Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa
File:                     7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa (raw, json)
Hash identifier:          hGUwRlXkSM9MnPoLukfd2UX+ofnERQp2+B6KcTUjgbs=
Subject key identifier:   08:A0:EF:02:8F:A3:5C:7D:E5:20:03:2B:53:A7:65:37:C7:8F:36:A6
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4989B0EB2620A73C6BE35580
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:b0:eb:26:20:a7:3c:6b:e3:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e7a2705c-5525-4559-b15e-78eceb351825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:44:87:9d:72:bc:06:16:7e:4f:29:ae:06:
                    e8:56:e1:ee:20:aa:f7:31:a9:9a:c5:c8:a2:1e:44:
                    2e:e2:ef:82:a6:f2:95:e2:36:67:03:0c:cf:51:37:
                    9a:ec:d6:45:92:93:63:9c:8c:db:c0:d7:5f:9f:f2:
                    8d:87:92:02:19:14:34:7d:10:0d:1a:32:21:d4:c2:
                    e0:77:c1:b9:b5:fa:04:18:89:22:ed:fd:da:1a:89:
                    a6:2f:f4:a9:53:7a:73:62:88:9c:3e:c5:fd:d5:2d:
                    35:28:cf:e6:27:25:19:2b:91:1c:65:d4:ab:6c:56:
                    cb:85:8d:26:d3:90:6a:3e:7a:78:95:51:1b:af:4a:
                    88:59:77:65:59:93:8e:57:c9:2d:c7:ee:dc:cd:d9:
                    ef:93:a4:08:e6:f7:d2:36:37:60:9c:70:04:93:7b:
                    96:bd:9b:b8:46:6b:cf:a0:10:a5:e3:49:cc:94:d7:
                    84:1d:ca:52:15:60:c8:39:18:bd:e6:fe:ff:8c:4f:
                    c8:a6:45:91:a5:c3:bd:73:45:8f:e4:fa:62:ae:8f:
                    1c:10:de:6b:42:88:76:cd:f9:56:1a:75:da:79:f6:
                    6d:82:d2:d4:01:53:3d:54:8d:5b:00:09:d8:ec:43:
                    54:93:81:f3:20:b3:2c:21:34:45:3c:4e:dc:4a:e8:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A0:EF:02:8F:A3:5C:7D:E5:20:03:2B:53:A7:65:37:C7:8F:36:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:c3:3b:69:85:1e:50:d7:3b:13:49:54:16:0a:f0:b4:4f:
         12:90:5c:5a:a4:c7:4b:d0:36:2f:a5:0f:24:df:8b:90:5e:07:
         d5:8f:e9:64:ef:c5:79:f3:7b:79:5e:ad:7e:15:1f:86:4c:c1:
         a5:00:67:c4:47:8d:c3:5a:94:bf:c7:22:cf:45:92:de:0e:65:
         15:ba:44:24:5c:cb:04:52:c3:33:61:20:b2:07:66:25:ee:00:
         60:fd:a1:da:80:d9:c9:d4:93:d6:10:03:07:47:81:6e:bd:05:
         a7:c9:d4:89:17:23:a6:98:1c:34:ab:9f:fc:d0:2f:af:44:b8:
         80:15:f6:a4:fb:7f:71:07:00:e9:b4:aa:85:c1:25:70:4f:66:
         e2:5f:5d:03:d9:1f:af:85:83:c4:b6:23:67:07:54:4e:d1:c7:
         4f:94:ae:99:96:1f:35:3e:8b:b7:40:84:81:22:92:67:c5:20:
         7b:19:fa:fb:af:15:bc:30:55:01:af:46:69:b3:4b:b1:38:1b:
         78:95:48:05:77:76:a6:2b:5a:25:27:ba:a2:27:e4:4c:85:c6:
         85:d4:d8:89:68:2f:2d:15:9f:53:a2:43:fe:09:8d:38:a9:32:
         d1:37:98:37:48:96:ee:1d:07:f6:f2:ad:a4:63:bc:11:2c:fb:
         11:bc:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:45:37 2026 by rpki-client