d:f9:af:fc:0d:a7:13:
         39:77:33:2e:0c:90:07:ff:50:ac:99:b0:26:93:87:df:35:44:
         21:09:6d:10:80:14:ed:c0:6b:3d:24:50:0e:13:0f:0e:c0:4d:
         c4:8e:24:40:c8:f0:e5:da:a2:46:07:85:5d:ad:8a:32:59:bc:
         55:d6:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:28:26 2026 by rpki-client