Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa
File:                     a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa (raw, json)
Hash identifier:          7bmGgkUJ92/GSEw5q7S0+ZsDPSgBULaT9tVfqRA3nCw=
Subject key identifier:   09:75:CF:4C:D2:47:FA:9F:64:B2:C0:AC:B4:8D:5F:1B:59:F3:2F:F3
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79BE5F7A67C0A63832DBF80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     207266
IP address blocks:        65.22.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:e5:f7:a6:7c:0a:63:83:2d:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2d3d04f7-07df-42b0-a838-aad12cdb2bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:f3:5e:dd:b8:c8:64:e1:b5:b5:b1:90:f9:
                    d8:4a:6a:99:ae:95:2b:b0:78:b4:ff:76:a3:c6:f8:
                    24:0b:a3:8c:bf:6d:b6:2e:71:83:41:b4:a7:6d:1b:
                    c3:4d:61:ae:48:e8:6c:c0:6d:38:61:77:52:36:2f:
                    f9:55:de:73:c7:53:54:1f:aa:a2:2a:a5:4f:2a:24:
                    d7:7d:8b:10:82:e4:80:e2:2e:02:48:6c:5a:32:17:
                    c5:f5:c7:9f:42:75:c1:6c:b6:95:d8:c4:d2:dc:b2:
                    da:9c:2e:d4:fc:21:a6:31:a3:77:af:89:69:bb:d7:
                    11:61:79:c6:2a:e6:a2:a0:e9:65:7b:1c:ba:22:bd:
                    52:bf:76:5e:43:f6:9b:20:17:29:01:80:a5:d4:02:
                    9b:58:ab:12:68:44:43:21:62:b9:3f:bb:bd:55:01:
                    3e:c9:11:ce:4b:27:32:19:50:60:45:7b:e5:eb:1d:
                    d9:26:d8:fe:24:5c:28:47:9e:c5:ce:fb:40:b1:ae:
                    81:d0:41:dc:e1:a2:8f:83:98:43:1f:51:4e:da:02:
                    35:af:6d:79:3b:85:87:e4:2e:a4:01:0f:db:86:eb:
                    1d:b8:8c:2f:0a:81:da:eb:79:20:c7:7a:1b:f6:01:
                    3f:23:7a:28:78:e6:d9:65:b4:77:a2:6b:76:40:82:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:75:CF:4C:D2:47:FA:9F:64:B2:C0:AC:B4:8D:5F:1B:59:F3:2F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:9e:d9:22:55:b0:15:1e:ed:5b:3f:1f:0d:01:44:7a:f7:
         f5:8f:d8:34:36:fe:99:1a:1d:29:96:d0:96:43:ff:f9:8a:cd:
         b2:fa:2a:91:6d:60:6f:83:e6:8f:ae:37:56:a6:0b:04:9b:6c:
         d4:a7:ed:47:2d:d7:a1:ee:5f:6c:32:12:68:ed:c2:ac:6c:d9:
         ba:63:58:24:c9:90:f9:03:0c:48:bd:a5:1d:e3:06:ee:4f:80:
         d2:a3:dd:e1:c1:1a:d7:ee:de:95:11:6b:f0:cc:f6:27:2a:c2:
         30:84:f2:fc:89:07:16:5d:e4:46:ea:95:ce:9b:8d:08:63:01:
         bb:b4:26:b4:40:b3:b6:af:c7:cb:07:9d:66:9f:1b:77:ef:91:
         72:69:cf:15:bd:54:ad:a6:78:d5:78:2b:83:e8:96:10:e4:15:
         4c:16:33:1c:ef:1b:07:ce:6a:e4:86:28:85:89:2b:f6:68:e3:
         16:38:01:72:03:27:bc:33:48:93:16:16:07:e1:2d:3f:4b:66:
         95:0b:e4:d9:a8:84:dc:dc:7f:de:ea:f7:18:a2:0c:fb:9a:58:
         44:bc:01:ca:6e:4f:91:ff:5c:f3:80:37:de:37:c3:16:d7:ba:
         5b:29:b1:b3:ae:e1:c3:72:ce:29:56:86:3a:c6:80:ed:e3:08:
         aa:00:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:03 2026 by rpki-client