Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a0e7eca-6b29-3bd1-a8ac-5dac3a0c253e.roa
File:                     8a0e7eca-6b29-3bd1-a8ac-5dac3a0c253e.roa (raw, json)
Hash identifier:          SinoiCrOsC3W7/i3+RdfZiBFClbmYQ5/YAxAdWFIsTY=
Subject key identifier:   20:9E:07:24:DC:24:22:C9:5F:A5:B1:FB:D1:72:D5:35:F9:00:52:8E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E043621F6B19289492D6D95C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a0e7eca-6b29-3bd1-a8ac-5dac3a0c253e.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:21:f6:b1:92:89:49:2d:6d:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=0782e3e9-17c9-4ae6-bce4-e1f4ae7baa23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:e1:cb:00:58:a8:17:16:2d:d3:62:4b:21:
                    28:0d:cc:3b:fb:20:e9:75:c6:d3:1c:ec:d8:ef:9e:
                    2b:12:14:47:e5:dd:70:a3:88:ad:bb:14:fd:8d:fd:
                    57:c4:7b:ec:e3:80:10:bb:37:9c:4c:88:f5:fb:5a:
                    35:3e:06:74:96:a6:3d:2b:5d:38:67:81:8d:d7:a9:
                    bd:08:cd:e8:f5:0d:a4:4a:37:fc:a3:cc:3c:44:9c:
                    b9:57:ef:d0:83:6a:f1:a6:fb:33:28:2c:97:3b:48:
                    e3:8e:07:7e:08:5c:46:8d:a5:66:88:6e:d9:9d:bc:
                    ab:0b:90:03:2f:15:9a:78:b3:44:39:d1:ab:39:2e:
                    e4:e4:10:59:bf:25:62:da:cd:a7:ca:fd:2e:d1:a8:
                    84:75:14:68:c8:3f:a5:d9:d7:58:82:e4:15:27:21:
                    8a:75:08:ce:04:f0:55:63:9d:83:26:60:ee:87:74:
                    ae:4b:7b:7d:e2:fd:27:5a:fe:26:86:27:68:b9:08:
                    ab:b8:84:b0:6e:0d:f9:3f:f9:53:27:c4:63:ba:a6:
                    1d:5d:6d:d8:c2:69:3b:e5:f7:57:b9:2c:9a:81:46:
                    29:1b:7b:75:22:70:27:df:c8:b1:0c:e3:61:fe:43:
                    22:29:f0:b4:1a:0f:22:d3:cf:8d:b5:18:21:c1:93:
                    ab:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9E:07:24:DC:24:22:C9:5F:A5:B1:FB:D1:72:D5:35:F9:00:52:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a0e7eca-6b29-3bd1-a8ac-5dac3a0c253e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:05:8c:c6:11:b3:6c:03:92:99:80:e3:34:e2:3e:63:fe:
         74:94:e3:cc:25:6a:98:da:84:1d:00:19:81:24:28:9c:a9:33:
         c9:28:a3:75:9f:76:8d:21:ec:10:15:05:57:03:fd:35:9a:e9:
         e2:a1:ca:c5:b1:4c:a6:65:5b:3a:ab:bb:54:f2:15:d9:bd:5f:
         b7:06:18:1a:74:42:b1:e9:7c:e3:b2:cd:8b:34:7c:1e:06:85:
         cb:ba:38:5b:b6:e3:e1:a0:e0:e8:e9:44:cf:39:84:25:d3:59:
         fe:60:a0:4a:35:e4:1d:7d:59:4c:c8:50:e7:dc:25:13:7f:4c:
         cf:1b:73:57:f3:2a:f5:29:af:c5:8d:b7:86:3b:b3:39:d0:63:
         24:a7:de:2c:de:f4:54:b7:3d:5f:28:78:d1:5e:43:b7:b2:e6:
         13:79:25:84:bd:b9:9a:ca:e0:6b:37:05:a4:32:e5:41:35:39:
         62:3d:ae:97:79:89:a8:64:91:7c:15:63:4b:e8:93:05:f2:cc:
         9d:fa:c4:60:e6:9f:b1:aa:c2:da:27:9d:6d:aa:fe:88:a5:3e:
         0f:7b:4b:6d:b5:0d:6e:74:6e:10:3a:18:d7:2b:bb:35:85:16:
         5a:aa:25:64:02:9c:c1:bd:b7:cd:63:47:80:b0:f2:cb:cf:a1:
         88:a3:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:06 2026 by rpki-client