Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa
File:                     8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa (raw, json)
Hash identifier:          roNTM/XF8pJbtmfV/DnVpeFEoHBSfOQX3zBLmx/jPuo=
Subject key identifier:   87:24:6E:BD:D9:C9:B9:3E:04:60:B5:19:42:78:60:47:3D:DD:CC:49
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0436315432E38CF489648580
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:31:54:32:e3:8c:f4:89:64:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=7e331c06-0a8e-4b6e-8a38-d7c187845fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:ef:f9:b8:cb:af:48:4c:da:41:87:ff:d1:
                    3a:26:7b:75:bc:20:c8:19:94:90:12:49:1f:fd:d2:
                    67:cd:16:90:31:11:43:58:01:b4:32:1d:91:7e:e6:
                    23:73:f6:58:91:6d:8f:22:3f:29:d8:a8:0f:32:02:
                    65:18:15:c7:35:7e:0a:4f:e2:ac:9f:33:01:f2:96:
                    13:6f:22:20:81:13:73:5f:55:2d:93:40:51:fa:f2:
                    d7:8b:67:7e:2e:7c:62:c3:2b:04:b3:a0:8f:40:a9:
                    3f:99:e9:8f:8d:2f:9b:b2:7b:ff:01:53:cb:d2:53:
                    07:19:90:1d:ea:4d:49:b2:99:57:98:5b:c0:9b:98:
                    f2:0c:19:fa:d4:c8:7e:23:ee:c9:0d:21:b0:5a:ce:
                    30:61:13:a4:26:42:78:c8:2c:72:f0:4b:95:99:a1:
                    f7:1b:2b:4b:0a:de:1b:4f:5b:d3:35:c8:24:93:58:
                    c0:f5:6e:16:41:40:b7:7f:e7:b2:67:93:a9:5a:9c:
                    3f:4a:43:c0:47:67:8f:89:6d:37:c2:35:d8:30:94:
                    5e:6b:1b:bc:61:56:e9:f1:45:97:16:c4:97:f7:2b:
                    d8:68:25:c0:b8:16:35:e4:10:78:ce:a8:ac:f4:90:
                    fc:05:ba:60:47:41:7b:32:25:4b:f5:fe:e7:1d:df:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:24:6E:BD:D9:C9:B9:3E:04:60:B5:19:42:78:60:47:3D:DD:CC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8b:8d:9f:6a:c2:d9:91:ee:c7:52:ec:b0:88:4a:8f:aa:bc:
         f9:28:44:60:c2:d5:c2:da:92:f0:5b:ed:e8:b7:d9:97:6a:98:
         c0:a7:db:c6:0a:f3:38:0e:5f:2c:9e:16:90:2a:b9:e8:b1:dd:
         ad:82:fc:e6:9c:9f:d0:7e:24:27:4e:0b:54:d8:1f:fa:4e:7a:
         e7:f6:71:00:6d:2f:6b:4a:51:6b:09:0d:34:be:0a:ca:29:b4:
         1e:47:81:69:b3:33:72:74:2a:6c:88:1d:e3:d4:4e:ad:3d:cd:
         d5:a2:9f:cd:fe:b2:99:d9:14:f6:34:4a:78:94:f1:f4:1e:18:
         eb:d6:93:c5:0b:41:70:bd:e7:b3:9f:4a:be:79:d6:42:a3:15:
         1b:81:f2:b7:d3:46:6d:78:2f:27:2f:df:22:72:48:9e:33:f3:
         cb:4f:18:22:13:fe:31:86:5f:11:c6:6f:03:73:29:81:b5:2b:
         a4:5d:3e:89:f8:e3:cd:bc:51:b4:e0:ca:56:a2:b3:98:4e:4a:
         41:5e:1f:64:ed:8c:50:67:83:11:1c:0c:d2:f6:56:8e:f9:0a:
         bd:30:f2:7a:67:32:60:c1:c1:7f:8b:cf:f3:c4:6a:06:f9:12:
         3d:19:3a:69:9d:93:d4:f8:a6:02:2a:94:dc:5c:10:4e:25:6b:
         a2:90:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:28:10 2026 by rpki-client