Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e16a6003-d6bd-3d4f-a7fa-b048749f627c.roa
File:                     e16a6003-d6bd-3d4f-a7fa-b048749f627c.roa (raw, json)
Hash identifier:          rKR3agm5VsS4Q5KjeBYDItlXNJLEKPmoDlJY0QkDLnU=
Subject key identifier:   BE:8F:3F:1C:ED:1B:70:C7:6C:F7:AF:B7:DB:42:7A:54:63:7C:41:BB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04362851889B5F7BCB2E4E40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e16a6003-d6bd-3d4f-a7fa-b048749f627c.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:28:51:88:9b:5f:7b:cb:2e:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=ddd49ee3-047c-41e3-89c1-20f1abd337f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:61:aa:77:40:6d:cd:f7:c5:4a:0d:08:70:
                    3d:9e:d5:73:3c:0d:80:eb:d0:d7:5d:77:ba:fd:ea:
                    98:fd:a0:bd:e0:bb:c1:e9:e2:1a:de:3d:df:99:16:
                    a5:1b:c1:38:f2:e7:3b:94:5a:d3:ff:c7:35:3d:a3:
                    dd:b9:cd:08:0e:7c:ec:ce:5a:c6:fb:24:d8:14:27:
                    82:1f:7b:cd:28:0c:b1:0a:c0:93:04:61:d5:f4:8a:
                    54:e7:57:f3:ca:91:8c:8d:ff:5b:e7:58:b0:93:9a:
                    14:3c:fd:d5:7e:6c:35:05:ea:c5:c0:87:17:60:a2:
                    1e:e6:b1:db:c8:57:ea:52:83:7f:36:0a:9f:d2:bb:
                    08:60:02:8e:8f:9d:3f:4c:42:ac:e9:81:ee:89:50:
                    8d:b5:32:bc:7c:fe:2d:85:87:9f:f2:64:f5:71:c3:
                    8d:2f:88:99:e6:57:a2:d2:92:35:5e:d2:87:a1:d0:
                    c7:e9:b6:23:18:ad:80:a3:55:4c:a7:86:e1:22:2e:
                    2e:00:bd:35:1b:c0:6f:bc:78:aa:66:ea:5e:da:81:
                    da:b1:46:db:16:3a:4c:04:63:d5:8c:6b:d6:05:04:
                    4a:8a:c0:7e:56:27:7f:fa:18:c1:f5:b2:ec:2d:d6:
                    19:40:da:08:c0:8e:be:b5:6a:e7:34:0b:f1:ee:32:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8F:3F:1C:ED:1B:70:C7:6C:F7:AF:B7:DB:42:7A:54:63:7C:41:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e16a6003-d6bd-3d4f-a7fa-b048749f627c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:20:59:a4:d9:f9:03:ec:a9:ec:45:80:c7:fa:14:9d:5e:
         13:0e:3e:c9:8f:98:8d:10:8f:1d:df:e9:53:30:6f:1e:a0:9c:
         1e:b3:41:bb:7d:83:0f:a6:4f:5d:16:67:c1:16:17:14:11:14:
         59:39:0e:e2:c1:7b:90:8a:14:b0:1e:d2:e9:ff:cd:4e:a4:0f:
         f7:c9:37:7a:c7:f5:f5:43:65:75:da:b9:a1:e0:7e:73:e1:d2:
         88:01:ed:c3:9f:e3:4e:5f:63:5e:2a:23:f1:65:81:82:c3:b7:
         17:4b:cf:0c:31:8d:4d:c8:20:1c:5a:b9:ca:c8:c8:20:ab:a5:
         6f:74:a8:a5:a8:29:31:f3:de:8e:49:7d:42:2a:91:eb:06:bb:
         80:79:e0:e3:9f:5a:d5:3d:cd:c0:0e:3d:55:b1:c2:a7:ba:4a:
         cf:74:98:d7:ac:61:ac:44:36:56:64:05:cc:91:5b:8f:b4:32:
         2e:52:41:76:ee:f1:a4:23:12:c1:26:71:78:be:16:c7:84:16:
         33:79:b8:4a:d2:46:45:0a:1a:be:4c:aa:18:8d:12:6f:3d:56:
         af:c0:da:23:e8:6a:99:fa:5d:38:cc:c2:a0:17:b6:8d:3e:b2:
         91:f0:89:22:04:65:69:9b:44:86:7a:43:59:59:9e:24:4c:de:
         4a:15:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:05 2026 by rpki-client