Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa
File:                     1bea22db-543c-392b-894a-1a3fd5009750.roa (raw, json)
Hash identifier:          WVOJ3ZxH0lilFm/feL6MIrdwE5jGy+GKm+FbxgkVF0Q=
Subject key identifier:   85:BA:45:A1:6C:FD:E9:6C:13:8E:22:CF:87:7F:BC:13:57:B3:0D:2B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C6D3FC795D822CC97E240
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:6d:3f:c7:95:d8:22:cc:97:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c854db44-6fdb-4c9c-9fec-3044026b3089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:21:d9:6d:12:d3:48:1c:1d:cb:57:28:b5:
                    07:5d:2e:f0:bf:46:c9:e1:12:d2:e4:7d:88:77:d7:
                    06:4a:65:58:75:ba:d6:b9:e6:aa:0f:7a:c0:e1:31:
                    b5:d1:88:a7:e4:87:da:48:50:45:8d:06:ed:bd:7d:
                    8a:ba:d9:99:9b:36:e7:11:08:68:a7:75:e9:05:62:
                    a0:33:34:4e:35:52:5f:91:29:cb:ac:c1:17:62:fb:
                    17:c9:d0:d0:95:1d:31:e8:91:28:3f:ce:dd:13:e3:
                    2c:48:e7:64:e7:fb:ca:73:3d:6f:cd:67:7a:be:ca:
                    3b:6c:60:94:8a:02:d5:81:e0:c0:ab:48:01:73:a0:
                    62:af:42:df:20:27:ea:d2:be:fd:42:fb:46:4f:47:
                    e3:21:f8:48:c7:8b:35:b7:ce:ad:d7:76:e4:7e:99:
                    2d:11:f7:70:8f:c7:cf:22:16:0e:03:48:fc:dd:87:
                    42:2e:64:09:af:86:1d:f9:90:da:9c:7f:ca:ae:81:
                    6e:11:50:7f:49:f8:9a:67:14:e0:d2:83:a0:7b:b6:
                    b9:74:03:b6:cf:6e:69:8b:ca:27:b3:e5:e8:77:58:
                    12:8a:fe:de:5f:14:60:83:af:92:c3:c9:42:45:60:
                    61:85:99:50:cd:76:34:56:de:c5:64:e2:b7:01:89:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BA:45:A1:6C:FD:E9:6C:13:8E:22:CF:87:7F:BC:13:57:B3:0D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:bd:d8:e6:d3:0a:84:f1:6b:91:fe:92:bd:5b:78:10:28:8d:
         ed:4d:a3:4d:cb:9f:b1:69:d2:32:3b:74:00:0a:57:4f:b9:a5:
         1e:c8:e6:1c:93:df:0d:e6:76:0b:75:e8:c5:a3:39:b6:c9:c6:
         e3:b2:2e:8b:eb:68:82:84:81:55:34:c7:77:22:eb:6f:d8:d3:
         d0:13:3c:f5:e3:90:fe:a6:0f:26:38:68:23:b0:51:f6:fd:20:
         41:3d:81:a0:57:fd:9b:da:30:a4:f3:d7:20:68:98:fa:fe:92:
         dd:b4:b6:8f:f8:0d:87:c5:59:8a:25:4a:47:e5:3e:2d:3d:92:
         28:ac:48:fc:dc:1b:cd:fc:c6:c0:a5:eb:e4:46:7d:ff:5b:bb:
         3d:34:34:f1:ea:12:f5:c3:70:c7:50:02:32:12:91:0f:41:d8:
         5c:ec:d0:e9:1b:92:d0:14:0a:14:92:80:bf:8d:c7:0d:1b:10:
         e2:70:ac:b9:32:8a:31:e5:54:28:57:8e:3b:c8:5b:3a:85:72:
         38:ab:af:6b:a5:a2:34:8a:f5:37:83:2f:31:7a:fd:e4:7a:ad:
         d6:e0:f1:55:f2:20:5c:b5:0d:d5:23:e5:99:f3:21:a7:a8:d5:
         d6:e0:b9:3a:2c:99:0f:c7:ee:3b:3d:1d:6a:cf:1a:25:7e:80:
         8f:8d:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:29 2026 by rpki-client