Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa
File:                     08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa (raw, json)
Hash identifier:          LoSCZf7Bab+em5Tt4NxY+ET4804/EdcQiFfp2RtHjnk=
Subject key identifier:   0F:32:F3:49:D8:B1:3B:4C:9A:2F:CB:D9:6C:32:AB:6B:A3:CD:A5:9A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C971502C12A635DB6CE80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:97:15:02:c1:2a:63:5d:b6:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=701ec477-c5c7-46a1-a11b-7d0c97263832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:fd:e6:fb:76:40:a6:86:41:01:e0:a7:68:
                    d1:ae:db:99:70:83:90:3f:19:fe:49:ae:6d:02:ac:
                    77:3a:8a:28:a0:6f:2f:8f:58:23:20:15:9e:5e:94:
                    78:7e:b4:68:dc:2b:9e:8c:b9:76:ed:1e:f0:af:ef:
                    17:a3:e6:24:02:d0:8d:a6:3e:c4:16:26:c6:d0:9e:
                    64:6c:db:5d:e6:d5:d9:5b:01:82:a7:94:20:b0:93:
                    b8:d5:35:c5:b6:f3:43:18:b4:92:e5:6d:82:e8:c8:
                    93:c0:84:bc:e6:b6:73:03:6b:a5:47:d1:75:bd:9a:
                    f9:62:f5:ee:61:21:d1:c8:63:ca:2a:60:21:db:77:
                    37:f4:f4:2c:76:e7:31:4f:8c:65:b4:ad:f8:b8:bb:
                    91:56:af:32:51:17:52:79:48:e8:57:ef:32:fc:be:
                    ef:dc:25:25:1f:f7:41:6d:47:2d:4e:e7:3d:1d:8e:
                    ff:a1:17:34:1b:4f:b3:85:27:0a:8e:4a:94:e7:26:
                    87:31:d9:a9:93:33:30:fa:cd:cf:64:c9:2a:bb:80:
                    ac:57:92:30:24:af:bb:b7:25:45:67:f0:a2:5d:1c:
                    78:10:18:40:67:40:35:28:ce:f2:82:7e:ea:8a:6a:
                    70:cb:f3:33:e8:f8:fe:23:c4:6e:de:f1:17:4a:8f:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:F3:49:D8:B1:3B:4C:9A:2F:CB:D9:6C:32:AB:6B:A3:CD:A5:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:94:c7:ac:35:a4:05:85:f2:3e:d5:e0:18:61:b6:01:54:4d:
         fb:af:d8:90:f3:13:33:aa:51:74:ae:3c:6e:ad:eb:48:0b:60:
         07:91:78:79:eb:f5:22:c8:ba:fd:96:2b:8f:b0:88:1a:a1:e7:
         6a:8b:7a:ae:c2:4c:f4:3e:27:54:1f:98:0a:38:49:ca:3f:c6:
         a1:7d:a6:25:44:3f:8e:86:02:6f:1d:65:10:5e:98:e1:09:e4:
         17:59:55:71:f4:b5:0b:51:38:d3:4f:d3:fd:a4:0a:e0:89:2b:
         2f:61:89:20:c6:5b:aa:11:4c:a1:d3:43:65:f5:b8:74:60:7e:
         7a:f6:a8:c9:66:ae:a6:82:36:55:93:01:a5:05:b7:22:6a:79:
         98:82:86:fe:e8:c7:ff:6f:0c:e1:9a:2c:80:16:d2:11:37:32:
         33:3d:1c:ad:53:9f:a6:07:23:0d:e8:4f:e7:95:28:ca:24:33:
         9d:92:d9:57:cb:0a:39:b2:4f:b2:39:2c:65:8c:a3:a7:3c:8b:
         38:12:22:72:0f:fb:8b:08:32:0d:07:52:48:79:e6:e1:e0:fe:
         a8:69:bb:03:89:9c:90:2d:fc:09:eb:31:e3:00:8a:46:4d:c4:
         78:a8:6f:ac:e4:c2:e3:61:17:33:fe:25:a9:ba:4a:34:56:9b:
         a6:ac:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:24 2026 by rpki-client