Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/edf7197d-01f6-330d-9cba-46ae9b3ca8de.roa
File:                     edf7197d-01f6-330d-9cba-46ae9b3ca8de.roa (raw, json)
Hash identifier:          arftHgGLnw2ysZSBLrMVy9s9b7t1fkuXFEqrSblKJsA=
Subject key identifier:   09:7E:9A:B4:8F:6E:82:38:90:44:FF:8B:DA:A9:C2:E5:F7:C2:D2:C2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435FCBB7A9EEBA8D2F88980
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/edf7197d-01f6-330d-9cba-46ae9b3ca8de.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:fc:bb:7a:9e:eb:a8:d2:f8:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=b880389a-8d9e-4efc-887d-1371711f6063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:49:5f:83:53:6c:e7:9e:9c:9d:a7:ee:1e:
                    fa:cd:1b:33:a4:45:75:a4:67:5d:c5:d4:ba:23:09:
                    f1:ea:e3:a9:94:60:cb:3c:40:3b:b4:2a:2e:5c:62:
                    22:32:36:29:ee:98:2f:d6:39:9c:84:39:47:90:e0:
                    fa:05:d5:eb:f0:cb:e3:95:fb:60:77:69:a0:90:32:
                    d1:04:0d:ba:7f:ab:d2:09:d2:71:5f:1d:31:3c:6c:
                    62:7f:b4:e7:f2:b1:4b:7d:ec:d5:ee:4e:f8:9a:4f:
                    3b:18:85:7a:6f:bc:90:f8:05:46:9a:37:7d:23:ff:
                    2c:88:2c:8c:cb:d3:80:f4:51:e2:bd:c5:03:0a:29:
                    ac:72:7a:0e:1b:73:59:aa:1c:30:fd:e7:9f:50:23:
                    8b:97:03:5d:4f:6e:e0:38:14:17:b5:c5:4d:d0:62:
                    e1:88:30:db:a5:fd:85:2e:4d:17:64:8a:be:4b:34:
                    d0:c4:36:52:e4:8d:47:1c:a9:53:25:2c:a6:ef:a9:
                    c8:ba:76:3c:b7:12:ce:81:8b:dc:d1:dd:e9:f1:c9:
                    a9:54:07:7b:a7:b9:a9:56:76:ef:26:12:a2:e8:49:
                    21:2d:64:11:2d:7d:12:9b:29:c1:8b:98:04:31:fd:
                    b8:5f:de:f7:dc:07:81:8a:47:2c:01:e3:88:75:95:
                    3d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:9A:B4:8F:6E:82:38:90:44:FF:8B:DA:A9:C2:E5:F7:C2:D2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/edf7197d-01f6-330d-9cba-46ae9b3ca8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:01:df:66:4d:e9:90:1d:02:e2:76:5e:c0:23:b0:84:1f:
         60:b9:61:aa:11:9e:e6:b8:4f:f6:1c:01:85:6e:8c:13:5c:00:
         9e:b1:43:4d:9c:3b:27:74:bf:a1:95:0b:f4:fa:06:2f:29:f8:
         44:3c:f3:4b:7a:e5:52:6e:33:7b:96:d6:5d:95:32:c1:c9:71:
         6a:02:3d:30:08:1c:e1:b5:56:61:43:5e:c3:fe:07:c8:90:68:
         fc:5e:ca:ef:33:4c:95:8b:19:d7:95:ea:33:65:26:ec:98:27:
         31:e9:02:8f:ac:27:17:6e:01:64:55:c9:21:1c:a5:2a:c7:ef:
         a4:f1:4e:ca:a6:1e:bc:4a:da:ad:e4:ee:16:0b:e2:54:ed:c0:
         49:51:20:83:e1:92:cf:ab:37:74:8f:ee:ed:f3:e6:4c:09:80:
         54:64:36:dd:f1:d2:e1:2b:15:fa:92:f1:2a:d4:16:07:5e:ce:
         8c:78:5c:06:b8:d8:8c:77:44:ac:4d:53:78:4b:cd:74:82:88:
         98:31:a3:97:7a:d1:b2:ec:6b:77:ed:52:ea:aa:a1:9e:b1:d6:
         ff:69:a7:56:6a:86:23:3e:b2:8a:26:18:30:6e:3a:d2:fe:66:
         6b:0e:f2:ee:1e:f5:fb:ae:51:b4:fd:3a:1d:f3:d1:f6:41:b3:
         cd:24:d3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:09 2026 by rpki-client