Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1ef6d63-d46d-313e-bbff-c0172857827b.roa
File:                     b1ef6d63-d46d-313e-bbff-c0172857827b.roa (raw, json)
Hash identifier:          H0IFCbHMVUWtwMS5v5yQqb0If0shD2D6Y2Bu1C4flqA=
Subject key identifier:   13:E2:5A:EB:46:83:A0:3E:6F:B2:C3:45:1F:F3:6F:30:C4:92:86:E3
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A2A965BADBA6AFC658CC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1ef6d63-d46d-313e-bbff-c0172857827b.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:2a:96:5b:ad:ba:6a:fc:65:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=d776008c-2df7-4e71-97c7-27a4f829e7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:1e:30:3b:7d:79:19:da:67:e0:da:ae:6e:
                    81:d9:6d:96:02:f8:86:cc:92:21:9c:81:b1:86:65:
                    0a:77:4c:e1:aa:3c:8f:0b:b3:ce:86:83:f3:6d:3e:
                    42:1d:21:35:e2:83:78:92:a0:40:3c:f3:a7:af:b3:
                    49:c8:48:a9:eb:82:da:68:6d:b5:53:76:ca:e3:1b:
                    66:6a:b1:72:2e:fb:cc:65:f9:e3:e4:cd:91:98:3a:
                    f8:e9:84:80:69:6f:ea:1f:56:9c:d9:c9:56:7b:41:
                    0b:ea:b9:86:7d:13:3c:02:cc:cf:63:f4:b0:50:60:
                    d3:82:a6:30:51:9b:05:e4:e9:c5:32:ce:3b:d4:10:
                    1d:0d:f6:17:00:9d:3e:8b:2b:50:ef:96:8c:31:48:
                    21:b5:1c:0b:2e:38:d3:60:61:25:01:be:41:56:17:
                    14:e5:dc:14:6f:61:e9:5f:6b:89:9c:f4:32:d8:67:
                    8d:99:c1:8b:0b:58:75:93:05:fd:30:17:2b:bd:df:
                    bc:00:4a:0a:e6:f2:7c:bd:7a:a7:50:c3:78:c6:b3:
                    91:f1:b7:77:20:a4:fa:d1:c6:be:14:d6:e4:cd:8a:
                    23:5b:51:bc:6e:ea:b0:d7:68:69:67:e0:21:45:bb:
                    66:19:17:22:d2:18:f0:5a:55:29:ce:96:af:e9:68:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:5A:EB:46:83:A0:3E:6F:B2:C3:45:1F:F3:6F:30:C4:92:86:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1ef6d63-d46d-313e-bbff-c0172857827b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:4b:7b:41:35:d0:05:ef:b7:6c:60:d4:5d:fc:15:30:03:
         0c:e7:ec:5b:65:1d:f8:de:30:e1:62:b5:73:5d:ed:54:33:b9:
         3c:0d:60:7b:f2:62:3c:97:57:bb:38:a6:35:c7:71:f8:21:ed:
         65:32:4c:39:02:43:c7:ac:d0:e0:b8:cd:f0:29:b1:cd:16:d3:
         10:b0:09:e9:8d:4e:25:fc:59:6a:89:57:7d:59:e4:11:74:ee:
         0b:79:81:41:38:05:ee:cd:55:4b:3f:74:2d:60:75:35:97:71:
         ba:00:54:b5:3f:26:86:dd:b1:6a:f5:af:1b:be:08:52:6e:83:
         77:3b:36:0a:33:56:52:d3:ba:17:5b:b1:3c:9d:57:96:50:1f:
         0f:34:de:a6:81:e0:49:46:a7:73:ff:21:e6:b3:88:a1:73:be:
         41:c1:48:fb:23:6d:d7:56:00:37:c2:8f:cf:9d:80:d3:a3:86:
         58:88:fc:69:6a:70:f5:a9:19:4f:b9:b8:35:3b:44:50:17:43:
         87:02:ae:23:91:62:f2:0a:84:fa:48:40:64:a1:52:0c:cb:ff:
         ae:5f:ed:95:64:cf:28:15:08:8b:66:c5:87:3a:9f:d3:85:c2:
         ac:0a:93:3a:48:02:3b:fd:18:10:84:30:3b:ca:a0:d4:cf:4e:
         fc:4e:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:44 2026 by rpki-client