Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa
File:                     d5b724de-9f61-31f2-b085-181a0a9d1526.roa (raw, json)
Hash identifier:          yHgdz30PhP7wlJAQgZtf2kYzpgxwG0GQz6P/e3/mV5s=
Subject key identifier:   FC:E9:02:A4:C0:8C:23:21:6B:E3:F3:D7:07:7B:DA:7E:39:34:36:C3
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435D591DA4ACD64CBD414C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d5:91:da:4a:cd:64:cb:d4:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=591a92ff-4bee-4959-9be0-19d0dd2fb0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:0b:96:59:a6:b3:e5:15:fa:ba:9f:d5:8a:
                    39:e0:aa:94:9c:91:ec:f4:db:70:cc:8d:9a:67:29:
                    c7:af:b1:cd:3b:de:f4:fe:d7:56:ab:5e:e4:f6:2b:
                    9d:e5:30:5c:46:97:5c:ea:68:3d:df:e9:e3:93:f9:
                    a0:51:b3:90:66:1d:16:0e:75:06:d7:2c:4d:7e:14:
                    a9:13:7e:b0:f4:ba:c2:0f:72:f8:9a:d1:ff:4c:d7:
                    df:ed:d1:95:14:fc:1d:8a:ab:01:49:50:fc:e8:de:
                    b9:10:59:f1:e1:e6:91:f8:e1:75:65:c3:dc:85:32:
                    be:6a:89:2b:2d:6e:42:5e:13:3b:60:f7:bd:b6:d4:
                    26:8c:55:08:3b:71:29:d2:ef:69:6a:3f:89:09:20:
                    09:99:33:1a:43:65:47:98:92:85:cb:6d:08:3c:55:
                    77:55:89:a3:2b:40:cd:3d:7c:4e:39:73:1a:6e:a5:
                    65:e4:8b:f2:b9:ec:70:0d:60:d8:34:7b:23:cc:bb:
                    39:35:57:46:c2:8f:dc:e2:8d:a3:f9:f9:b7:0f:65:
                    f0:93:68:11:e3:ec:70:f9:aa:67:4d:b1:d7:10:a6:
                    fd:b9:dc:84:05:cb:15:2f:18:99:9c:47:f1:bd:28:
                    8b:0b:d1:c4:46:15:c8:46:92:57:af:69:c2:f8:f1:
                    97:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:02:A4:C0:8C:23:21:6B:E3:F3:D7:07:7B:DA:7E:39:34:36:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:0b:0d:10:c9:4a:43:6e:2b:d8:35:ea:3c:d3:11:39:80:93:
         dd:de:b0:95:9d:a1:c8:99:0e:d4:0b:8c:26:fd:a7:a0:d1:91:
         2c:37:9a:77:f9:54:f7:dc:38:60:14:0e:68:6a:57:be:79:8d:
         5e:b3:50:41:47:b0:1a:37:e6:08:7a:32:e3:b9:89:8f:dc:8e:
         8f:c8:4c:fb:d0:86:2f:75:35:04:e2:94:37:65:0c:b7:b7:c4:
         07:f1:41:48:39:1b:c7:1c:fd:93:e3:08:ca:e5:ce:a2:65:2d:
         71:8d:9c:3e:df:97:c2:f3:b4:87:04:95:89:ba:d7:18:25:5f:
         8a:3b:e4:60:50:22:8e:88:ab:ea:ed:c8:6e:f3:8a:73:41:99:
         15:95:99:60:a1:91:9b:52:48:87:8f:91:37:1f:01:f7:b4:c6:
         e0:fb:aa:b6:a1:80:5b:62:ed:65:c8:d5:68:48:4b:88:04:43:
         7d:a5:f3:00:07:6e:d9:bb:4a:42:a7:b5:13:21:68:cc:46:34:
         fb:2b:de:f3:fd:bc:09:1a:3b:b0:82:b7:d4:45:a6:88:80:4b:
         84:3d:5c:01:1c:3d:1d:17:fb:e6:85:7b:31:b1:3c:ed:9d:3a:
         27:8a:af:dc:ad:f2:25:c6:29:f4:a6:7f:cc:d9:60:52:b1:89:
         f7:07:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:26 2026 by rpki-client