Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa
File:                     298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa (raw, json)
Hash identifier:          lRsAjsabEhVaPXiRi95o1nN9GF2VCY68VKeMdmxW/Fg=
Subject key identifier:   F3:E8:EB:B1:47:0C:BC:1F:3A:28:D7:48:C4:6D:0A:E0:85:95:E6:D2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F497485330B7E45CE663E4100
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:85:33:0b:7e:45:ce:66:3e:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c9796094-45e4-428d-b02b-5f57fe4c3ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:47:7d:43:6d:77:2c:fd:ce:96:36:05:91:
                    6a:54:37:78:7e:7b:70:c5:f7:c4:83:19:ea:04:aa:
                    e3:8f:2a:5b:05:19:bc:5f:d4:c8:d6:e6:d0:52:38:
                    fe:9b:09:03:7a:97:08:55:2d:20:5d:06:35:95:c8:
                    ee:ce:3d:e9:93:f6:70:ed:96:9e:78:1f:31:bc:d4:
                    37:1e:94:4e:85:fd:03:94:81:a3:22:1f:93:e4:c2:
                    71:7c:6e:a7:05:9b:a0:15:65:1e:0a:8d:8c:46:41:
                    0e:95:a3:fe:a0:c7:c2:78:2b:f7:0b:2e:2a:3d:c9:
                    45:42:4d:09:d8:e6:be:05:8b:2b:b9:ad:c0:8e:be:
                    a1:3a:2a:d5:a2:a5:fb:69:77:d4:0a:73:2f:67:14:
                    5b:97:be:ae:fa:9c:f7:6b:87:f2:ea:7e:50:82:86:
                    d4:58:96:a1:86:e3:fb:b4:02:bb:dd:ee:f1:67:32:
                    e8:e4:f8:59:10:b7:19:87:6a:a6:1c:de:43:fa:af:
                    00:e8:80:92:e0:b1:43:9f:38:5f:79:04:6b:fc:9c:
                    13:9e:8a:19:77:2a:e6:f0:9c:92:5b:c9:72:3c:4e:
                    cf:ba:2a:a0:67:0d:b5:76:de:1c:d4:5b:7c:8d:7a:
                    44:28:af:6f:1f:00:db:0b:be:0b:06:d1:0b:51:5c:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:EB:B1:47:0C:BC:1F:3A:28:D7:48:C4:6D:0A:E0:85:95:E6:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ed:b2:b3:98:0c:31:f2:da:cb:26:31:93:99:85:92:eb:e5:
         3f:7d:ca:73:5d:42:9c:3b:ec:8f:d7:1b:ed:f9:7b:ce:87:9b:
         06:15:07:7b:ac:6a:8e:53:e6:b1:e0:d1:d5:0a:44:ff:fa:9b:
         cb:a0:d2:19:f4:2d:e6:77:77:7c:3e:0d:8d:fb:db:8a:82:a5:
         0b:b6:33:0d:92:9b:c2:e3:43:1c:b1:e6:de:6f:75:b2:b0:c8:
         22:06:ca:14:5f:07:e5:ad:4f:05:02:77:b9:f8:2c:fb:4e:29:
         6a:53:82:ac:dc:32:84:e2:3e:22:87:5e:3c:76:08:98:19:62:
         8d:d6:3f:94:ad:a8:8f:3c:88:77:82:49:6c:47:ab:9a:23:ab:
         2b:7c:20:74:89:2d:01:74:92:dc:a4:14:c9:63:f0:5e:d0:8f:
         03:dd:d9:f0:27:75:93:3b:29:00:dd:8f:ac:ce:9c:74:08:6c:
         53:ec:20:6d:ef:dd:dd:c6:ec:49:84:d0:f1:6d:de:f2:01:c3:
         4e:d3:85:3f:41:8f:da:0f:78:85:2e:f8:58:e6:49:d1:f6:3d:
         97:7b:7c:a8:ef:ac:91:68:6d:de:3f:9a:ab:9a:20:31:5b:de:
         5a:ca:2d:68:b9:2a:20:3a:ee:b5:84:d0:64:5b:71:3b:b0:1f:
         93:90:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:51:27 2026 by rpki-client