Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e54e9a3-1804-3909-8d1c-efaffdfc41c4.roa
File:                     4e54e9a3-1804-3909-8d1c-efaffdfc41c4.roa (raw, json)
Hash identifier:          X2JRleIYDLO9lSo1BXnu1POo99Sjasbwf4lRaKyPMVY=
Subject key identifier:   F5:97:F0:D0:2F:25:88:95:04:5F:6B:66:E5:CA:73:D4:19:05:16:B7
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C3221ED31AF859F009CC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e54e9a3-1804-3909-8d1c-efaffdfc41c4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:32:21:ed:31:af:85:9f:00:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=be1632ad-f48c-4b7a-8f4c-74157c42ee3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:fd:ce:8c:61:e8:d1:16:01:b3:76:3e:00:
                    42:d1:23:a7:ac:04:44:21:89:8b:90:c5:30:d4:ef:
                    f8:fb:ec:ba:49:f5:16:35:ef:81:00:b0:a0:40:ae:
                    d9:41:f0:a9:e0:83:23:00:8d:c1:45:4d:5e:92:c8:
                    50:fb:c5:8e:dd:02:d6:ba:ee:38:23:1b:b4:ee:ef:
                    41:b3:db:35:fe:20:3a:0f:8c:fa:bb:5a:48:45:85:
                    9e:af:0b:d7:bc:d0:99:8c:48:77:62:25:47:4b:a2:
                    d0:1b:c3:12:e2:22:40:03:5e:da:a9:28:e0:f7:9c:
                    42:0f:42:79:e4:fb:d3:58:d4:46:19:89:5d:91:7d:
                    e2:8b:28:89:bf:0d:a0:f9:6f:e0:ef:55:c2:a8:bf:
                    2a:e5:a6:31:2f:1c:21:06:42:9d:77:92:f7:8e:4f:
                    44:00:dc:66:48:b6:14:0b:af:fd:c9:6e:0a:b5:6b:
                    98:97:50:91:2e:7a:e0:13:86:9e:24:1c:6a:da:8c:
                    ab:cb:ef:d5:4b:ee:40:07:7c:22:ec:7e:ba:24:fb:
                    8c:b1:27:25:a5:d3:44:34:bd:f2:32:39:60:70:18:
                    c1:11:a7:3c:d8:44:37:98:65:2e:e5:72:17:ed:95:
                    49:eb:40:e4:30:35:3e:33:f7:a3:cd:2b:a5:4f:75:
                    ad:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:F0:D0:2F:25:88:95:04:5F:6B:66:E5:CA:73:D4:19:05:16:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e54e9a3-1804-3909-8d1c-efaffdfc41c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:61:75:17:6c:98:fe:8c:28:9f:90:74:f5:6e:f8:a3:61:8e:
         37:08:10:ef:03:0e:8b:c0:15:f6:f6:87:aa:91:f9:e1:c7:23:
         dc:a6:3c:41:88:36:9a:cf:a7:14:05:12:56:53:65:20:b7:0d:
         71:5a:c5:dd:77:de:8e:ab:fd:5d:51:79:03:03:40:1f:8a:b9:
         4e:b6:af:78:83:f9:33:af:84:6e:c0:d4:78:fe:a1:d8:f8:51:
         8e:44:20:f7:9d:f9:41:43:34:f3:f5:3f:28:b4:c6:db:93:87:
         38:64:38:85:6e:a7:81:e4:55:7b:b6:19:d4:33:fc:8b:17:5c:
         21:5e:76:70:56:c1:34:5a:08:e8:50:57:67:60:63:61:d0:d8:
         54:6b:49:b9:f9:2d:1c:0f:b2:31:19:68:2b:a2:15:23:3c:9c:
         94:c8:fe:8e:55:d2:fd:26:66:3d:d3:1f:33:dd:7a:92:07:8b:
         5f:9f:9a:6e:14:de:62:fd:59:85:72:e2:af:b7:e4:0b:bd:c2:
         c1:0f:bc:2b:b8:55:2e:e3:5c:ee:b3:8c:95:4d:db:e2:a2:32:
         55:61:a5:2b:de:ab:75:c0:14:fc:72:f0:e0:31:56:d7:7c:69:
         53:ac:88:ff:ca:19:2b:9b:a3:6d:68:07:d3:65:b8:cc:ab:77:
         94:ce:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:02 2026 by rpki-client