Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa
File:                     207a1c3d-3f68-3335-bba2-7651a99a336b.roa (raw, json)
Hash identifier:          PRp8ApK5ByVniGwJ0XpznMc14d1u1meumKQI741k4s8=
Subject key identifier:   30:F9:6F:ED:C6:4A:3A:17:A9:58:E0:72:60:25:F9:56:97:75:3B:32
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C856E990AE43B92A35180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     207266
IP address blocks:        65.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:85:6e:99:0a:e4:3b:92:a3:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=abf23de7-9fd2-4f8e-b269-24006080f468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:f3:43:c7:ec:75:4f:72:4e:04:28:5e:73:
                    7a:bf:34:2c:3a:5a:50:40:6c:9b:89:25:56:7f:3d:
                    3d:31:dc:8f:c6:da:3c:a6:c1:cc:c6:3c:b1:ca:84:
                    52:bb:e9:0e:e4:12:1e:10:ba:cc:59:5c:08:a6:17:
                    56:78:5e:6d:86:4a:ed:1a:ea:55:77:3c:32:0d:ed:
                    82:18:0c:75:c3:d2:ca:1d:37:58:2d:c9:33:ff:79:
                    13:dc:22:09:a6:90:af:f2:c7:8b:24:4e:7d:d2:c0:
                    5f:ba:26:cf:01:88:bc:c5:b8:8d:66:b8:6d:69:37:
                    a9:1e:8d:a4:9d:60:6e:fc:bc:b0:84:c5:57:43:5a:
                    53:96:6b:15:20:9d:2d:2b:ee:e9:b6:64:45:79:a9:
                    bd:b7:c5:05:2b:68:cd:64:42:5b:14:08:9a:4c:11:
                    15:72:3c:53:8f:ae:28:93:ec:e6:0d:06:3f:0f:5c:
                    83:70:21:36:c3:8f:ec:11:a4:71:be:95:69:b0:25:
                    41:4a:ee:b6:b4:cb:bb:03:7e:40:08:20:bd:c4:ea:
                    77:a4:42:f3:41:b8:fa:2e:3d:eb:35:ad:1b:56:53:
                    2d:8e:93:78:3f:0c:a5:ac:09:75:bc:19:c7:cc:f5:
                    76:0d:e5:fd:28:92:f7:7f:60:b7:22:83:27:e5:e8:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F9:6F:ED:C6:4A:3A:17:A9:58:E0:72:60:25:F9:56:97:75:3B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:89:52:17:c0:5d:e4:e1:6a:53:d1:53:c2:d5:80:06:9d:8d:
         b6:ec:90:db:02:a8:cc:78:d9:f2:06:4b:ad:fd:d1:29:1c:b2:
         ae:4b:61:88:ae:d5:49:2f:a1:cd:9e:b6:0d:22:f8:6d:f7:83:
         64:82:8b:17:bb:a9:b1:1a:2c:07:b8:da:c5:24:d9:e6:93:95:
         df:20:54:89:da:66:33:85:54:a3:2e:f0:f1:fc:57:25:71:ae:
         4c:50:cd:70:b0:c3:cc:bd:72:d3:c0:8c:54:ab:40:05:38:d4:
         3e:12:8b:b9:98:57:e9:5e:62:39:af:6f:6c:b3:23:f0:fe:98:
         77:52:6d:b1:f7:44:d8:19:1d:3d:fb:99:e4:8b:4e:ad:1b:95:
         84:f3:65:d3:88:c7:66:69:97:bf:69:88:54:fd:30:1f:e7:43:
         c0:c2:b8:a2:27:2d:fe:3e:97:4d:46:d1:ff:df:3a:c3:f8:3f:
         08:5c:85:0a:3f:8c:12:c0:8d:eb:31:27:bc:72:93:03:2a:88:
         38:03:73:1f:68:c1:0f:61:a4:8f:76:3e:9f:93:fc:05:76:12:
         0d:b8:f6:20:2c:20:ea:76:44:e6:47:d2:92:8e:40:7f:b6:17:
         c1:d2:8c:aa:24:bc:5c:cf:47:2c:67:a9:97:ab:49:5b:f9:e1:
         94:b7:4f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:46 2026 by rpki-client