Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa
File:                     2fdffa0f-7c93-368f-8243-27f29765ab18.roa (raw, json)
Hash identifier:          dxUSFDqUveIG1iVNh+vwKFpFQjvwJxUS/u90tbkk928=
Subject key identifier:   B9:74:1D:92:55:71:03:E7:97:B7:CF:8B:80:A8:1A:AB:14:74:CE:AB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0436299DDB48EFABCAEB6240
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:29:9d:db:48:ef:ab:ca:eb:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=fcb5e5e8-fe0c-49b2-9ef3-00d7f063db72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:01:c8:bf:99:be:d7:c1:46:2c:aa:fc:9f:
                    45:ed:09:19:d4:3f:26:c0:a7:cc:59:09:78:0a:9f:
                    e6:ed:3e:78:4b:70:8b:24:1f:a8:a1:df:b4:b3:e0:
                    73:6d:ae:2e:1e:4b:bf:60:a0:94:b5:d8:28:fd:5c:
                    21:d4:5d:3b:c6:c6:5e:ae:91:39:8f:06:9b:03:07:
                    c4:9e:1d:67:51:f6:b7:20:75:d9:e0:aa:90:02:dd:
                    1b:da:8e:ee:22:e1:b8:d6:df:ab:1d:16:9d:a7:f2:
                    aa:5e:01:fe:71:e8:db:09:8e:e8:6b:3f:17:df:46:
                    7a:bf:f8:c7:0f:86:3f:f6:3b:5d:4b:19:16:55:9f:
                    d7:7d:78:7c:ea:d7:e1:f1:db:36:a8:05:33:83:e1:
                    d5:3d:18:19:48:ca:0a:eb:ae:56:41:92:64:16:5e:
                    9f:c4:50:f1:77:cf:35:08:23:90:43:7b:45:fd:62:
                    d4:93:2c:3d:3e:7f:5a:21:22:64:a7:38:b2:93:0b:
                    f0:61:59:a3:80:e4:72:6f:de:26:98:18:d9:47:04:
                    ad:f1:c3:86:f2:d0:bf:97:95:c5:3c:f5:0c:0f:7c:
                    8a:1b:be:9e:cd:ee:70:7e:ad:57:8b:67:2d:d2:b1:
                    f6:05:66:47:a6:1a:f5:a4:c7:73:2b:5c:42:f2:32:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:1D:92:55:71:03:E7:97:B7:CF:8B:80:A8:1A:AB:14:74:CE:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:92:7c:c4:e6:dc:0e:96:26:6b:3e:90:3d:b3:0e:0f:bc:54:
         ca:0f:11:96:5c:fc:fb:7f:da:36:f5:c7:15:5f:74:a7:91:6c:
         bf:8b:b9:9b:ac:33:84:c6:ca:5f:1a:f2:b9:9a:0f:57:58:68:
         6b:72:88:01:d4:0a:f3:a4:c7:85:19:5a:37:c3:ac:14:a7:11:
         03:77:13:c7:f1:ad:33:8b:e4:20:dc:f9:7b:37:0b:8c:32:64:
         ff:c8:fd:40:b5:3f:eb:a1:ab:95:ab:03:1f:af:db:91:7d:8d:
         fc:4c:57:a6:86:f2:92:17:74:5e:18:da:b5:6d:07:12:03:4d:
         34:cb:ca:e0:c6:26:26:cf:c5:a4:6f:60:2a:34:69:f4:66:6b:
         8a:fd:2b:37:e0:0f:36:6e:0b:eb:db:b2:f3:9b:25:59:1a:ae:
         f9:d7:5a:d9:c0:9f:23:c1:73:b9:48:6e:af:fb:40:e0:14:65:
         4a:34:27:71:62:23:20:95:0f:5b:27:94:35:ea:d4:57:06:eb:
         ba:1f:a7:5e:a9:d8:7d:09:af:ff:84:fe:f4:3b:e6:ea:4d:b1:
         44:1c:f6:3a:65:3e:10:c1:03:77:81:f1:17:5f:fe:52:68:25:
         4a:6b:13:6f:41:b1:57:d6:94:71:ec:69:17:d0:14:f1:f7:eb:
         63:cf:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:19 2026 by rpki-client