Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/77e2c06b-2e8b-3427-a3ac-ed400c188476.roa
File:                     77e2c06b-2e8b-3427-a3ac-ed400c188476.roa (raw, json)
Hash identifier:          ZvisX39c25JOtbQjH4mhkqu8p4u4ZmnHtPj7Vc11Mv8=
Subject key identifier:   1C:20:3D:87:85:E3:47:9B:17:03:61:54:F9:B6:FB:9C:F6:9C:78:DF
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435D37BE008FEF99AE5B560
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/77e2c06b-2e8b-3427-a3ac-ed400c188476.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     207266
IP address blocks:        65.22.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d3:7b:e0:08:fe:f9:9a:e5:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=9c7f4b44-f285-4bd4-a80f-ca009d74a8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:a7:f8:99:d1:f3:59:f0:c3:8d:95:6f:73:
                    74:30:c8:26:80:c2:27:26:a7:63:e6:ce:de:3e:56:
                    b4:d2:b8:c3:c0:10:eb:a4:ed:55:c6:f9:91:81:c9:
                    e9:7d:15:28:8e:31:cd:52:38:fb:a5:06:11:b4:a7:
                    81:e7:d1:27:d5:71:e2:19:60:2f:47:49:26:03:83:
                    be:9c:e9:9c:5b:52:46:fa:58:1d:44:7e:21:2e:3e:
                    28:ee:18:f2:c8:45:aa:a1:20:60:0b:27:39:49:74:
                    13:9a:ab:54:ef:20:f2:80:60:5b:a2:a9:00:71:80:
                    e9:26:6b:91:f9:50:1b:25:77:bd:9b:47:35:dd:b3:
                    d8:32:7b:a4:37:16:86:4b:51:df:da:df:d8:d7:75:
                    ac:4a:09:88:88:69:87:fa:f8:3c:bb:93:2e:bd:5b:
                    12:0b:8e:2d:2b:6f:bd:26:5f:85:3f:52:fb:3a:f6:
                    6a:3c:ab:3d:0f:3e:fd:8b:2b:fd:cf:81:6a:f7:a8:
                    74:20:e5:2a:9c:8b:55:f9:f1:51:83:f0:ba:f6:da:
                    f0:8b:cc:32:16:08:89:6b:26:b9:49:9f:d9:b5:7c:
                    98:c0:36:fc:d4:14:c3:3b:4f:a2:6c:eb:02:3b:f7:
                    86:ce:2f:e2:db:d3:da:4a:08:dd:de:07:6c:2d:36:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:20:3D:87:85:E3:47:9B:17:03:61:54:F9:B6:FB:9C:F6:9C:78:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/77e2c06b-2e8b-3427-a3ac-ed400c188476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:07:5d:84:76:da:c5:f7:42:4f:4d:1d:55:95:c9:80:fc:
         c2:b2:68:34:2b:85:c0:8d:01:bd:20:da:64:d9:1c:13:b0:f5:
         65:8e:e8:0c:54:17:9f:6c:a8:6f:e5:38:3f:d9:c7:4f:24:52:
         8d:21:c0:49:13:87:58:47:1e:3f:08:90:06:e9:57:31:de:aa:
         47:e0:08:b4:5e:f1:c5:9f:37:aa:4d:30:68:7f:ff:48:70:4e:
         f5:b5:50:66:59:74:e9:82:8c:9b:0f:f6:aa:dc:b9:4d:17:44:
         42:32:e0:15:40:c9:eb:9b:06:b3:24:a4:5c:36:0f:22:fe:3a:
         21:51:6d:58:10:cb:69:ca:56:a3:6f:d3:51:3a:23:ad:80:71:
         37:8f:56:e2:95:06:66:dc:32:05:53:ba:a6:1a:17:ca:74:96:
         e8:c5:30:ce:52:49:89:d3:d6:41:12:02:e6:eb:33:dd:52:58:
         4c:3f:31:9d:71:9c:fd:13:90:7a:cc:47:47:b9:1c:8e:6a:dc:
         05:72:9a:42:99:2e:f6:a5:21:b7:f7:7f:29:47:fd:90:d6:d2:
         96:67:1f:b4:21:b2:74:61:25:87:07:67:f5:0a:13:a9:81:15:
         ab:42:c1:59:a8:41:72:3e:ae:e0:98:36:e6:6e:a4:e8:cd:3b:
         75:d3:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:02 2026 by rpki-client