Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa
File:                     0d612a76-6a6e-3cb1-8404-866fdaa11230.roa (raw, json)
Hash identifier:          eJG74czcdKj+qq9rsyY17lwrq54UbmPEuocuLHzdD24=
Subject key identifier:   9A:76:36:F3:FB:74:98:BE:AA:9C:30:2A:F9:0F:36:6F:34:24:A9:F2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04362A9AFEF04BCF69EFF540
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     207266
IP address blocks:        65.22.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:2a:9a:fe:f0:4b:cf:69:ef:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=f7c7669b-39b8-4965-b2f5-934256bfd378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:b1:dd:88:e4:e6:86:c8:2b:14:e0:39:c6:
                    89:3d:5b:80:14:f1:a0:6e:23:8c:f0:7d:12:0e:b6:
                    23:05:68:18:5a:14:36:9e:a2:a1:af:7f:72:36:ac:
                    c1:dc:06:cd:f7:33:34:17:46:da:71:fe:b2:7b:a9:
                    84:ae:df:d5:c1:fa:2c:c8:c4:3f:b5:4f:2b:00:ff:
                    41:3c:3a:b7:8b:d8:66:7a:d8:a8:f5:ab:a7:5d:04:
                    a6:25:12:35:9f:1b:85:97:5d:cd:2b:45:e4:98:ee:
                    e6:ca:c5:17:4b:bf:41:06:ff:dd:78:18:c4:17:c0:
                    40:64:14:79:71:a7:01:69:bc:ae:18:82:a1:4f:cc:
                    7e:7b:b2:33:1e:d9:56:79:5b:0a:92:ad:da:70:35:
                    e7:a4:8b:2c:7b:11:6e:4e:6d:ec:cd:bd:58:71:b6:
                    c7:75:e4:74:31:a6:d3:9f:69:06:38:30:a3:66:d2:
                    fa:03:db:33:e4:90:65:17:0c:05:65:a8:22:94:77:
                    f9:68:8d:0e:0d:b4:07:20:66:38:84:c6:3f:16:de:
                    a3:c9:0e:03:3d:24:e2:3d:70:4b:33:56:5b:03:35:
                    88:4b:5f:dd:5f:49:e2:76:31:3c:5e:95:7f:a2:1e:
                    07:61:4b:cf:8d:74:9a:ef:bc:ac:de:b8:b4:95:09:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:76:36:F3:FB:74:98:BE:AA:9C:30:2A:F9:0F:36:6F:34:24:A9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fe:45:d0:22:6a:bb:aa:b9:02:e9:52:0d:d0:bc:b4:5f:d2:
         59:94:18:6b:80:92:7a:4b:4c:90:1c:e9:34:92:04:8a:41:11:
         cf:74:5f:7a:30:73:5e:22:d4:ae:f0:63:ce:43:c6:93:4d:26:
         ed:4f:58:6b:bd:b2:8b:9f:7e:94:b3:7a:eb:ec:94:27:62:52:
         49:99:84:a2:c5:59:2c:74:3c:52:d6:5b:d3:72:96:57:30:25:
         c2:f9:30:cd:01:b7:64:45:2b:fd:12:3f:cb:3f:27:3f:d8:c5:
         00:bf:e7:b2:e6:0e:b9:56:69:20:fd:f2:7d:96:8e:48:1e:c8:
         d5:3e:d0:eb:4e:87:d3:ac:4b:ed:39:38:43:b3:82:67:06:93:
         53:da:be:91:b6:ce:b4:a9:c4:44:87:78:2f:6b:fd:7a:c6:0f:
         de:84:4a:6c:05:29:12:e9:29:0f:54:f8:0d:f6:6c:29:fd:5e:
         b1:1f:f5:0a:b3:01:38:f2:3a:f6:b6:b9:22:87:4b:39:a2:9c:
         7d:91:79:ea:f4:6b:eb:cd:db:2f:29:ac:d6:15:9b:e4:65:aa:
         eb:5f:aa:4f:cc:11:e0:95:9a:ea:dd:c8:61:48:09:e3:a1:43:
         28:60:77:45:82:8d:27:27:e9:57:4d:03:f3:36:f9:ca:d3:45:
         f3:33:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:16 2026 by rpki-client