Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa
File:                     043392a1-76c7-3951-b215-fe1dd38b254d.roa (raw, json)
Hash identifier:          SBiljBbBz41h4SdY3+XVClAq6oeNeCwciuPDXju0x+c=
Subject key identifier:   28:17:0F:8B:6E:5C:77:9C:A5:BA:74:4D:1F:D1:47:D2:1C:FC:BE:B6
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A0A1BA1EC33BD245C5900
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:0a:1b:a1:ec:33:bd:24:5c:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=d4a75cea-70ea-44bd-984a-913fff679829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:e4:7d:94:2f:a4:06:7d:10:f5:9f:fe:6f:
                    c4:24:4c:d6:a3:a0:4d:24:c6:4b:9b:71:f0:32:2a:
                    96:32:20:54:58:d0:4a:17:6d:24:e8:35:6a:6e:ec:
                    fc:ea:6b:eb:7e:9a:fe:5c:ae:54:32:e6:68:52:5a:
                    ca:b6:b7:ac:65:4c:99:f2:9b:b2:31:11:68:1e:e7:
                    66:fc:62:7d:af:5c:73:77:d4:3b:0d:1f:31:55:f8:
                    ec:fb:eb:ba:20:97:67:a8:db:92:a6:03:e3:dc:3b:
                    34:20:77:c4:92:01:20:12:c8:56:8d:0a:b9:31:fb:
                    68:03:d5:b3:c8:46:26:a8:59:68:32:f5:7d:fc:07:
                    d7:45:0a:5e:61:fa:f3:fc:71:9a:df:96:55:a7:34:
                    38:c3:7c:c8:37:bc:7d:2d:10:6b:30:85:d3:89:61:
                    c1:23:e4:43:a9:12:b1:e9:10:b7:5d:55:36:f2:db:
                    e6:f6:74:6e:3c:e4:cd:bc:f0:9c:4a:54:34:a8:96:
                    62:69:9e:68:9f:98:75:4c:38:db:a3:b1:31:15:d2:
                    1c:27:6f:65:ef:9c:32:d2:bb:73:91:e2:dd:c0:89:
                    9a:bc:f6:8b:95:7e:e5:60:71:f0:0c:3c:1e:6d:b1:
                    1a:97:85:86:6b:b8:cf:7d:15:35:54:1b:d2:6b:07:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:17:0F:8B:6E:5C:77:9C:A5:BA:74:4D:1F:D1:47:D2:1C:FC:BE:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:a3:fd:24:b8:e1:84:80:fb:0a:ae:34:d0:cd:3c:df:b8:
         70:a0:3d:3d:0c:13:da:de:e7:34:33:82:fa:b0:cf:6f:45:33:
         cd:27:3d:48:2c:28:73:e1:1b:c4:65:c7:72:53:68:f8:06:ca:
         c9:88:c6:18:15:5c:82:6f:b9:9f:6d:39:38:49:ab:29:00:03:
         1a:57:32:e1:29:ed:dd:a6:75:1c:64:35:fc:09:a0:ae:a9:86:
         61:d7:5b:f0:92:22:55:35:63:63:6c:0c:19:63:97:18:87:7c:
         1e:e3:27:a5:82:e1:24:69:86:f0:bb:a1:3f:40:14:29:19:20:
         0b:71:da:f9:81:6d:6c:c3:5f:e5:a0:a9:9d:49:df:e4:aa:14:
         8b:8e:9e:33:19:f3:6a:81:4b:04:19:19:a6:6e:ab:bd:c5:d2:
         78:4c:3a:8b:3a:9b:53:fc:a4:00:44:63:58:61:86:84:94:2a:
         d6:95:d8:81:6b:fc:09:ad:ff:6f:95:48:01:b9:4a:2f:bf:ff:
         88:45:30:ad:c7:fe:fd:f6:33:f2:b1:d8:92:62:b3:35:4b:18:
         c3:0f:50:00:11:02:7b:70:41:a7:eb:44:6f:19:cb:b0:06:c0:
         a6:72:37:80:31:40:d8:18:83:e3:64:6b:79:92:b9:b2:08:cf:
         eb:f7:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:54 2026 by rpki-client