Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa
File:                     d1ac60c5-9597-3dc6-96f9-a339051715df.roa (raw, json)
Hash identifier:          ebosw6mQNlvftRS9pANR+je6HdwkGqQNNQoSeikDPEU=
Subject key identifier:   48:65:77:29:7D:A4:91:D7:B1:79:53:D2:3C:17:04:31:0F:9C:E6:1C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04361ECE6A6ECBD997AFF8A0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:1e:ce:6a:6e:cb:d9:97:af:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=459f7ca6-1fe3-47ee-a0bc-c9d8c1cf26cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:0c:af:08:09:09:2b:14:4a:96:21:84:01:
                    fe:99:c6:db:1e:99:7f:aa:91:d3:40:aa:9b:f7:81:
                    28:27:87:e8:54:dc:f5:e8:ee:1c:e6:b7:c5:4d:14:
                    7c:b6:99:7a:09:fc:31:61:da:b6:dd:57:5d:05:d9:
                    df:d8:92:0a:8b:e0:aa:1e:50:01:10:8a:59:19:41:
                    9b:96:52:d3:22:5d:50:47:1f:ae:fc:1f:01:b8:c6:
                    46:62:2e:f3:68:3b:65:8d:56:e9:87:0f:aa:4e:57:
                    8c:82:26:f6:54:c0:c7:62:51:bb:5e:9e:ef:5c:3a:
                    1c:07:cc:37:f8:d0:bd:d7:68:b2:e1:aa:b1:cc:90:
                    4d:47:3c:21:0f:17:d3:77:ee:f6:4e:06:e4:aa:a9:
                    72:16:2e:13:5d:05:3a:31:27:85:a7:3b:61:fa:4b:
                    d2:9a:44:9e:16:4a:27:f3:84:2d:ff:21:24:19:19:
                    37:f3:c2:4f:11:cc:0c:40:c7:46:c8:a0:df:96:a2:
                    2d:bf:73:7c:b8:f2:41:1c:72:59:17:cf:12:5f:e5:
                    7f:65:fb:ac:55:74:54:51:6b:6d:20:4d:fc:9b:1d:
                    4d:5b:1c:ae:a0:51:ca:5f:a4:b0:59:2b:af:d2:55:
                    8e:c4:35:31:6d:31:62:f2:92:f0:25:bf:95:d1:b5:
                    24:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:65:77:29:7D:A4:91:D7:B1:79:53:D2:3C:17:04:31:0F:9C:E6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:f9:8a:b1:e2:bc:53:c6:cc:ed:6a:6c:9b:da:fb:3d:f7:
         eb:73:41:0a:72:ff:a7:7e:13:06:22:cd:39:f0:05:30:5a:c4:
         5e:97:de:81:f0:63:55:aa:0c:26:c4:b0:5c:b9:c5:c5:71:21:
         c3:96:d6:64:d7:4e:8d:c9:bc:5d:2d:6d:5d:e2:98:40:2a:3f:
         0d:ba:01:a2:97:9d:73:fd:c2:1f:36:66:3f:02:9f:63:6c:fc:
         ee:f9:a8:46:9b:60:d4:3a:6e:37:b8:66:2d:1b:2d:5b:18:cd:
         f7:0d:19:2d:85:17:88:d1:d2:aa:71:63:c3:0f:47:ab:d7:ed:
         35:b7:cf:ca:73:9d:f0:96:c6:25:55:11:86:f0:ad:97:e3:68:
         79:6a:df:aa:5a:3a:39:02:6c:f5:b7:25:be:91:9a:86:78:82:
         85:51:dd:2c:55:bb:dd:7d:75:62:b1:eb:51:59:83:6e:69:e9:
         30:1e:c6:50:c0:51:c0:19:57:0e:47:2f:d2:ca:34:53:ff:5d:
         a0:11:32:ac:2c:46:71:b2:44:0b:a1:76:19:fc:29:08:44:49:
         3f:b8:ec:dd:80:11:e7:dd:ec:ed:f2:47:0e:0e:ac:1b:63:bb:
         77:81:de:1f:88:41:ac:88:fc:09:4d:8d:d3:75:f1:28:7a:1b:
         f7:a7:2e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:41 2026 by rpki-client