Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/068e7496-b82c-3ab2-b30b-a615dbe11ddb.roa
File:                     068e7496-b82c-3ab2-b30b-a615dbe11ddb.roa (raw, json)
Hash identifier:          uzrFMg7X1LMdSR0+BdjlHRyGfKQnE0KpB2MZkGRBfd0=
Subject key identifier:   03:D9:D4:19:0E:0A:A7:CF:3C:98:89:11:94:22:1F:BC:BE:B7:2C:A9
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F498C12731F06E6B11C1AC380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/068e7496-b82c-3ab2-b30b-a615dbe11ddb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:12:73:1f:06:e6:b1:1c:1a:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fef9e7f1-53d0-4cb0-80a3-4ab181dfd216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:8f:d5:af:49:e8:3d:5a:14:4a:7b:2d:7b:
                    2e:ff:11:82:75:70:57:13:52:a4:bf:6c:2e:85:fd:
                    35:51:0a:24:a7:30:4d:26:66:06:95:60:c6:f6:7f:
                    ac:c0:88:55:5b:9e:68:8d:5d:ea:ae:a0:3e:7b:1c:
                    7f:2e:73:64:26:e0:7b:9f:6d:a4:94:65:09:14:20:
                    51:93:e5:5e:d8:96:c4:9b:ec:dd:7c:f1:58:d7:cc:
                    db:c3:1a:9d:23:32:81:de:5e:0b:75:f7:62:39:7a:
                    5a:8b:07:75:2e:fd:c0:91:b1:4a:74:cc:74:87:26:
                    c4:d6:c4:c7:bd:87:8a:5f:61:c4:f6:b4:a8:49:3e:
                    35:9b:f7:05:96:95:c2:f3:2b:e5:32:26:58:d1:35:
                    9f:da:e8:f5:9f:26:7f:bf:b8:7b:12:ca:87:49:ab:
                    18:d4:a7:54:eb:bc:79:e5:17:0c:fd:ee:a3:3a:44:
                    cc:d1:4d:57:74:9b:4a:ed:af:9a:95:6b:d3:35:d8:
                    c0:ec:27:27:65:6a:21:89:4a:b5:f2:85:fa:ba:7d:
                    02:f6:1e:4d:44:38:d7:08:78:3d:80:3a:c7:b8:27:
                    e1:8f:27:ef:a1:d3:42:41:be:ee:de:c1:66:8c:2d:
                    59:32:ac:75:3e:74:c0:d0:b4:c1:c5:e5:4d:38:84:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D9:D4:19:0E:0A:A7:CF:3C:98:89:11:94:22:1F:BC:BE:B7:2C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/068e7496-b82c-3ab2-b30b-a615dbe11ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:7f:8b:13:98:e1:81:d7:7f:0a:98:ef:ac:6c:b0:b0:04:
         bc:cc:a2:43:16:f6:e6:68:64:43:43:60:a9:03:4d:53:e9:06:
         81:8c:97:0c:d9:16:da:41:ed:37:d6:a7:f5:d8:71:0d:04:66:
         b1:01:64:2d:ec:de:04:47:cb:bc:ce:cf:a4:5f:20:19:2d:f9:
         f4:d1:60:fa:bd:45:a5:65:bf:e9:7f:35:12:fe:8c:5a:b6:3f:
         32:7b:69:90:ad:7a:db:66:de:31:45:8c:5a:9d:c8:ed:28:c6:
         c6:46:d7:0a:97:10:95:53:09:45:b9:61:d3:d2:05:ce:59:ce:
         6a:d2:fa:3a:81:be:09:da:27:f0:3a:f4:57:33:40:ee:8c:bb:
         a6:2f:95:cf:c1:7a:c2:29:25:c2:97:6c:b1:6f:11:7a:3e:00:
         33:2c:4b:27:2a:bd:d8:27:ed:7b:b4:1f:93:b7:65:25:98:7b:
         1f:0c:50:25:f5:db:ab:e9:5a:31:7c:12:40:2e:e1:48:63:3c:
         d8:ae:bf:30:dd:86:99:5c:cb:7b:f6:ac:d2:16:43:57:a0:3e:
         2c:ac:6c:30:9c:b7:33:d5:d7:ef:41:eb:2a:a0:45:a9:73:25:
         58:60:13:28:a6:52:45:6c:b1:b3:ae:a7:74:8f:e6:24:9c:b2:
         a3:34:e5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:17:40 2026 by rpki-client