Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa
File:                     53149a74-a3be-3b69-a7f8-608a2a078fa9.roa (raw, json)
Hash identifier:          HTR4gHhqk2Q/9aCaBtgJkbtRoLvtodJM7NLYJoJTvR8=
Subject key identifier:   58:AE:94:CD:61:9B:1D:8A:7B:97:4F:D7:16:5E:F5:61:55:C1:6E:1D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D2379F3E694D69D3FC3EA12E0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:79:f3:e6:94:d6:9d:3f:c3:ea:12:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=2c813b3b-71bd-470b-a8e5-df957a2500dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:a0:69:cb:4d:a4:29:10:62:17:c4:0f:8f:
                    e5:c8:b1:77:1b:8a:be:93:48:a9:92:99:ef:e2:78:
                    85:e7:0b:3f:e4:18:8a:6a:0e:69:87:3e:cf:32:40:
                    94:2a:18:f7:7f:55:e4:9a:60:27:cf:aa:f1:20:c5:
                    9a:0c:fd:86:59:52:ad:ca:f6:6b:f1:3f:ac:a5:38:
                    84:e6:97:c9:3d:0b:1d:21:ac:86:42:e0:ff:f9:53:
                    31:ac:1d:79:54:d6:31:e7:b0:e4:7c:6e:ee:25:74:
                    3d:db:5a:ec:64:41:bf:66:a8:69:ba:96:f4:e2:fd:
                    12:61:db:3a:f9:e0:f6:dc:74:d3:8c:c0:f5:f0:14:
                    a8:ed:a5:20:b8:e7:53:5d:83:63:31:2e:a4:c1:5e:
                    cd:6e:4b:0b:3e:e2:21:d1:ac:92:76:61:66:34:b9:
                    e0:93:e8:b4:ea:b2:89:88:ce:c1:2d:7f:1d:50:2b:
                    bb:2f:e1:c8:f1:d8:90:25:06:69:e1:71:28:8f:90:
                    ca:ee:2e:30:75:04:68:50:6c:a5:6c:71:cf:26:89:
                    2f:23:0d:ed:fb:00:6d:27:65:48:7f:5d:4e:92:56:
                    ab:e0:e3:4e:26:b1:4e:e9:56:54:3d:4c:f0:3d:37:
                    5f:d4:ef:b4:0c:b2:dc:1c:79:d7:7d:28:94:41:9f:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AE:94:CD:61:9B:1D:8A:7B:97:4F:D7:16:5E:F5:61:55:C1:6E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:64:ed:d3:65:bb:d2:bd:47:6c:ea:0c:e2:be:9f:3c:b3:
         2f:22:97:d0:a8:4c:14:b8:d9:e1:41:0a:b4:f2:96:81:30:79:
         08:78:ce:a3:6e:11:de:8b:ae:50:30:4f:86:d7:48:70:b8:70:
         91:fa:8e:a7:10:66:1d:ca:8a:dd:d4:80:73:e6:a5:99:4e:a2:
         99:63:fc:4f:71:9b:a7:4d:7f:a1:fb:9a:13:25:d2:62:79:56:
         19:e2:31:8c:22:7a:6c:20:20:2c:bf:2c:2a:6e:a7:af:62:f6:
         10:2f:70:23:04:c3:62:83:e8:d1:32:2d:5b:0e:06:fa:f2:73:
         af:57:64:b0:93:47:c6:d6:68:95:c9:2a:a7:e9:31:a1:d3:b2:
         2c:7b:b4:fb:33:d9:89:8a:14:12:2a:93:83:74:ea:c9:49:b1:
         90:e3:53:3f:bb:5b:eb:71:dc:e7:bd:08:30:41:fb:46:cb:b3:
         f6:ce:24:3c:22:db:8b:6c:20:9f:5e:e5:60:e8:5f:b8:fb:b9:
         ce:c4:06:0f:29:de:75:f1:8a:8e:75:fa:5b:fc:30:18:0f:8d:
         5b:f5:34:a5:05:46:86:09:16:56:b4:0c:b4:b3:b2:bf:85:ea:
         21:93:91:65:fb:c6:31:d0:c9:c9:c9:44:a5:89:9e:45:2d:ca:
         af:55:6b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:45 2026 by rpki-client