Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d9ecc83-c464-3502-b299-89914ca8cb6d.roa
File:                     7d9ecc83-c464-3502-b299-89914ca8cb6d.roa (raw, json)
Hash identifier:          fsICVXgHacxeNPOF923m+/0WJX7Tmd4U2WyTxgm8cO4=
Subject key identifier:   B1:D9:51:30:11:B5:CF:C6:EF:4B:CE:1B:EE:5D:21:A5:85:4A:8B:1F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435FE7F9935096F963A1880
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d9ecc83-c464-3502-b299-89914ca8cb6d.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:fe:7f:99:35:09:6f:96:3a:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=849640c8-e3d8-498a-85d2-76b38fe49962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:7c:5e:a1:c1:11:d5:a5:83:8c:99:47:43:
                    7a:69:38:e5:18:e4:54:d0:f4:66:6a:c5:ce:8d:2f:
                    30:17:80:e1:0a:84:c2:55:47:e0:03:64:03:34:fa:
                    6b:be:3e:e1:f3:04:98:c8:f7:05:df:7a:8e:71:42:
                    65:de:fe:26:5c:3e:5e:e3:be:81:c5:04:cb:df:62:
                    ca:0c:c0:3a:4d:66:1a:d0:ef:ed:a0:4e:bd:10:fd:
                    7d:7f:72:24:66:d5:fa:38:8d:0d:04:fa:65:a4:c4:
                    e4:1f:43:fe:9c:12:49:50:8e:71:e1:3c:5f:5b:4c:
                    d9:34:47:db:9a:f7:16:39:c4:e5:db:3e:98:05:2a:
                    a9:b2:47:0e:06:bb:bd:b9:df:fa:54:7d:0c:6a:47:
                    37:94:ad:ea:b9:02:ce:e3:3e:98:f5:61:93:12:2a:
                    69:72:e3:81:aa:65:6d:26:32:27:df:71:83:74:79:
                    db:88:37:cd:f8:f4:c8:92:7b:c0:62:7e:ec:b8:43:
                    92:fe:fa:07:4d:2c:4d:4e:33:2d:c5:c2:df:a6:77:
                    55:ca:39:f0:4b:a6:fd:d4:5e:d1:f7:5f:57:f1:3b:
                    aa:a5:27:f9:a4:c5:85:d6:25:0d:fa:01:ac:eb:3c:
                    7e:aa:1e:ae:ab:2a:af:13:9e:3d:fe:6c:ad:9e:58:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D9:51:30:11:B5:CF:C6:EF:4B:CE:1B:EE:5D:21:A5:85:4A:8B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d9ecc83-c464-3502-b299-89914ca8cb6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:b4:cf:46:c8:60:16:24:9a:36:b1:3c:85:bb:60:0f:d0:
         ce:7c:05:72:ca:ee:d1:c8:c5:89:8d:d3:7f:c3:56:d1:8d:eb:
         cf:d0:7a:ee:22:36:a2:96:af:9b:cc:40:7a:53:3b:7d:f8:09:
         a6:9d:d3:c0:72:ce:55:b9:d4:22:e5:56:c3:d9:ab:31:f8:c6:
         12:9e:a1:13:c5:1d:0d:32:26:d6:e9:5b:94:2a:05:a4:66:14:
         ba:fa:bb:ad:09:1d:c0:ec:31:5c:af:95:70:ee:ef:f9:c4:a3:
         fc:4d:72:84:4c:4c:79:0a:1f:c5:7f:12:3e:30:f3:5d:4c:55:
         3f:75:09:ab:6b:4e:3e:25:ee:6f:a9:0a:04:86:f6:62:32:9d:
         b6:89:50:8b:4e:a7:0a:a5:b0:35:8d:91:65:0f:a3:90:d9:b0:
         04:42:b0:9a:8c:06:18:d7:d7:f5:a2:fd:af:fc:66:a4:e7:8c:
         fb:a8:09:8b:60:07:34:0d:d8:8b:6c:4b:56:2c:be:8c:fe:bc:
         bb:97:10:09:93:8d:9a:a7:a3:e6:27:58:73:ff:e1:d8:de:d4:
         f0:ab:91:40:5a:9d:d3:c0:cc:eb:00:fe:42:3d:5f:86:be:61:
         3f:e5:03:62:cb:b3:00:de:78:51:bd:8d:1a:ea:de:ba:4c:14:
         04:20:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:01 2026 by rpki-client