Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa
File:                     54a69069-5b41-3a84-8040-6cb02eca775b.roa (raw, json)
Hash identifier:          xjc39I+Fyn4gNB4rnYm7yDbdH7bA0jQ5/OHhhN61h7Y=
Subject key identifier:   25:A1:B2:49:8E:95:17:89:E9:7C:F2:47:8B:23:EA:FD:1D:62:02:41
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C18827F65C8FF540AC580
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:18:82:7f:65:c8:ff:54:0a:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3e1757e4-c074-4b83-9c7d-81915ebb7337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:62:c3:1f:0c:45:e6:d2:a2:6d:c0:9a:65:
                    d6:7b:ea:70:a4:73:83:9c:82:92:43:27:d4:7d:d8:
                    01:ad:7e:db:1b:47:d8:fc:e2:63:84:1f:10:7a:16:
                    25:97:4c:7d:56:68:af:83:46:4f:b2:e3:57:62:a7:
                    f1:95:b8:2a:8e:05:20:5a:54:b0:33:b6:31:c4:dd:
                    5e:e1:fd:6a:8e:ff:de:a4:6e:d1:99:0c:04:d0:3f:
                    5b:9c:6f:ec:24:78:33:a1:de:3f:a7:5a:c8:4a:56:
                    ac:f4:9f:ab:04:23:72:2c:46:4e:b6:ec:78:17:98:
                    50:1f:b7:d6:2a:06:fe:4f:97:ea:20:34:77:9a:59:
                    18:f8:10:bb:b8:11:c1:24:dd:a0:bd:d0:e7:d6:62:
                    6b:ef:02:02:67:d8:92:ce:08:63:ee:08:50:5f:cd:
                    18:4e:50:c6:25:3e:a3:33:83:e0:3b:3f:68:b4:cc:
                    d7:40:7a:a5:c1:88:b7:e6:fa:0f:b2:b0:4e:bc:cc:
                    da:75:be:f2:68:69:f9:c2:8a:c1:63:cf:c1:c7:37:
                    cb:fa:f3:54:2f:22:00:33:6c:a4:77:81:2b:06:42:
                    e3:b1:f5:7a:58:5d:c9:7d:37:74:60:af:88:ea:b7:
                    d6:01:d2:df:2d:5f:b0:52:5f:8d:99:27:15:fb:75:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A1:B2:49:8E:95:17:89:E9:7C:F2:47:8B:23:EA:FD:1D:62:02:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:2d:76:3b:ee:76:e4:c9:e7:e6:c8:a5:4b:c1:85:71:c0:
         99:b4:39:89:92:b0:de:0a:34:91:a6:b8:91:91:e4:d3:56:95:
         9b:03:6a:72:dc:3f:e7:c3:67:9e:4b:1f:e8:65:92:55:44:95:
         98:c5:ca:15:6f:6c:61:2a:a9:d3:ed:e1:98:f3:86:07:22:54:
         63:93:14:41:e2:73:3b:84:f1:20:0d:ca:7b:dc:05:70:53:38:
         de:d8:54:9e:e5:bf:53:7d:92:b2:54:b3:24:de:ce:a6:ee:08:
         3e:0d:f4:38:5f:a5:ca:6e:eb:0d:7a:7f:33:fc:13:f9:7c:28:
         23:dd:92:9d:dc:55:a5:92:67:3b:0d:46:0c:bd:41:26:af:b4:
         c6:43:f0:97:d1:21:2d:48:6f:bf:bd:bc:da:bc:91:33:c0:1f:
         36:e1:18:fd:d6:ef:07:55:fa:98:f0:e8:22:cc:1a:72:f5:18:
         3c:e0:fc:5a:1d:d3:58:1d:0e:9c:d2:5d:50:1c:a9:68:eb:16:
         68:18:21:b0:44:0b:ca:d3:ef:21:e3:99:e2:de:40:2e:4c:e1:
         7b:d8:8e:51:f7:a4:50:80:e2:89:78:52:84:2b:c6:a0:b5:75:
         f4:a8:9a:0b:b9:70:1b:1f:cf:ff:cd:66:4c:c0:84:aa:5c:1c:
         ad:4d:b5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:36 2026 by rpki-client