Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa
File:                     0127bea2-01a8-3f87-a54f-6a97edd38e82.roa (raw, json)
Hash identifier:          nGMFb00D0MeV+df/IijJurpdP9lhvOAxk/432Znu7ZY=
Subject key identifier:   06:C7:99:1E:53:21:78:6A:C4:91:28:99:2A:53:B9:13:0E:1F:12:BC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79CA91BE8A648A8A15B2300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:a9:1b:e8:a6:48:a8:a1:5b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d5241a47-d757-4546-ae77-d02a7e4c7bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:43:79:c0:34:67:63:38:17:ba:77:56:e5:
                    00:de:fc:1c:05:39:7a:19:6e:48:8f:e3:54:60:fa:
                    51:af:da:76:18:3c:c7:eb:4c:13:a3:7c:b5:6b:4b:
                    6d:bf:c4:17:c2:7d:65:6e:9d:4a:fa:67:df:5d:ed:
                    56:2e:ac:c9:54:7c:42:b0:d6:c8:cc:88:f2:e3:26:
                    d7:a3:2e:28:6b:dc:ad:e5:49:7e:7e:fe:6d:0f:01:
                    42:a2:2a:cc:e7:a6:ff:14:07:65:46:d6:5f:c3:59:
                    ad:b8:55:2c:97:6e:79:ab:dc:c8:ce:55:d9:d0:88:
                    1e:33:70:88:5f:f0:78:40:40:90:cc:90:98:10:ed:
                    5b:3d:a9:d3:7b:08:bc:c4:50:fb:5b:d0:0b:cf:fd:
                    51:e3:85:e8:af:8f:ab:90:b6:bd:5e:f4:1b:24:58:
                    e3:03:56:2e:ba:1b:3d:20:7d:41:50:ea:2c:90:b4:
                    cb:fe:f7:f8:f1:10:4f:4e:b0:66:94:d4:cc:2d:8f:
                    76:ac:88:4b:7e:65:c6:27:8a:a1:a3:d1:ad:bf:f3:
                    a9:02:38:31:0f:e9:99:c4:50:5f:70:b5:6e:24:44:
                    8e:66:5d:3b:37:4a:bc:86:32:46:66:04:4d:d7:95:
                    57:e4:e9:fa:08:42:1c:d4:1f:59:51:96:68:02:83:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:99:1E:53:21:78:6A:C4:91:28:99:2A:53:B9:13:0E:1F:12:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0a:b6:9d:aa:9a:cb:51:b5:75:17:ae:6e:5c:5e:21:76:5b:
         6d:1e:0b:8b:d3:57:24:81:64:4e:f8:a9:9f:56:4f:86:6a:e4:
         d6:e9:ba:28:bd:e1:01:7e:16:e5:ff:a3:9c:89:af:a9:1f:4c:
         ad:dc:0e:41:c4:ac:81:66:2e:27:4b:24:f7:91:f8:e8:55:6c:
         01:50:20:10:08:88:03:86:94:45:79:a8:73:82:bb:8f:43:58:
         b3:df:9b:7f:1b:38:8d:ce:dd:7c:17:91:38:6b:4d:fa:46:0b:
         f3:2a:41:c9:55:28:50:d5:21:50:fc:77:28:9b:a0:09:a6:a0:
         4f:f9:80:85:8e:5d:cd:ee:03:77:9a:6e:8a:f5:42:dd:27:2e:
         3c:bf:89:ff:af:a8:79:1e:b4:a9:5d:c3:61:95:1d:dc:a3:87:
         3e:0c:2a:c7:51:ba:da:8d:d7:6e:9f:f1:c1:e0:21:fd:a6:fc:
         4d:15:75:e1:2f:45:fc:3d:13:5f:26:f7:4b:dc:bb:2f:e2:8f:
         ec:f0:11:8e:d1:48:59:9a:b9:0f:ce:70:94:dd:06:5a:d5:2e:
         dd:f6:ea:99:db:9e:d9:86:59:23:91:d6:0d:d3:09:40:9d:a3:
         4b:93:fd:1b:6d:ce:ee:54:8c:5a:f7:d6:45:36:6a:9a:7c:37:
         bb:ce:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:16 2026 by rpki-client