Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e669f815-f1f2-3143-bed3-6cc18c71499b.roa
File:                     e669f815-f1f2-3143-bed3-6cc18c71499b.roa (raw, json)
Hash identifier:          fW9LZdFTHNMdVTPPN7NnaPqybqNGtnzLhAoNguBYXZM=
Subject key identifier:   5B:FD:CD:74:E6:74:0F:01:C6:E2:70:E1:A4:40:A8:A7:70:41:7D:22
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435DD808EE4B2512176A180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e669f815-f1f2-3143-bed3-6cc18c71499b.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:dd:80:8e:e4:b2:51:21:76:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=537370e2-ca47-4f2c-8946-c6b9dad6c40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:be:ff:97:66:6f:01:fe:2a:2e:92:15:ed:
                    9d:91:2e:cb:99:6e:ea:3c:91:40:f5:68:75:6c:93:
                    61:bd:4c:07:77:7d:a3:2a:d9:fe:82:31:99:59:89:
                    55:d4:89:00:42:4f:bc:43:8a:43:04:aa:44:4f:08:
                    7d:0f:03:0c:d8:8d:12:5d:2e:cf:24:ba:1f:80:6d:
                    ec:12:a7:3e:26:39:03:76:bc:b7:46:63:83:29:d7:
                    b0:0e:c3:ab:6d:97:0d:03:f3:f9:58:0a:84:fc:f1:
                    18:a6:4e:9c:eb:f1:22:88:d2:40:4f:a7:a0:18:e6:
                    0c:56:7a:20:22:aa:7f:1c:83:52:d1:69:01:0e:0e:
                    c7:56:07:2e:c6:00:91:55:41:a4:28:b5:18:54:ce:
                    f9:f4:9e:c7:a9:30:ef:2e:cb:d4:94:b4:c2:ca:64:
                    bd:fa:7a:0a:c1:28:8a:63:25:ad:b8:25:76:8d:69:
                    c2:62:1b:d2:20:58:3f:ce:fc:5f:2d:f9:e6:ae:6f:
                    fe:66:60:22:be:b5:c0:80:7f:3d:05:50:39:b8:ef:
                    db:76:e9:e6:bf:a6:4a:78:7b:38:e1:a2:41:9d:7e:
                    2e:c9:40:ff:0d:be:f7:7b:c6:d4:c4:4e:e0:54:6c:
                    2b:56:5f:0d:b1:ba:e2:3d:46:a6:f6:7e:cd:12:31:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FD:CD:74:E6:74:0F:01:C6:E2:70:E1:A4:40:A8:A7:70:41:7D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e669f815-f1f2-3143-bed3-6cc18c71499b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d6:de:93:c6:d9:ae:e4:b3:ab:ee:8c:ef:fd:f4:d0:44:4e:
         34:d7:c6:fa:0b:50:8e:27:e7:2d:47:25:b0:0e:f4:20:66:c3:
         64:3b:a0:1a:f5:67:c8:87:83:52:83:fc:a3:c7:2c:f7:74:f2:
         ee:ce:fe:dd:5a:3b:ba:1d:49:f1:42:69:59:7a:26:bd:48:25:
         a6:f5:88:a1:c7:f1:a4:7f:08:56:49:0a:1f:64:f8:8e:04:da:
         11:16:b7:6c:ca:63:33:47:0b:55:38:e6:b0:7e:28:ab:df:e1:
         7f:5a:72:aa:5a:1f:0e:76:e9:e1:ec:57:2d:0d:e4:49:cb:64:
         a7:31:c9:02:6b:53:4a:55:8e:56:99:04:7a:85:57:2c:54:d4:
         fa:e2:a5:73:7f:7e:b5:b0:94:b0:ba:b9:d7:e6:01:08:e0:91:
         15:65:55:fe:bc:76:eb:cb:2e:08:b9:90:1c:bf:da:f6:d5:14:
         a1:18:43:d4:44:3f:b6:f6:31:9e:61:3d:e0:9b:23:21:bc:c8:
         57:55:ad:f5:bc:17:dd:fd:72:88:4e:d4:6f:c1:1d:63:e0:e7:
         e9:ac:98:14:96:0e:e1:8f:25:c1:8d:3e:54:51:d7:0f:4b:e4:
         02:32:13:98:27:91:b1:75:76:76:62:2e:e5:32:2b:ff:35:b0:
         18:86:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:18 2026 by rpki-client