Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa
File:                     5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa (raw, json)
Hash identifier:          o/njgAq9O9v7RjEYmg/lTH55S0rc+n4quqDIaddm9TE=
Subject key identifier:   8D:B3:05:59:89:FB:B2:5B:BB:6A:FF:94:1C:C5:D3:01:99:F8:13:E1
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435F7281C9E5D2AD6005440
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f7:28:1c:9e:5d:2a:d6:00:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=2f1ed98e-1c43-4bf1-9178-41e902cb2eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:9f:d6:ab:07:96:11:0d:ae:38:97:87:85:
                    b8:b8:6e:4f:bf:91:d6:ce:26:a8:2c:d7:05:67:fb:
                    a2:a8:bf:31:ed:c9:ee:4f:a3:5c:18:3d:30:9a:d7:
                    86:df:28:be:22:f0:2c:98:8c:15:57:2b:dd:96:ed:
                    a7:4a:90:81:7c:bb:70:95:ea:37:78:dc:41:6c:cb:
                    de:5e:be:fd:bc:1f:2f:c5:2a:6f:75:60:37:7e:c4:
                    0e:f9:75:1f:3c:64:0b:2d:43:30:16:96:c4:72:3e:
                    7a:57:07:e2:ec:e9:23:83:3e:26:da:64:cf:7b:8f:
                    b5:32:63:bf:b9:40:2f:8a:1c:ec:f8:0b:fe:ca:6e:
                    a4:2e:ea:b8:ba:79:b2:bb:82:93:4d:be:16:13:a1:
                    17:39:7d:26:8a:0a:1c:3b:cf:1b:5c:02:35:ff:78:
                    07:37:46:fa:e3:82:fe:77:5b:b9:e1:d0:88:0d:21:
                    a9:59:f7:7a:1b:ae:e7:f3:15:e3:55:44:8e:b6:03:
                    93:73:65:ad:95:86:4c:78:40:b0:bc:f2:89:7c:f9:
                    eb:61:51:34:31:1f:65:96:80:16:c0:ef:96:74:2e:
                    73:38:de:dc:e8:3c:ad:d8:a8:c6:be:00:1c:e2:04:
                    82:e0:1a:23:50:81:1b:b9:b6:21:53:b3:ed:15:91:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B3:05:59:89:FB:B2:5B:BB:6A:FF:94:1C:C5:D3:01:99:F8:13:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:0b:be:6d:aa:36:a7:72:d6:a2:07:38:f9:f0:54:76:51:ce:
         87:f5:50:92:18:01:52:70:54:da:57:fb:ed:2c:66:bf:2f:12:
         98:e5:2e:66:1a:b0:22:02:b0:ae:d8:4b:7a:06:a3:7a:ed:88:
         30:84:a7:b7:1d:fd:8b:29:35:db:78:3e:42:31:27:85:20:0d:
         e2:16:4b:da:ee:1c:95:00:9b:bf:ff:80:f8:a8:9d:c6:18:14:
         b7:49:af:0a:9a:6c:6c:cd:74:5c:95:de:73:28:d1:1f:2b:aa:
         85:f5:7f:bd:ae:e2:97:ed:97:99:80:7d:78:18:3b:21:22:fe:
         49:55:78:ea:58:cc:bf:76:d7:cf:11:58:87:48:14:cc:92:47:
         c7:e2:9f:ce:81:1c:ae:8e:cd:96:1d:71:b8:db:b8:e5:d2:27:
         8f:60:3e:3a:a6:b0:e5:b1:1f:be:d1:05:74:65:eb:f3:64:d3:
         fe:f3:4b:82:ea:ce:7f:92:ec:81:e1:3b:72:e5:f2:26:77:e1:
         33:5c:79:99:e7:d3:42:4e:6c:cb:0b:d2:9f:0d:28:37:6b:48:
         11:f1:15:19:d1:fe:99:48:f2:6c:f1:ff:27:73:d4:5a:7b:24:
         2d:35:12:f1:ca:8b:4d:05:81:e0:bb:85:bd:15:57:41:69:43:
         04:e3:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:11 2026 by rpki-client