Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa
File:                     5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa (raw, json)
Hash identifier:          /CapFH5uEtI53VzLJUZgBCZ/9Rip+N7t933cqdlKvFk=
Subject key identifier:   90:84:C6:06:45:63:4B:3E:F6:2E:C3:77:7B:06:D3:A3:E2:2D:F3:18
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584ED001CE80CE8B5D06FB6ED0C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     13657
IP address blocks:        65.22.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ce:80:ce:8b:5d:06:fb:6e:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=c2f118d1-ba13-49ed-a03c-6eb94cb9cb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:9d:99:72:7b:f1:fb:39:ac:ce:2c:11:07:
                    2d:a2:91:54:d4:4a:5a:4c:72:d8:6e:23:99:5f:14:
                    ea:26:df:71:d8:d7:b1:ea:1f:cc:a4:5c:73:2f:df:
                    71:0d:ea:52:2e:9e:79:58:35:91:b9:7b:fc:1c:27:
                    4e:ff:16:4e:db:2d:30:aa:95:44:6f:d2:5a:ee:03:
                    7b:01:10:99:fb:07:b5:7a:6b:28:9a:3b:9a:c2:1a:
                    e7:1e:ae:48:a0:46:37:bf:0a:31:d6:0d:62:26:44:
                    da:8b:33:f3:9b:10:6f:4c:97:12:f9:86:d6:40:19:
                    c6:2a:75:8f:f6:20:0f:65:60:4a:72:40:6c:09:d5:
                    02:b7:3a:46:d7:4e:af:ca:28:e7:2d:09:e6:a4:3d:
                    f0:92:21:d0:a9:bf:eb:e0:ea:cd:d8:00:05:8b:e1:
                    6b:40:86:da:aa:61:a0:dc:1f:8f:f8:ca:83:6c:84:
                    36:17:7b:01:a7:a8:45:93:be:2c:02:ba:2a:c8:f8:
                    b2:b2:9b:6f:11:4e:b7:62:8b:9e:d7:65:63:6e:ba:
                    c3:5c:59:b4:13:73:69:ff:33:31:ae:40:98:f6:71:
                    6c:3a:1d:20:23:09:da:c9:ad:f0:62:c2:7f:8a:a8:
                    d3:65:52:71:bb:f8:3b:a8:5c:1c:b0:9e:59:89:4f:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:84:C6:06:45:63:4B:3E:F6:2E:C3:77:7B:06:D3:A3:E2:2D:F3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:29:3a:7c:b1:b6:1b:a5:a4:b5:c8:c8:1a:c2:10:d6:1c:0f:
         1c:88:75:98:62:b1:50:e0:ab:7a:8c:52:2e:ce:ef:ac:b6:34:
         81:d8:90:ee:c2:21:f7:a1:2c:aa:7d:b6:69:fc:49:99:24:45:
         52:b1:3e:fb:e0:83:51:7e:1c:5a:a6:35:04:8c:ad:b3:b1:60:
         2e:07:54:bc:29:e3:8d:d5:90:17:69:73:21:7b:9c:6c:ce:b8:
         ae:a0:26:a5:7f:36:3f:7d:28:6a:fa:33:ba:a6:25:db:2a:1a:
         33:c5:53:12:90:9e:8a:59:76:a1:a6:d1:a4:4e:b6:62:cc:23:
         92:eb:b4:b9:da:bc:a3:7d:25:ee:c5:16:31:90:54:a8:a4:8c:
         99:cf:51:14:af:8c:cf:ba:0b:f2:59:ad:2e:28:68:9f:27:29:
         8c:f8:36:b1:fe:94:a2:a3:63:64:21:dc:b0:88:21:db:94:36:
         0b:df:96:c9:82:43:f1:2f:00:f3:2e:bd:8c:5d:66:1f:ac:20:
         3e:78:69:e3:d8:54:2c:19:fb:90:88:d7:ba:5c:e4:e2:69:c6:
         3f:f7:3f:0c:05:3b:5a:b9:8e:e9:8a:ba:2a:16:e4:13:64:32:
         f8:fc:14:bd:f1:f2:7d:8b:20:57:6a:69:e8:80:98:d7:c0:29:
         9c:ca:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:12 2026 by rpki-client