Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa
File:                     7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa (raw, json)
Hash identifier:          aENcVDddtyBR7GVXO3erPi+c5KuCMhQYE/RWuY6bAAI=
Subject key identifier:   CD:BE:8F:01:9D:2C:9D:F3:40:70:E6:C6:0E:E2:75:43:48:14:F8:C3
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04361AEA05E324A6F1CD6F48
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:1a:ea:05:e3:24:a6:f1:cd:6f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=1a806c67-aef9-4479-8975-ca1dac8d46ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:63:27:ec:b3:a6:54:65:9d:9b:b3:db:66:
                    c9:4c:4e:63:18:cb:be:ae:b0:53:c1:08:0e:53:95:
                    ee:6e:b0:3e:b6:a7:f3:ae:b3:a0:c6:af:19:2d:6c:
                    7d:42:2c:ef:6f:12:7b:21:82:77:8c:28:5d:8f:4f:
                    08:50:6c:bf:f7:69:bc:e3:e2:80:34:77:69:90:f8:
                    16:71:95:85:9b:73:d0:c4:6d:52:87:bc:ec:51:36:
                    03:4c:42:05:40:74:e0:16:6d:a4:f8:18:a2:e4:00:
                    5e:e3:39:3d:8f:3d:5e:dd:1b:d5:71:8a:ad:05:af:
                    1b:88:19:04:d6:e5:d9:be:38:7c:2b:99:9b:e9:23:
                    cb:b8:82:a0:21:03:99:69:9d:29:a5:dd:7b:74:43:
                    7b:65:67:6f:09:37:3b:e0:54:8e:0f:a3:a8:fd:87:
                    64:83:4c:25:0f:56:97:34:4c:12:24:d2:e9:f5:36:
                    6e:9e:cb:63:67:cc:75:2f:d5:fc:7f:52:47:48:69:
                    a7:b8:9c:50:54:5d:0f:b4:67:b6:5f:b3:7e:f9:1e:
                    84:e6:63:37:36:80:bc:9c:05:4f:07:e1:3e:00:ce:
                    d4:08:5a:29:c0:73:bf:e7:e2:b7:41:a4:fb:83:b8:
                    94:92:84:d4:14:23:b1:7f:17:d7:fd:df:7d:6e:05:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BE:8F:01:9D:2C:9D:F3:40:70:E6:C6:0E:E2:75:43:48:14:F8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:77:5a:f7:74:e7:d2:ac:79:ff:cf:79:8a:c8:e7:7d:b2:c5:
         1e:e8:2e:aa:d1:98:b9:86:11:4c:cc:90:34:5f:1c:1e:5b:b1:
         26:49:0b:f5:33:c2:8f:b5:e8:c3:5d:29:3c:23:ab:71:dc:ec:
         1d:3a:e1:03:fa:d6:b2:74:d4:9a:80:d0:b2:48:25:79:99:16:
         b9:4f:74:7a:59:f4:40:57:9a:58:64:23:e9:4a:28:48:3b:f8:
         6f:e3:cd:b5:da:f0:e2:cd:33:d6:2a:c3:da:50:71:98:2c:f4:
         41:0e:24:21:40:21:48:6f:22:35:c5:cc:39:e1:2c:73:a8:d3:
         13:e8:df:98:d7:d1:23:34:0e:07:f8:be:71:df:62:fc:f2:87:
         79:c9:0b:ef:bc:17:3c:31:4a:46:bc:9b:c4:7b:5a:0c:bd:7a:
         ee:a5:4a:27:a7:dc:47:f3:ca:e0:50:0e:71:75:81:2b:14:73:
         42:7f:a5:17:e5:6e:1e:12:65:81:1c:78:7b:ac:c7:80:4f:5e:
         4b:38:3e:13:bf:14:7c:7e:a6:64:7a:86:6d:20:c0:ee:d1:bc:
         bd:75:8c:03:96:21:4e:0d:28:da:46:3a:f5:d4:9b:0c:45:2b:
         cc:7f:85:89:78:06:6c:71:10:74:30:71:de:99:33:28:34:4e:
         78:70:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:23 2026 by rpki-client