Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5493c31b-d972-3447-bd2f-01669e29fefc.roa
File:                     5493c31b-d972-3447-bd2f-01669e29fefc.roa (raw, json)
Hash identifier:          8CBxgJtRI7fcwuo2RMdXh2e2P8C/8eEUvBaEtjBBdLA=
Subject key identifier:   C0:FD:FF:42:C3:1F:F4:3B:FF:D8:75:CD:1F:89:39:79:29:91:59:3C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A4976C2577D8A6A73C800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5493c31b-d972-3447-bd2f-01669e29fefc.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:49:76:c2:57:7d:8a:6a:73:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=74a8008b-8011-4fa8-bc7b-db44a1ae3631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:30:ec:c2:bc:55:c2:3e:7a:ad:63:8b:19:
                    3c:ed:c9:c6:b2:eb:0b:91:81:c0:cd:50:da:f2:27:
                    8b:39:c1:0f:29:b5:17:ed:92:41:d1:b9:82:18:dd:
                    bf:e6:e5:6a:86:e4:ba:50:a8:3f:25:a3:ba:49:56:
                    99:07:2f:b1:ae:aa:a8:1d:6c:7b:a7:88:4c:e7:1a:
                    80:95:58:0f:34:a4:e0:79:5b:7a:33:ce:6a:18:23:
                    f8:90:7c:04:98:a6:7e:e3:29:30:e3:d3:12:b6:3d:
                    40:8a:72:ad:0d:0d:77:6c:77:79:6a:a1:e8:7b:23:
                    c8:84:3d:df:5e:e5:7a:50:9e:63:76:2f:22:d8:63:
                    12:3c:6f:fe:15:48:88:8b:4b:4d:fa:c8:fb:44:bb:
                    4f:5a:18:dd:f5:22:57:74:6e:a2:04:c2:a6:08:0c:
                    f7:91:6f:9a:85:e6:cc:68:05:86:49:31:61:4c:6a:
                    72:f9:ec:49:62:c2:c4:25:3d:73:d3:fe:ac:31:83:
                    b2:3d:bf:2d:d3:a9:10:2d:51:83:62:29:19:da:b7:
                    4f:6e:09:86:25:d7:4c:a1:5d:60:29:fa:e9:ac:5b:
                    5f:cc:73:45:ec:fe:c2:77:41:94:18:68:a5:bc:43:
                    8b:6e:c3:62:13:e0:c2:11:2c:b6:2a:3a:e8:6c:07:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FD:FF:42:C3:1F:F4:3B:FF:D8:75:CD:1F:89:39:79:29:91:59:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5493c31b-d972-3447-bd2f-01669e29fefc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:28:28:41:94:8f:dd:67:6c:43:0a:fa:a1:5c:68:4f:e2:22:
         4b:8d:86:f7:94:ee:e3:ad:6a:07:b3:1f:44:db:15:87:09:cf:
         55:48:53:13:a3:fe:42:03:27:93:b6:37:f9:0b:7e:f8:6d:2a:
         e4:c8:b6:a6:66:39:99:3a:26:9c:be:fe:3c:ba:ef:16:b0:7e:
         b3:e2:cf:46:01:7f:4e:23:fc:63:a1:56:59:71:c8:24:67:8a:
         66:e3:a3:75:4c:69:06:03:6c:29:b7:56:75:c7:17:46:18:07:
         89:ee:ec:6f:fa:4c:e9:0a:1e:da:ae:39:c9:b7:6b:28:13:43:
         27:ba:84:d1:c9:7a:f2:c5:6d:83:4f:02:ea:ec:58:9e:be:e2:
         60:d5:b7:75:c2:c1:83:ba:05:17:1d:10:a6:03:20:24:1a:ba:
         3c:0a:90:93:2c:0b:b6:8d:b1:14:7b:34:dd:33:07:ad:40:35:
         f5:40:6b:77:61:cd:9c:a6:ba:52:eb:96:58:6d:3f:23:8a:21:
         38:c2:8b:9d:5a:16:2f:65:3c:ca:f1:f4:84:6f:a6:0c:66:36:
         c0:0c:c7:d3:61:7e:e2:3c:5a:2d:83:b0:6c:e3:3a:63:d2:ad:
         85:18:20:7b:d2:7f:28:c8:8d:c9:6f:ec:0a:b9:00:67:1e:cd:
         70:58:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:31 2026 by rpki-client