Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa
File:                     d5b724de-9f61-31f2-b085-181a0a9d1526.roa (raw, json)
Hash identifier:          UxvAWPDC5FclkIS/FX6GLHm09zJYyFjoCbmftvC86pw=
Subject key identifier:   54:77:EB:8D:7F:BC:14:B7:24:86:10:A4:79:04:46:F1:23:78:E2:9F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79BC1B8841ECD34E63D6880
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:c1:b8:84:1e:cd:34:e6:3d:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ca7e7802-344b-4b10-8a41-44667ed64729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e2:35:ba:31:8c:8a:21:59:6a:0b:6d:92:92:
                    3c:b3:72:2f:8c:f9:ac:3e:5f:d1:98:4c:30:e0:71:
                    f5:8a:06:3e:b7:dc:43:de:11:b6:28:db:3f:44:65:
                    64:1b:68:fd:e2:9c:e8:aa:c0:af:ca:9a:36:cf:9d:
                    bf:2d:51:18:1c:52:6c:3a:f1:ea:7d:32:57:8a:3b:
                    64:e6:a8:c8:1a:d2:98:4d:2f:02:fa:62:71:0e:87:
                    13:32:4a:bd:94:e9:c0:76:76:9a:2f:36:ac:cf:5e:
                    b0:2c:80:b1:e6:20:37:ab:9c:ea:c9:96:b5:f0:40:
                    3f:74:b5:15:f6:d9:c9:c7:56:1a:de:d0:69:c8:ab:
                    25:80:8e:c4:a8:3d:17:95:d7:51:86:5e:67:87:e1:
                    ce:27:65:06:cb:75:1c:10:10:72:63:0f:65:49:4a:
                    c5:6c:81:e4:4e:47:c0:7e:7f:46:b3:54:eb:0f:c8:
                    26:b1:eb:3d:ca:fe:47:75:bf:c3:ca:00:fd:98:d1:
                    3a:bd:e0:51:82:8a:76:17:d5:d2:95:46:fb:e6:df:
                    5a:b8:f4:b2:3c:68:e0:32:cd:29:64:c1:63:24:84:
                    e2:88:78:39:48:ae:5d:a1:8d:6c:a9:69:e6:00:f5:
                    5f:53:4e:0f:c5:a6:e2:62:14:d8:d9:2c:92:86:dd:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:77:EB:8D:7F:BC:14:B7:24:86:10:A4:79:04:46:F1:23:78:E2:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:6e:70:ff:6d:a5:e4:48:10:4e:f5:6b:69:d1:2d:70:68:ca:
         be:4a:86:43:5c:59:c0:0e:6a:d8:4f:c3:ae:20:48:c1:5e:c9:
         64:f0:82:5e:cd:8a:6e:f5:ca:8a:f7:37:a0:c6:05:a1:c4:92:
         44:25:6b:d3:de:db:e1:3e:bc:9e:1f:14:1c:aa:4c:0e:bf:1b:
         5d:bd:bb:38:1b:cd:ea:47:69:fb:75:73:15:a3:b3:ee:d1:00:
         3b:21:8b:04:0a:08:8d:a8:85:bd:af:5a:d4:a1:72:8b:29:1e:
         be:09:a4:01:7f:21:21:e2:37:62:16:c0:7e:b6:a7:90:42:8b:
         a7:54:12:e4:e7:f0:5f:d6:6b:b1:a6:33:9b:26:d3:88:de:ad:
         30:a7:72:a2:08:8b:05:9b:53:2d:06:86:09:06:7d:ea:e7:85:
         5e:dd:08:db:a7:f2:7f:d3:fc:37:3d:89:5e:91:79:0a:c4:74:
         e4:fd:ed:d8:c6:a8:9b:1a:8a:c9:e9:18:bb:81:04:f3:23:54:
         dd:64:53:41:15:c6:79:92:63:fc:72:8e:aa:a2:22:dc:78:cb:
         bc:98:96:de:05:aa:22:41:e1:23:fa:24:2e:b8:c2:a0:c4:77:
         46:61:0e:e0:7d:25:dc:a2:b8:d2:09:f4:91:e2:e2:28:72:da:
         5e:f2:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:48 2026 by rpki-client