Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fac1d366-bdc7-3878-91f3-f21d7540ae5d.roa
File:                     fac1d366-bdc7-3878-91f3-f21d7540ae5d.roa (raw, json)
Hash identifier:          FsHwXkSgc9snKRKoPfRywVdCDgSjRm7kVHrdTF9G6jA=
Subject key identifier:   02:A0:5B:2E:1F:3E:18:73:C7:21:9C:6D:40:7D:18:BE:BF:F3:AC:F9
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C8AF1209392E01264EC80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fac1d366-bdc7-3878-91f3-f21d7540ae5d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:8a:f1:20:93:92:e0:12:64:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=892dccc4-3f9c-4c37-adac-64432b3ee890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:84:11:1c:2d:25:6c:63:9c:be:38:ad:70:
                    66:f1:fe:84:ab:a3:5a:ff:f4:b7:bb:3e:db:48:7d:
                    aa:1a:01:23:e7:4d:6c:a7:ed:f9:4b:2b:a6:72:3c:
                    c0:78:f9:f4:e2:41:41:78:bb:10:7a:cc:86:eb:01:
                    b9:b0:ed:21:bd:2e:4a:8f:3e:19:9d:07:30:0c:b8:
                    d3:d2:3e:ae:aa:4b:69:7d:b6:3f:0c:1c:7f:a4:a6:
                    ad:07:40:2f:89:0e:6c:56:6e:97:79:95:cd:f8:71:
                    d2:0b:94:02:92:4e:8c:52:64:2f:60:ff:41:a1:f4:
                    cb:69:53:4d:36:dc:8a:91:ac:f1:80:c3:f0:01:e0:
                    ad:d2:4b:e9:15:e3:5d:36:24:04:14:6a:2b:8b:77:
                    a0:4c:ed:0d:37:af:3e:a1:8a:40:68:46:54:1f:11:
                    37:a9:4b:e9:86:08:2c:42:5a:d9:06:6b:a8:da:43:
                    59:da:4b:d7:19:40:08:86:5e:97:78:44:d3:6a:9b:
                    23:fe:ed:e0:3f:c5:69:c1:07:cd:55:a6:ec:46:56:
                    e2:99:c5:df:7d:fd:13:4a:c9:ff:f1:c1:07:ad:94:
                    73:50:fe:d9:92:68:81:72:44:44:53:f1:a0:0c:6e:
                    4e:70:4b:8a:6f:45:96:14:f9:31:fc:a9:1a:0f:15:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A0:5B:2E:1F:3E:18:73:C7:21:9C:6D:40:7D:18:BE:BF:F3:AC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fac1d366-bdc7-3878-91f3-f21d7540ae5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:06:36:9a:af:84:94:5e:0f:09:a3:be:6e:0d:dc:20:c0:dc:
         d9:d6:55:6e:71:ee:18:c2:98:62:68:a4:bb:77:f5:d8:43:2d:
         0b:f4:46:0a:47:b7:d5:28:96:4d:0c:db:6a:68:81:66:e8:66:
         0b:5a:3c:03:60:93:81:0e:b4:51:c5:70:3f:8d:a7:77:6f:0c:
         34:cc:2d:53:19:17:e6:72:ba:ad:93:14:10:03:72:75:24:3f:
         97:a4:57:6a:3a:ed:55:3f:19:8f:79:11:fd:d5:5c:ec:89:41:
         ef:24:e8:51:43:53:d9:34:e9:4f:11:20:fc:37:aa:91:54:bb:
         3e:fa:9d:88:b3:be:9c:66:0a:d9:89:ea:82:ca:c9:10:05:e1:
         12:a5:75:61:4a:20:09:1f:0e:77:5e:cc:1b:51:0d:c2:a8:d4:
         51:20:a9:b4:f6:a7:cc:23:71:b0:36:c7:d9:15:89:f3:47:7b:
         ee:a0:6c:f1:b9:98:74:2d:a0:3f:f4:79:b6:1d:06:07:96:eb:
         84:6d:74:1f:58:71:46:4a:49:c1:ea:8c:2b:7b:33:c3:e4:d6:
         44:36:fe:da:95:c3:04:4b:d0:a0:9b:1d:13:d2:dd:25:4a:4e:
         70:ab:88:b2:ab:91:7b:22:2e:bb:90:56:91:a6:01:85:a5:ae:
         7f:74:7e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:23 2026 by rpki-client