Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6151a8ab-0fba-317a-98bf-205879b5bbdb.roa
File:                     6151a8ab-0fba-317a-98bf-205879b5bbdb.roa (raw, json)
Hash identifier:          BMdAY7Okb/kBElyQRkAyoRsOCCFtxO2nrpAYdan/xiU=
Subject key identifier:   9F:76:AA:7A:16:20:6F:EB:DF:89:92:B5:61:70:B2:D0:90:20:CA:6F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A3ED6753E4CEEAC2089C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6151a8ab-0fba-317a-98bf-205879b5bbdb.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:3e:d6:75:3e:4c:ee:ac:20:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=8de8bed7-cb33-4d5f-b18f-0add9b01cbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ce:db:ef:36:e6:35:91:42:d2:08:a0:a3:9c:
                    cd:41:9a:14:74:28:0a:6f:bc:81:e6:58:1b:bd:0a:
                    fc:96:c5:b1:22:45:c3:0c:fb:a5:c8:1d:73:b2:e6:
                    98:ee:94:97:3b:34:77:83:2f:4f:86:dc:9f:15:5d:
                    a6:ec:bc:4c:25:23:4a:38:1a:4b:40:e4:aa:9b:7b:
                    1b:3c:f6:51:51:56:9f:e4:42:5c:20:39:0a:79:0e:
                    ea:47:2f:0d:57:0a:7f:ae:b1:18:df:1e:64:d4:10:
                    b5:3f:36:fb:3e:0f:b7:dd:a7:65:59:e3:29:0f:27:
                    eb:f7:46:45:b5:35:5c:92:b8:fc:8b:b7:1b:57:b7:
                    11:c5:e2:15:f8:f5:67:38:24:ce:d2:68:b7:3c:8f:
                    2a:17:d1:5b:32:40:f2:51:73:e3:1e:86:4f:58:08:
                    85:6d:2d:b4:ee:2e:81:4a:e7:0f:7a:f2:28:d6:0b:
                    ea:e1:7b:f3:e0:01:8f:3f:95:6c:83:11:4a:bf:4d:
                    7e:37:39:d5:a3:3f:21:57:68:6c:b7:e2:d0:ea:ae:
                    46:28:90:9a:44:a5:e8:ff:b4:71:2c:2b:f3:a2:c0:
                    5e:cb:d3:1e:0a:7d:96:2c:d9:47:42:53:d8:7f:de:
                    3b:54:cd:cc:2d:ba:09:9d:a9:ff:a6:97:3a:fd:83:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:AA:7A:16:20:6F:EB:DF:89:92:B5:61:70:B2:D0:90:20:CA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6151a8ab-0fba-317a-98bf-205879b5bbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:e2:8a:a6:0c:16:a2:bf:6b:0b:ba:1b:aa:10:6d:c0:83:35:
         1e:1a:36:1f:7a:5d:b0:61:4d:84:9c:3d:49:23:37:cf:a0:c3:
         0c:c6:4c:10:d3:a5:4e:26:68:b1:de:af:1f:2b:f4:7e:ff:e6:
         a5:c9:71:70:56:2d:20:db:eb:3a:66:69:66:eb:97:ec:b2:19:
         4d:22:f8:4a:46:6e:8a:02:7d:65:67:4b:78:d8:51:7f:9a:79:
         95:99:43:8e:e1:93:a7:b2:38:aa:92:04:de:61:97:83:a2:70:
         f6:5d:63:94:e5:82:f9:f0:36:05:ef:fa:d3:c7:5a:e8:92:67:
         17:a3:ff:b9:c6:7e:8d:41:c9:a1:13:3b:a6:a1:29:7d:a2:aa:
         a2:b5:3a:ac:e2:c4:26:3f:06:a7:57:76:da:e7:6f:9c:84:cb:
         bb:56:a4:19:36:dd:95:38:7b:16:06:51:ee:78:90:35:13:00:
         e5:c7:9b:1d:99:ba:7b:1f:bd:ed:66:10:42:d7:ca:54:2e:9f:
         29:9c:7e:d6:6d:29:1d:4d:70:9b:7c:d3:97:d3:2c:db:b4:9a:
         eb:32:e8:26:7b:42:de:c8:3f:dc:d6:fe:29:cb:b0:4c:c3:5f:
         02:39:a9:db:2e:51:bf:5e:14:46:ee:94:e5:f2:a8:8f:49:61:
         84:85:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:23 2026 by rpki-client