Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/525209ec-8bdc-3150-94ec-e7bbe398fcfd.roa
File:                     525209ec-8bdc-3150-94ec-e7bbe398fcfd.roa (raw, json)
Hash identifier:          RhiyoHXIforx80L5tnuTwydd0iiRvWkGDRw+ZyUcwmM=
Subject key identifier:   2E:DE:5D:B8:CC:F9:07:31:B5:DA:31:B7:DF:37:BA:DA:F6:AD:21:4B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4989F0863427B1F0973B2300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/525209ec-8bdc-3150-94ec-e7bbe398fcfd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     207266
IP address blocks:        65.22.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:f0:86:34:27:b1:f0:97:3b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9a217f4e-ac4d-406c-92e9-3ecd5b79b438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:78:a8:2e:7b:ed:c5:3e:fd:4c:a3:5e:eb:
                    16:65:b9:a3:2e:13:d1:bb:66:06:54:bc:9a:4b:54:
                    a0:65:e4:09:ff:1d:0d:6a:22:7a:6e:37:19:95:06:
                    95:58:a4:4a:21:c2:61:41:06:33:e8:66:f8:ec:bd:
                    f3:21:ee:75:4c:7f:b3:01:62:9a:08:14:05:dd:29:
                    ba:80:c3:61:a8:57:70:be:52:f9:4c:2a:e0:db:32:
                    57:4d:ac:6d:90:59:69:6d:72:d0:b3:72:23:00:26:
                    25:57:f0:f3:cb:98:af:b3:2c:98:13:d5:7a:32:a8:
                    df:e8:c8:c5:98:a0:bd:4d:d6:ec:0a:57:d1:8b:62:
                    9b:d9:6a:3b:34:2a:dc:de:43:e3:40:65:2a:a3:49:
                    92:12:93:4c:f8:8a:de:df:63:04:ac:97:64:0b:a0:
                    2d:03:3f:05:24:85:00:1e:1b:cf:db:d7:aa:01:0b:
                    e5:ba:66:3c:93:89:c0:fb:26:95:b5:55:48:7a:05:
                    49:b9:c8:47:84:78:f7:f2:a8:95:04:2e:a1:ef:30:
                    ea:36:7e:57:6e:5e:c7:3b:75:61:04:26:bb:39:c4:
                    60:de:09:74:ba:79:2f:59:2c:0f:ac:5e:04:c9:79:
                    45:ff:2e:4a:49:6c:07:33:a4:09:7c:8d:59:c7:9d:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:5D:B8:CC:F9:07:31:B5:DA:31:B7:DF:37:BA:DA:F6:AD:21:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/525209ec-8bdc-3150-94ec-e7bbe398fcfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ee:2b:78:0c:82:f4:59:bc:1e:b4:3f:42:fb:1c:70:2b:99:
         34:9a:a8:3c:1b:18:59:b6:ca:67:d9:c8:47:28:77:e4:da:f4:
         cc:7e:ac:5f:1b:94:36:c2:25:a3:32:49:17:77:5e:49:82:50:
         a1:82:cd:a7:43:40:84:19:0c:55:98:77:67:a1:b4:52:59:fb:
         4c:0c:a7:2a:3b:32:d8:ff:14:f0:14:87:55:61:d8:4d:ff:84:
         b5:e1:b2:67:92:fb:cc:ec:26:0a:c1:da:e9:01:fe:ac:84:4d:
         87:91:aa:0a:05:2e:c8:47:fe:59:e7:c7:f5:fe:eb:be:ef:34:
         b5:e2:e6:fc:2c:61:5e:ee:76:84:e0:ad:e5:f9:63:5d:eb:a1:
         7c:76:5a:37:b5:c3:fa:db:93:84:df:bf:39:be:c8:83:c8:e1:
         c6:d3:5d:4a:1d:57:33:9d:f9:1a:38:98:3e:1a:44:53:aa:b4:
         ae:b5:c2:1f:cf:51:15:c5:c4:2c:0d:ac:e0:86:8f:86:d8:28:
         da:99:32:69:b5:78:83:20:06:be:a1:55:86:1b:0b:2d:99:d3:
         3d:10:a0:64:25:8c:e5:0c:40:f1:18:b4:c6:39:a3:ba:4f:e8:
         db:d0:e0:dc:4e:be:a4:35:b3:cb:91:5f:d9:fe:9f:2e:37:0f:
         cd:d5:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:21 2026 by rpki-client