Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f6ecec94-a9d0-39eb-b7fa-a432c00f13cf.roa
File:                     f6ecec94-a9d0-39eb-b7fa-a432c00f13cf.roa (raw, json)
Hash identifier:          RvbV1ZfJ50GcyUNj/BxuMJftjhJfkRBmy7Cg3YNOwe0=
Subject key identifier:   DB:DA:15:50:0C:84:C8:43:E7:43:CC:BE:A5:3B:61:F4:70:D9:38:DA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4988EA72B7BF122CCE94CE00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f6ecec94-a9d0-39eb-b7fa-a432c00f13cf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     207266
IP address blocks:        65.22.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:ea:72:b7:bf:12:2c:ce:94:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=82950a42-c69f-4e80-8568-760dfa7e16bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:92:90:06:4f:c3:ac:25:57:d8:bf:1a:c9:
                    f4:8b:8b:8d:bb:f0:16:a8:50:5b:ed:c2:97:6e:22:
                    1f:f3:69:e7:fc:a6:46:27:83:fb:fe:ed:07:39:4f:
                    40:ff:e3:1d:de:b2:fa:52:6c:1d:39:62:84:f2:02:
                    b0:57:cb:24:46:d6:4c:3e:32:19:86:bb:9c:42:b9:
                    8e:f2:14:ff:c8:b4:48:fa:ff:17:e6:2a:4f:28:44:
                    98:c4:6d:dd:e8:7f:ca:fb:c5:28:72:f7:66:62:f5:
                    26:69:3d:df:ac:f6:66:94:e4:21:0d:0f:0c:fd:d7:
                    99:ef:02:c8:73:fc:d5:aa:32:1f:4a:a3:aa:08:14:
                    e7:f9:79:7c:c1:5c:1d:f4:6e:ba:3c:77:16:72:e8:
                    12:22:da:c2:ac:8a:1b:ad:a4:6f:af:96:2d:68:60:
                    2e:fe:bf:30:d5:01:e0:fa:46:f4:67:a9:10:b3:23:
                    8d:7a:00:f9:22:a3:a1:0a:4a:74:e7:87:79:d3:6f:
                    da:9c:81:b6:0e:ce:a2:a4:55:5c:4d:87:f2:61:cd:
                    74:30:63:e8:c6:8f:91:2e:b0:32:b3:e2:03:fc:16:
                    d3:06:9b:90:28:3a:55:19:2e:43:c8:e3:f6:ab:74:
                    c7:d5:52:3b:8e:7f:cb:89:23:29:19:4d:1c:67:3b:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DA:15:50:0C:84:C8:43:E7:43:CC:BE:A5:3B:61:F4:70:D9:38:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f6ecec94-a9d0-39eb-b7fa-a432c00f13cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:0c:79:c8:5d:00:4e:e6:77:c1:5a:ac:f6:cb:29:13:60:
         c8:cd:6a:41:40:72:93:90:18:3b:3d:59:6c:df:a7:6d:d5:2f:
         8e:d0:5f:10:79:9b:a5:07:49:ad:1f:65:16:e8:1a:4f:dd:ca:
         f7:ea:54:52:bb:38:29:fd:6e:b4:d3:35:fc:25:4a:01:a4:dd:
         0a:8a:f1:1d:30:ad:b0:49:43:82:e2:8e:f9:56:e3:43:5e:e9:
         c0:0e:38:93:5c:ca:a4:76:4c:b7:9b:b2:de:63:77:e9:2c:2f:
         d3:fe:12:0e:30:b3:cb:22:5b:e4:2a:b4:9d:3e:45:56:3c:b8:
         6f:73:f2:5f:0a:36:6c:39:e4:52:66:f0:61:43:6c:3d:e0:0c:
         5a:f7:95:dc:fc:ba:0e:2d:77:80:ed:f3:73:54:16:a2:6f:29:
         5e:14:d7:71:bc:d7:ce:3a:c5:03:af:e2:d0:50:e3:da:29:66:
         6f:d7:8f:7f:a3:0e:83:b0:b8:e7:f7:68:55:7b:ee:6d:f5:52:
         e0:62:89:91:29:f8:53:4d:66:a8:c9:e5:10:48:a7:3e:02:c4:
         90:81:55:61:3c:63:13:ea:37:69:23:ea:d1:1e:5c:7a:e2:83:
         bc:1c:fd:dd:72:9d:d5:e7:f1:e7:2e:bd:b3:21:62:af:94:b5:
         b7:1e:b2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:49:33 2026 by rpki-client