Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa
File:                     7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa (raw, json)
Hash identifier:          5t+/gRqjGLqD3gYuovQpBiB3qddtErDT/VvgotzDl5Q=
Subject key identifier:   25:44:AD:45:2E:CA:31:06:90:A8:25:D1:36:8E:E0:67:1F:95:8B:39
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4988457BF7F23A5C5B7EEA00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:45:7b:f7:f2:3a:5c:5b:7e:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=95fe7fe9-9b66-45ef-b352-16df3e15d6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:4b:08:70:79:f4:48:84:e7:85:a1:98:fe:
                    e2:81:f3:6c:39:5e:de:b2:1e:60:20:95:e7:c2:6d:
                    32:57:66:69:7b:15:36:ad:54:c0:54:f6:1c:7d:e6:
                    c5:d4:76:dc:3f:25:2b:a8:12:6b:48:fa:c1:f9:d5:
                    ce:dc:a3:70:1e:53:14:7f:0a:b2:4d:8b:82:aa:3a:
                    2a:d2:9c:b5:b1:c0:13:78:bb:22:7e:bd:e6:dc:9e:
                    6e:57:08:9a:af:14:d3:47:52:24:27:21:05:04:42:
                    08:00:27:aa:6b:57:63:24:8b:71:32:0d:d0:b6:b9:
                    47:31:96:b8:62:f4:a6:07:0c:02:cb:ba:b1:1e:7f:
                    15:9f:63:8c:2c:1d:14:a1:65:76:fe:1e:2a:b4:b3:
                    04:1d:c8:16:78:a2:88:ae:f2:ea:1a:b3:e8:4d:e5:
                    12:65:c0:f6:64:96:f6:c1:45:00:d4:b6:73:97:73:
                    c6:b1:ea:64:63:31:5e:1d:54:55:e8:6e:53:67:52:
                    a4:d4:99:df:04:8e:b7:83:db:2e:56:45:cd:6e:10:
                    bc:28:c9:a3:82:ba:69:5c:53:8f:8b:7b:05:2d:9e:
                    a4:f2:68:8e:3d:4d:bb:52:9b:a0:18:05:2d:1b:38:
                    85:fc:9e:dd:cf:9d:f7:5c:6d:03:07:48:2b:ff:72:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:44:AD:45:2E:CA:31:06:90:A8:25:D1:36:8E:E0:67:1F:95:8B:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:53:25:fc:9a:f7:3f:18:7b:4c:a2:66:bf:0f:da:81:1e:
         fc:93:76:c7:5a:6b:3f:1c:10:05:2f:c8:5f:f7:a9:77:12:fa:
         77:94:91:e5:2e:43:1d:f8:46:fb:2a:29:f6:81:9b:7f:37:25:
         4c:e8:5a:39:2e:e9:f0:dc:b3:78:ef:fd:7c:ed:9c:95:6f:18:
         8a:b9:36:a3:fc:52:9d:b7:eb:18:3c:95:b2:27:19:0b:e8:11:
         95:a6:95:f1:6c:59:29:d1:31:7c:de:48:8d:9d:23:88:b8:86:
         8c:4c:a0:e1:1c:d9:37:e1:f3:23:86:ac:e4:ee:db:08:7e:ec:
         a3:fd:0e:03:ae:a6:bc:de:59:80:f0:6f:3f:da:53:ea:70:34:
         10:b3:6a:5d:7a:69:0a:53:96:8a:39:12:cc:7f:a0:a4:83:e4:
         60:a1:ab:a1:0f:0a:62:a3:cd:c2:36:15:35:22:02:20:38:53:
         04:c6:73:34:3b:e3:1c:0e:c6:f2:45:35:60:13:e4:02:c6:16:
         8e:73:c5:6e:96:0f:29:82:76:55:e8:47:be:db:40:8b:97:f2:
         9c:49:cb:96:b8:bc:bd:4d:47:be:9e:de:21:16:58:10:d1:4f:
         0d:7a:98:d5:01:27:bf:35:8b:98:7a:dd:ad:4f:46:7d:47:c9:
         11:db:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:21:40 2026 by rpki-client