Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa
File:                     568ac0ff-6926-33db-8182-74e126530140.roa (raw, json)
Hash identifier:          P0SSDVI1JJBTGAfFo2goJ28c7z0BtyonP1JG8oHTAbo=
Subject key identifier:   A7:C7:91:81:76:27:68:80:E2:92:9C:E5:C1:46:96:63:B5:B0:56:D8
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C74A32B92138229F45880
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:74:a3:2b:92:13:82:29:f4:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=236b60cd-1b8c-43fc-b6b2-8cbc184411c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:00:b1:b9:2d:1d:45:01:c1:d6:36:af:7a:
                    a9:65:b2:17:80:66:14:dd:d6:28:e1:ad:7d:2e:06:
                    52:be:d4:d2:cc:8f:26:97:e8:b6:80:61:a4:10:bd:
                    13:33:a5:b2:51:ac:47:de:20:34:eb:07:53:ab:13:
                    82:93:de:fd:99:46:90:da:ce:4d:54:df:48:0b:13:
                    a9:bc:64:6e:53:47:c6:1d:4e:72:08:55:93:ac:c5:
                    4d:d5:da:ba:e3:f5:fd:b3:10:5a:34:e0:f3:2c:ba:
                    82:59:e5:97:79:3c:dd:0f:1f:ac:a7:13:fe:b0:ef:
                    e0:22:f4:c4:f9:c3:02:ab:93:ee:1f:7d:86:3e:2f:
                    02:f8:ce:03:df:da:ae:26:73:ef:86:5d:6c:b8:07:
                    16:2e:ce:d8:ec:7b:03:90:53:99:a3:c4:a3:46:f2:
                    10:92:a6:e6:20:b4:86:12:c1:c0:38:f1:96:d8:47:
                    7e:cb:a3:19:8e:89:c6:86:12:31:d3:dd:59:55:e8:
                    d3:98:92:44:df:7e:84:b8:62:2f:48:4f:95:fd:a5:
                    5c:71:64:53:03:12:1b:3b:c6:e7:a4:92:91:30:0e:
                    36:da:42:f3:19:a1:80:bc:f4:38:c0:08:25:27:cf:
                    1f:8a:1e:4d:34:ca:3b:9c:00:70:33:50:d3:4b:db:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:91:81:76:27:68:80:E2:92:9C:E5:C1:46:96:63:B5:B0:56:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:9b:04:be:35:36:7a:6f:ff:74:3a:e1:fb:7f:97:79:19:
         98:af:30:39:0b:bb:ef:a8:4c:ef:80:cb:56:36:4f:31:72:de:
         60:40:34:c3:4b:72:48:da:00:56:b4:99:3f:de:41:de:ff:d9:
         bb:a3:6f:4a:c8:7a:bf:31:6a:4b:71:89:e5:de:2f:5d:34:da:
         a3:6c:c1:9f:4a:2b:ec:26:88:23:0d:f7:ef:a2:73:7f:ba:11:
         92:f9:16:5c:97:fc:45:25:1b:86:f7:0b:b4:dc:5f:49:97:1a:
         90:86:ca:48:f4:f3:bf:51:a3:1e:f7:fe:ee:df:90:c1:45:c3:
         38:8f:af:82:28:11:26:36:63:0a:96:4a:46:4a:79:20:68:0a:
         fc:2b:32:29:55:d3:78:5f:fc:26:23:77:49:dc:84:43:d8:e4:
         fa:59:1f:64:c0:9b:61:6b:2a:33:77:d8:d6:11:21:e7:25:50:
         a6:1a:55:d8:cb:19:4a:b8:ac:bc:2f:d4:08:25:a2:db:b7:4d:
         48:e1:d5:da:00:2d:89:a1:0d:7f:57:76:27:c4:2d:06:bf:9a:
         05:30:d9:c8:0a:c2:59:cf:5a:c0:78:73:cb:9a:ca:69:b6:ae:
         3e:57:46:af:ff:43:39:a6:9d:4b:e4:1f:5d:54:92:91:3b:8b:
         18:a5:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:39 2026 by rpki-client