Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa
File:                     d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa (raw, json)
Hash identifier:          01kJcPNwF+n/Y5LiZe+kzx8ww8fG+0lHICFKCy2+AzY=
Subject key identifier:   2A:4D:7A:1F:F2:2C:E3:03:9A:9B:D8:6D:24:18:01:AE:45:CD:C7:37
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A640174A7471F570A2800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     207266
IP address blocks:        65.22.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:64:01:74:a7:47:1f:57:0a:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=3aa26933-014f-41d0-8eb6-f8eef8c45e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:9e:2c:b8:04:69:9d:5b:a7:11:8d:71:67:
                    19:73:ff:ac:aa:f8:33:58:d1:2e:66:22:b4:e7:18:
                    f3:a2:c2:a5:6e:ca:86:d9:c7:77:f2:3d:3b:8e:af:
                    86:ec:a5:8c:61:dc:5d:02:e3:64:3f:6c:58:ff:e9:
                    5f:92:86:a3:12:39:d5:b8:9f:d0:0c:08:94:1f:3e:
                    d2:3e:2e:d4:51:ef:0a:db:47:f6:13:df:ad:22:08:
                    fa:6a:38:9e:02:8f:e6:ed:df:ef:e1:13:a6:b8:57:
                    22:39:21:cb:08:dc:19:ae:5e:b9:16:9e:9b:af:b4:
                    67:fb:64:3b:d0:da:b8:dc:6e:17:22:48:ae:14:c5:
                    a4:f1:0f:6b:4f:f1:fa:a2:ba:8d:6d:1b:e9:9f:69:
                    80:05:d1:97:22:69:d8:61:f9:0e:bd:d2:da:c6:b3:
                    09:46:ed:ff:00:35:96:36:3a:94:ae:65:fa:28:f1:
                    8d:04:3a:c4:48:cc:b8:14:2a:c0:5d:f4:19:9a:6d:
                    21:72:5c:5d:00:66:e9:b9:5d:6f:80:a5:a2:21:c1:
                    07:62:64:66:e1:38:3a:69:fb:8b:2e:03:8a:99:aa:
                    9e:ca:e3:a6:e2:08:21:fa:37:b0:94:93:f4:2a:1d:
                    fb:b1:a0:4c:ed:db:0e:23:8b:5b:18:b7:80:d0:9c:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:7A:1F:F2:2C:E3:03:9A:9B:D8:6D:24:18:01:AE:45:CD:C7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:5b:e9:03:b7:9d:cf:1e:a6:77:1b:e4:93:9d:42:15:a7:
         6f:f4:bb:23:4d:93:52:71:41:7f:b4:a6:c6:ee:7c:f7:f7:cd:
         85:7c:1d:ca:bc:5b:2d:b5:c5:cd:3f:36:6d:c8:8f:f3:79:fa:
         1e:13:dc:8f:47:22:92:ba:f8:c7:dc:b6:cb:48:b3:92:da:67:
         1d:c5:37:0b:ea:b1:c4:09:3c:5e:a9:5d:cf:b0:de:53:83:1c:
         5d:f0:20:e8:90:d5:f3:80:a4:10:5d:d5:65:b3:85:45:c5:7a:
         27:c8:e0:51:46:4a:9c:1c:15:d5:90:5a:02:58:00:b2:97:75:
         2a:9e:46:6f:e4:b5:52:7f:d5:48:a9:6f:76:d9:01:26:9e:56:
         59:9b:1c:70:e0:86:66:98:d3:55:61:f7:af:4e:e4:f3:11:58:
         78:d5:f8:b4:7e:bd:87:38:16:42:0d:53:6e:66:ce:b0:ec:22:
         a6:04:7d:3b:68:63:6d:d7:94:51:2a:85:0e:a4:b7:32:47:b0:
         b5:59:7b:f8:9e:38:fe:e3:e8:98:c1:55:0c:4d:fe:f9:f6:3c:
         f3:b1:f5:f6:0f:31:df:e3:17:73:c5:8e:1d:40:d9:1a:c3:7d:
         e6:44:50:56:37:07:95:ee:62:ab:5d:87:bd:9e:2d:3c:da:98:
         ca:db:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:43 2026 by rpki-client