Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/814dae80-1c66-3514-90b6-2e272a74e6c3.roa
File:                     814dae80-1c66-3514-90b6-2e272a74e6c3.roa (raw, json)
Hash identifier:          anexoDgHfCa2tK2mfz9Z3AkQYeM75mbtvSZtonPrW3A=
Subject key identifier:   E9:BB:4D:46:C0:90:4B:2F:5B:58:D9:BD:4A:2A:B2:DA:CE:6A:13:52
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79CA0B7077A7C40DC7C1F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/814dae80-1c66-3514-90b6-2e272a74e6c3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:a0:b7:07:7a:7c:40:dc:7c:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=15b10d63-12d1-43ec-be36-fe73f64f0867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:8b:1e:f8:f9:68:38:83:6f:0b:7e:36:58:
                    22:12:be:26:88:c1:5f:35:80:12:7e:16:dd:da:2e:
                    a8:31:92:bb:ac:db:45:d5:49:b6:6a:f9:d5:ea:29:
                    25:12:b6:98:6c:f6:84:1f:f8:e2:da:67:55:11:d1:
                    66:02:a3:a0:f0:c6:5b:67:87:32:1d:91:ab:e5:d3:
                    70:a4:26:2c:06:bd:02:5c:b2:24:8c:7a:47:26:12:
                    d8:69:41:4f:e9:85:da:7f:14:85:38:49:d4:66:3e:
                    0d:c1:d2:80:21:12:ca:58:72:7f:5a:79:41:7b:66:
                    3e:60:c5:d7:fb:30:de:21:ce:83:91:17:08:ac:da:
                    51:4d:68:09:54:dd:11:47:f3:05:f7:da:63:39:48:
                    43:d1:14:f7:a1:2b:86:af:d9:a4:70:47:56:43:07:
                    36:11:13:a0:6f:8e:e3:f3:58:b5:63:3c:05:58:53:
                    cf:94:6d:cb:13:64:c9:24:f5:68:c6:f6:1a:95:be:
                    8a:2e:29:85:84:f5:8e:4d:95:1d:19:e3:0d:f2:75:
                    c3:35:04:44:dc:f1:c5:80:be:ff:0a:1c:2d:fa:15:
                    e2:c8:7e:d0:d3:2e:c3:bd:de:ee:fa:98:01:33:41:
                    34:b9:f8:b0:dd:e2:0b:be:73:e2:6f:f2:ed:03:c8:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BB:4D:46:C0:90:4B:2F:5B:58:D9:BD:4A:2A:B2:DA:CE:6A:13:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/814dae80-1c66-3514-90b6-2e272a74e6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1b:4b:39:fd:25:19:5f:27:85:31:c7:3a:32:d0:51:bf:da:
         08:62:45:eb:c0:bc:1d:bc:1b:a3:6e:cf:23:7a:1b:3e:a4:b5:
         34:30:aa:3f:f3:90:0e:07:ac:39:61:e0:ad:9f:1e:17:ac:14:
         e6:11:13:e3:1d:fb:2b:b0:db:cd:51:0d:f4:cd:0e:88:33:e7:
         f8:70:5a:2e:99:a6:82:ce:dc:a8:ee:2d:1d:e2:85:58:8b:ca:
         6b:03:bb:3b:85:87:5f:64:06:1c:99:ee:e1:3d:4a:55:82:39:
         7f:8f:b7:22:c8:69:82:01:f1:45:70:18:60:05:4b:56:8a:1c:
         ab:6c:c9:56:8c:1a:c1:8b:4d:fc:58:96:18:17:4b:70:83:ff:
         cb:38:8c:9b:48:ef:9f:aa:55:56:de:22:15:33:32:41:ba:9f:
         15:d7:6b:1c:28:5d:4d:d4:49:22:f4:2f:e8:e2:e8:f8:21:4d:
         e5:3f:42:bb:db:08:0b:00:12:bd:32:05:3e:1f:59:21:21:08:
         6e:09:b6:21:d4:a1:8c:98:19:94:a4:bd:95:fc:d0:16:fc:79:
         de:49:02:fe:be:2d:39:55:c0:4b:ba:4b:80:62:e8:06:f6:40:
         69:ea:49:71:6e:bd:43:0d:67:82:f3:f7:ca:fd:93:c1:31:01:
         0c:c8:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:39 2026 by rpki-client