Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d26ec745-0fc7-3c55-99ea-f57da0d7b032.roa
File:                     d26ec745-0fc7-3c55-99ea-f57da0d7b032.roa (raw, json)
Hash identifier:          gzUQS41Q9Ub1j8QHoeIGAh9TFAk73yCHFn682augaaQ=
Subject key identifier:   C6:BC:CA:16:74:6C:F8:F5:B4:51:54:96:BC:3E:40:37:B1:FF:95:E4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D2379F9FDABFAB11B1AF0AE80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d26ec745-0fc7-3c55-99ea-f57da0d7b032.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:79:f9:fd:ab:fa:b1:1b:1a:f0:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=d59ad663-48b7-489e-9a3a-e93b2dc626f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:57:b2:45:6a:7f:53:43:14:17:5d:71:63:
                    0c:1e:a1:15:67:04:ff:30:7b:f1:f6:81:05:72:ad:
                    7b:8d:03:9c:6a:d5:90:62:2c:6a:a2:49:ed:77:05:
                    cc:5c:aa:d0:21:4a:02:37:31:06:c8:b5:80:9c:9f:
                    95:bf:a4:61:a7:a5:fb:25:fc:e2:3d:80:b8:77:8b:
                    4e:77:51:8f:4c:23:8d:e0:4e:14:df:a5:3f:91:65:
                    ad:44:dd:5c:e5:88:a7:1e:9f:fd:26:f8:3c:e0:8b:
                    ea:71:9d:bd:85:f4:ee:4b:d2:ef:e1:f4:56:08:4f:
                    a3:88:85:0f:f4:d1:4e:3a:59:2f:db:f5:13:05:43:
                    3c:79:3d:12:f4:b6:45:a9:0f:6c:9d:da:44:d2:37:
                    ae:3b:2a:a4:2d:51:9d:1c:ee:82:4f:b0:29:13:28:
                    38:90:76:2e:fc:59:c3:60:69:ca:da:f3:33:38:88:
                    57:ad:e9:46:df:e5:d0:fb:64:33:a0:79:cd:2c:ba:
                    43:94:d8:76:ea:eb:9c:41:32:b2:5a:01:e8:5c:07:
                    b5:7b:14:b9:f7:04:fd:c7:4f:e7:9d:a5:8a:68:fb:
                    9b:77:12:9e:92:6c:99:67:28:17:8e:3c:ff:f2:5e:
                    bf:f4:ec:51:4a:a8:e5:86:ef:d6:45:c0:90:5a:f6:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BC:CA:16:74:6C:F8:F5:B4:51:54:96:BC:3E:40:37:B1:FF:95:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d26ec745-0fc7-3c55-99ea-f57da0d7b032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:61:0b:c4:07:9f:e3:13:af:8a:d2:72:85:44:c4:b0:9b:
         5f:04:ec:86:56:0e:34:5c:8f:4c:95:21:46:cc:09:4b:f0:fb:
         de:a9:0b:eb:b3:57:cc:77:48:0c:1e:e2:04:46:56:44:bd:75:
         b5:0d:49:77:af:4e:ac:48:f4:a7:8e:a4:99:47:a2:e4:39:b7:
         0b:41:ad:ec:42:d3:a9:bb:49:3a:87:6d:52:ce:f4:c0:17:dd:
         51:db:11:c0:c8:04:a5:f7:d1:d9:8d:8c:31:ea:fa:3c:04:ba:
         2f:32:4b:f3:d0:9b:34:6c:fe:82:33:8d:0d:a8:3b:65:18:a6:
         4a:00:88:e7:bb:e7:ac:f2:89:85:9c:72:9e:fa:ba:31:c9:0c:
         86:a5:f5:f0:87:a7:f9:aa:b8:e2:f0:ba:04:5e:fb:e3:ac:da:
         52:d8:95:fa:d7:7b:bb:6f:d4:0f:fb:01:13:e3:2f:d8:69:83:
         3a:ba:38:b0:d9:24:bb:df:77:74:77:22:74:f9:91:0c:b6:4c:
         b6:72:4a:88:70:58:37:01:83:12:05:61:6b:8e:cd:31:a8:66:
         24:8c:66:50:8d:11:ee:06:62:55:50:2e:b9:c7:61:01:07:88:
         02:6d:da:6c:75:75:66:73:10:24:a4:cb:c7:ab:93:f1:78:08:
         3a:d0:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:23 2026 by rpki-client