Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa
File:                     67f127cc-42f3-3968-aa83-c00b42c7d793.roa (raw, json)
Hash identifier:          +LIF+Holf9N+Ivbe/MjcuEbBxrb6xYN4hVudushiqi0=
Subject key identifier:   55:09:2F:E5:6A:EB:B0:DD:F5:F0:26:04:08:93:A5:73:04:1E:F9:00
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04362EAC660E0324231D1480
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:2e:ac:66:0e:03:24:23:1d:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=2317c81c-787a-430b-ac48-c8985855604b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2a:b8:b9:d1:80:47:fa:6b:da:aa:15:33:5c:
                    d9:58:c2:7e:62:d7:bc:03:db:e9:7c:aa:08:fa:05:
                    f5:07:42:ae:0f:3a:c5:7e:1f:6a:8d:84:95:83:ca:
                    c9:67:e5:45:60:6e:7b:b1:aa:8b:49:bb:df:e7:40:
                    9d:38:47:c3:ab:aa:08:eb:d8:bc:7a:35:96:e8:ea:
                    79:e6:68:be:f9:0f:f6:31:2c:e4:62:4c:b1:44:6a:
                    82:0b:3b:8b:c3:e6:d6:5b:65:7b:66:8e:1e:57:38:
                    37:cc:37:b6:63:b3:e3:c2:f5:13:0d:5f:ac:91:cb:
                    53:6b:87:cd:b6:9a:8f:c9:56:a9:ad:bf:16:d6:78:
                    9d:24:0d:76:70:86:55:71:c6:22:64:23:3e:79:c7:
                    8b:6a:6e:cc:36:75:ca:2b:be:6c:21:71:27:5d:c7:
                    49:25:cc:8b:9b:44:d8:ee:99:9e:d6:9d:28:f2:50:
                    e0:f5:9f:4b:42:bd:f3:33:ac:6b:83:89:c9:e3:12:
                    b6:01:1c:23:90:41:09:4b:f7:e6:88:5f:5c:0d:bb:
                    e8:24:1d:40:64:70:03:81:0f:df:78:57:38:6b:d8:
                    a8:11:15:0e:97:87:74:79:4e:23:4f:9d:af:af:3e:
                    f8:24:92:df:7a:40:0f:98:ae:4e:a7:74:17:dd:87:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:09:2F:E5:6A:EB:B0:DD:F5:F0:26:04:08:93:A5:73:04:1E:F9:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:d4:c0:a1:8b:eb:41:f2:bc:5e:3a:47:0b:81:a4:5a:50:
         57:08:a7:df:5c:8e:88:4d:bc:6e:d6:71:8e:2c:76:53:cb:7d:
         3c:4e:31:36:09:38:78:a8:08:0c:36:0a:d2:3c:00:78:7c:21:
         f4:7d:b4:21:a4:ff:2b:e5:b3:0d:b9:7a:41:ff:11:61:69:64:
         6a:94:d9:ae:69:1b:21:65:9b:46:9f:ab:72:8d:1e:05:e0:a8:
         90:10:5f:0d:75:6c:8e:4d:af:05:c2:a2:cf:70:df:6f:72:13:
         8c:4c:e9:f5:b2:ab:ee:20:01:ff:71:b0:98:c3:78:6f:c3:70:
         32:85:78:0c:24:01:ec:a1:b6:5c:6d:87:9d:6f:34:49:d9:1e:
         7f:3e:ec:88:9b:15:d1:9a:ab:e8:bc:d4:e9:66:2a:20:61:bb:
         fb:56:68:00:82:c3:e0:df:9c:3d:16:53:ee:5e:3a:2d:a8:5e:
         b3:70:c4:0d:a2:f9:0a:ae:56:89:a5:1e:e8:18:a6:92:39:be:
         1e:26:a7:e3:3e:26:8b:6b:e7:50:65:8f:1f:db:5d:7b:68:3d:
         58:30:ca:ac:eb:0a:82:6a:16:a4:00:12:6d:1e:37:64:4e:68:
         18:e2:67:80:7c:20:76:d1:2d:b9:87:c8:47:34:8c:24:fe:7c:
         e0:ea:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:35 2026 by rpki-client