Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa
File:                     2be93fff-4c46-33c5-9359-9e2b6eada742.roa (raw, json)
Hash identifier:          iEDndP6DqDlrhWIurMbtmlMj8MuT0ZWuaY23GR+lUO4=
Subject key identifier:   FC:58:A4:B0:3E:DD:35:BE:2E:DF:48:CF:B4:74:B9:68:9C:31:4B:26
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E2D9F063A9C880A3C5D278300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     13810
IP address blocks:        65.22.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:06:3a:9c:88:0a:3c:5d:27:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=8d1d1b4c-0d8d-4c62-b277-f0c3678c350c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:43:5d:15:0b:f5:b4:dd:01:a8:ab:d9:66:
                    76:7c:36:ef:a5:ee:ef:ef:b1:2a:74:2d:8b:44:db:
                    7e:fc:1e:f8:cb:b6:0b:6a:b0:c8:53:f5:b1:5e:ae:
                    f6:0a:74:db:10:76:73:b1:75:46:31:d2:7e:bd:40:
                    0d:cb:80:21:4b:6c:c9:cc:45:b9:6e:c1:09:5b:6f:
                    02:1f:ca:1c:a0:ce:fe:78:a0:c5:a4:74:c5:1b:65:
                    fd:22:19:c8:3d:e4:98:6b:84:21:d4:b6:53:24:b9:
                    33:98:03:56:41:54:57:9a:c9:3b:fe:06:aa:af:ec:
                    78:4c:84:25:02:10:ba:af:50:52:b9:d3:d3:0e:5c:
                    4e:a8:58:50:99:30:99:a8:09:69:dc:0e:bd:de:76:
                    8a:ff:5f:22:17:79:ce:08:40:d0:17:45:b8:64:3f:
                    3e:9c:4c:30:e9:06:3d:d4:78:e6:8e:e1:fe:86:63:
                    72:95:fc:eb:7c:7f:d9:42:b7:c2:03:9b:9e:b4:99:
                    66:69:a9:d0:18:e0:89:a1:7a:53:d3:8f:c5:ca:da:
                    a5:50:fe:76:a0:f9:ef:9e:61:fc:7d:27:10:4f:eb:
                    5f:aa:53:87:ec:ed:17:91:b7:a1:99:d9:36:2c:42:
                    3c:43:00:53:0a:59:af:3a:b2:7c:1d:44:66:cb:2b:
                    bb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:58:A4:B0:3E:DD:35:BE:2E:DF:48:CF:B4:74:B9:68:9C:31:4B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c2:b1:d6:4a:65:94:07:44:c7:57:07:02:ca:89:87:ad:7a:
         fe:43:44:fd:4a:79:34:d3:de:99:69:43:5d:71:6b:65:f5:c7:
         dd:cd:6d:8a:69:b4:65:cb:d2:9d:27:63:f6:61:70:67:e7:df:
         7d:fe:bf:20:8b:78:58:b6:00:89:c9:d1:39:01:6d:3a:d7:2f:
         41:77:4c:cb:5c:5f:f1:e0:d5:b2:23:58:ba:f1:7d:7d:36:36:
         42:d7:b7:d0:e6:b8:cb:20:d0:28:9d:0c:ec:e3:d1:30:0e:02:
         42:ee:b1:d5:64:6b:c9:8f:27:29:8a:df:1e:a8:a8:82:7c:8f:
         ac:a5:cc:78:1c:e9:7b:f7:33:5a:f3:ae:10:3f:ca:f0:67:db:
         14:df:43:15:40:78:a0:2f:86:81:59:80:34:46:bf:c5:b5:e6:
         b9:d4:2b:48:a5:ee:7c:51:75:c4:0b:fc:fd:0a:db:55:ae:b2:
         3d:97:3e:48:5b:24:92:b6:b9:b7:9c:8a:71:b6:ef:67:1e:86:
         26:cb:49:b9:73:18:a8:97:6b:dc:4b:0e:d3:cf:d8:8d:f0:40:
         2d:70:3b:92:6e:e7:e9:f7:07:52:93:c7:9c:38:65:a7:23:01:
         ec:e1:e0:5b:41:cd:63:f9:89:1b:27:33:b6:19:93:23:c6:11:
         72:7b:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:12 2026 by rpki-client