Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b801b9be-be45-38b6-b165-3d158cf24cec.roa
File:                     b801b9be-be45-38b6-b165-3d158cf24cec.roa (raw, json)
Hash identifier:          VoVHZ5ciWuRpyK37Ryk8OyAhcm5SZEs5B0ua3ylV8Z4=
Subject key identifier:   0A:D8:05:59:67:61:5C:2E:BE:83:14:7E:D1:43:D2:85:12:4D:02:FE
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435D69B7A93F8396BA54B80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b801b9be-be45-38b6-b165-3d158cf24cec.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d6:9b:7a:93:f8:39:6b:a5:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=f20a87e2-8727-4838-afd7-584e1904e4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:a0:ae:2a:89:c1:e8:13:2b:ed:41:69:78:
                    e8:ab:d0:21:64:5a:24:ed:97:f8:17:30:fe:8d:f8:
                    cf:57:4d:01:c6:2d:a5:a9:b1:cd:ed:c2:5e:23:26:
                    fe:38:37:73:bf:8c:d9:bb:d2:28:66:a6:b8:2a:de:
                    22:c6:18:58:48:f8:4e:b3:14:3f:13:da:73:9c:d8:
                    e0:cb:97:a9:86:1b:f7:78:b6:3b:ec:7c:60:33:fb:
                    1e:f9:c7:2b:13:33:c9:e4:d8:16:46:f8:84:fe:ce:
                    00:63:a4:87:62:e7:ca:42:1b:66:40:47:24:e0:de:
                    2c:28:2a:8f:61:95:b3:7b:5f:82:c5:90:47:cc:ea:
                    53:70:31:5a:48:a7:51:48:9f:25:88:9a:fa:60:37:
                    bd:04:7b:f6:8d:c5:89:b8:0d:ae:eb:3d:d8:26:61:
                    ff:ba:4a:22:43:07:a1:2c:45:0e:17:e2:04:d7:7f:
                    77:59:9d:15:71:70:6a:e1:83:89:00:7c:c1:48:01:
                    32:75:15:c7:7d:d1:3d:fc:0f:35:d5:ea:6e:55:a7:
                    30:ea:99:e7:63:80:35:60:85:c9:97:fd:66:c3:26:
                    54:a8:74:8d:17:38:f0:35:e2:fa:90:37:db:2f:46:
                    62:b5:8c:a7:84:3d:5f:8e:fc:b0:59:7a:2f:0f:2f:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D8:05:59:67:61:5C:2E:BE:83:14:7E:D1:43:D2:85:12:4D:02:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b801b9be-be45-38b6-b165-3d158cf24cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:56:5d:0d:ae:31:d1:0f:b9:f8:2e:5b:82:e9:c2:3f:7a:
         34:70:25:33:e0:16:18:16:ab:ff:d9:90:36:87:51:42:2e:c8:
         f2:60:52:da:5c:4b:5e:aa:7c:c3:86:b7:da:c2:94:08:d2:74:
         dc:84:1f:cb:cd:42:a1:dd:12:08:e6:33:56:ff:77:40:2d:64:
         44:ba:43:39:94:ac:15:82:2f:f0:72:50:ef:48:47:67:02:96:
         26:2f:bb:5b:17:c4:5e:52:ff:91:b0:6a:38:95:ad:37:9c:1f:
         32:10:8e:1e:ef:33:45:8a:48:db:cb:90:07:c9:cd:46:a4:86:
         49:4a:a1:23:2c:43:bb:b6:de:04:2b:76:59:b9:8a:86:53:48:
         e4:c9:ce:93:f1:71:ed:8e:92:b6:3c:2a:45:7a:ab:3d:84:d8:
         da:9b:cc:b7:55:e3:98:6d:a2:ee:69:5d:d5:24:bf:53:61:b5:
         c8:0f:3e:2f:2d:6a:4f:92:e8:66:f4:bb:2d:d9:c5:66:c4:a7:
         aa:a3:18:0b:ed:0c:aa:96:36:1b:8f:5b:9f:d8:7e:57:5f:67:
         ba:1c:2a:8a:75:71:16:17:22:5a:48:f5:46:c5:00:e7:c2:13:
         f0:1d:8b:ac:43:2c:9c:39:54:45:ff:22:f9:68:4a:f0:1e:98:
         48:4d:81:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:19:12 2026 by rpki-client