Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2756960a-9811-3827-ab9f-254e1baa8e65.roa
File:                     2756960a-9811-3827-ab9f-254e1baa8e65.roa (raw, json)
Hash identifier:          gQbawlMaf8ias3O0zovMNrDCfQTJYH7VMMr1ylGjy00=
Subject key identifier:   3B:22:4B:9A:99:01:EA:09:F6:F5:D7:ED:76:93:AD:B7:7D:57:C7:D0
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4987C701E16AF73A1EB037C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2756960a-9811-3827-ab9f-254e1baa8e65.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:c7:01:e1:6a:f7:3a:1e:b0:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2ce99a45-414a-4afb-8efc-6028258ca4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:47:3d:9a:e7:a6:29:34:1a:ee:f9:74:c4:
                    ff:fd:70:23:ec:46:61:13:49:9b:52:61:43:36:e8:
                    43:ba:ad:21:3f:68:58:25:53:85:9b:0c:42:dc:fe:
                    25:fa:b5:54:0a:ea:f9:fe:f7:4d:9b:82:0a:5c:54:
                    09:66:3a:d7:2a:52:b7:b7:a5:56:3a:dd:ac:a9:c8:
                    f4:cf:fc:2b:b0:a7:24:1c:28:3d:cb:83:1e:72:70:
                    0f:b5:9c:ef:58:54:d0:26:f8:fa:b2:d6:82:6a:91:
                    1d:35:3c:8b:54:21:97:99:c1:f4:7d:f3:19:a9:58:
                    2f:29:24:d8:fd:d3:84:3d:a8:1a:77:a4:21:02:71:
                    53:2a:8a:1f:b0:4b:3c:38:a3:04:c5:ae:78:61:ae:
                    45:4d:84:f6:7e:51:51:7b:dc:5a:73:71:d6:13:dd:
                    c8:a0:94:81:d3:8d:d1:09:95:1c:86:bf:69:37:49:
                    e8:d7:b5:6f:86:a9:12:a4:49:be:f6:1d:3d:33:31:
                    d5:d6:d4:80:53:98:66:5e:bb:ac:45:cf:30:90:e1:
                    b1:63:b9:a4:56:65:16:de:86:f7:a2:17:e9:4b:3a:
                    7a:00:ae:e5:0a:df:c2:ec:f5:80:20:60:89:ad:73:
                    33:6b:68:c2:cf:d2:09:d7:e7:5b:80:dd:ba:58:26:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:22:4B:9A:99:01:EA:09:F6:F5:D7:ED:76:93:AD:B7:7D:57:C7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2756960a-9811-3827-ab9f-254e1baa8e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:23:1c:37:96:59:1f:d4:0a:ef:f9:98:ef:ce:de:ca:8c:
         39:2f:4a:54:fe:ac:8b:2d:7e:21:13:03:ed:a8:49:53:cc:41:
         61:af:f6:45:b4:b1:e1:d0:fc:5f:22:03:09:67:8b:7d:e5:09:
         cc:b6:1a:df:07:28:df:77:24:73:91:ae:32:49:df:ce:33:37:
         52:35:77:b7:80:9b:ce:18:c6:45:c4:ed:ee:c0:19:85:e3:fc:
         c8:98:64:13:18:28:59:12:18:64:4b:e6:aa:9f:6f:91:fb:09:
         58:f7:5c:1d:64:73:02:cc:b1:f3:a2:cd:53:ef:a5:46:e5:f1:
         1a:5a:60:ea:04:52:b4:00:37:7b:c1:f1:94:b9:06:41:c0:d8:
         70:0e:27:d7:5c:e5:d4:d3:39:19:77:16:f5:48:79:60:78:7a:
         3f:ec:59:f6:a6:d3:a0:71:02:93:37:9c:46:b3:3e:12:88:11:
         2e:7e:e5:e4:5a:54:f4:e6:48:84:2e:fb:98:0d:58:55:00:f3:
         5c:26:53:5c:2f:94:c8:ec:bd:b0:22:b3:6e:22:46:6f:8a:12:
         17:06:bc:07:c9:62:b2:6b:35:34:94:35:d5:ef:ee:cd:31:6d:
         d0:fd:7b:d6:56:60:43:c7:71:16:6e:bf:b9:a4:28:f6:6f:08:
         ac:bb:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:24:53 2026 by rpki-client