Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eafdc134-9664-38ab-ad7e-79d05ce59caf.roa
File:                     eafdc134-9664-38ab-ad7e-79d05ce59caf.roa (raw, json)
Hash identifier:          RO++aGb+LW5nTSJT0Dgz92XQY8EOgJZ2/ZwmYnnBQ/o=
Subject key identifier:   49:E5:03:4D:25:DE:C1:10:5D:8A:42:08:DC:4A:91:EE:A3:AC:46:3B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435E6F8D4122B76275B8110
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eafdc134-9664-38ab-ad7e-79d05ce59caf.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     207266
IP address blocks:        65.22.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e6:f8:d4:12:2b:76:27:5b:81:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=9db1aa41-65a0-4aa5-a99c-443e81e2060b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:ef:27:05:a2:57:4d:ad:8a:b7:e9:59:e5:
                    2a:10:2b:ef:18:26:39:0b:9e:1d:4c:bf:03:ab:45:
                    03:91:a7:e6:f8:a9:33:c3:95:b0:97:b0:fd:06:ac:
                    16:f7:c4:cc:9f:08:6d:e0:22:d6:a0:d5:91:ba:46:
                    53:33:33:d0:30:85:3e:58:79:eb:a6:df:fb:51:17:
                    ab:fb:2c:c4:0f:11:aa:33:b3:73:c7:cb:08:24:18:
                    4a:c6:fd:61:a4:b7:08:d0:88:f6:0b:fa:00:68:d3:
                    0f:31:8f:70:04:31:27:63:41:d8:c7:d5:89:e6:56:
                    2e:d6:67:41:1b:7b:af:79:2d:36:09:f9:cf:3a:1e:
                    ba:d0:8e:57:cf:a5:28:95:f1:a6:af:20:f6:76:4f:
                    ab:4d:5b:2f:65:92:6f:fe:72:fd:ee:ee:e7:a6:a8:
                    72:69:f0:dc:8e:b5:90:37:7e:65:86:32:63:aa:01:
                    6a:09:1b:7f:fa:e4:85:b9:90:be:01:6c:ed:9e:15:
                    ca:05:a3:57:60:17:11:39:65:4d:19:76:8d:b7:75:
                    a8:e8:3f:fd:52:a9:c9:1b:b6:3a:3e:74:6e:37:40:
                    98:5e:f7:be:40:5e:60:2f:4b:b3:d7:a1:a1:bf:22:
                    1e:7e:5e:33:75:3e:fc:f8:57:f3:fc:99:2e:ef:05:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:03:4D:25:DE:C1:10:5D:8A:42:08:DC:4A:91:EE:A3:AC:46:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eafdc134-9664-38ab-ad7e-79d05ce59caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:ad:b3:ba:31:cd:f2:a9:05:49:63:50:88:77:fd:14:16:
         b4:eb:1a:9c:40:1f:88:b2:ca:bf:36:de:01:06:cb:0d:75:32:
         2d:19:16:59:1e:71:3f:2c:08:8b:6a:32:f8:4e:63:d2:24:c7:
         6f:15:0f:fc:d1:55:c7:94:23:51:73:45:62:ea:11:49:c3:2c:
         29:2f:cc:56:af:06:9b:83:59:bc:c6:3f:21:a6:dd:03:7d:ca:
         41:9f:a9:2b:ba:4f:c0:a0:05:58:76:d9:1f:3f:1e:31:85:9b:
         a9:12:c2:c7:63:2f:d4:18:50:e3:5c:a9:b5:0c:e0:74:aa:d1:
         66:47:c4:2f:bb:c2:ca:79:b2:19:97:f9:9f:20:39:19:66:8f:
         22:1b:9f:9e:bc:ad:a3:fd:1e:ac:1e:53:2f:dd:9f:5f:74:99:
         25:fc:36:80:ad:27:14:b1:f6:eb:b3:be:92:e6:17:8f:a6:96:
         d5:f8:c7:c4:ff:f5:9e:6e:00:14:90:e4:95:98:58:96:51:8a:
         11:80:72:c2:be:ac:e4:b4:78:ef:91:8c:7f:b3:52:0b:5b:ec:
         83:e2:39:58:03:87:da:d3:b4:62:d6:c1:6f:19:ba:ac:7f:8d:
         9a:b5:88:ab:96:0b:c4:5d:f3:83:e8:65:82:bb:8b:22:59:4a:
         cc:a0:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:44 2026 by rpki-client