Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa
File:                     833cc317-acc3-3c41-aa3a-e9ecad388252.roa (raw, json)
Hash identifier:          6jP+BAlEfpIYMZ8A80JpFto193vUckTr4reH0OHrmVM=
Subject key identifier:   D6:7E:01:96:CA:FD:E7:97:EA:C0:7F:83:9D:AE:02:17:35:C2:AA:29
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C36ADD0BE1A0C60241720
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:36:ad:d0:be:1a:0c:60:24:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6af9ef30-6b09-4873-9299-9519b66daed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:d4:7e:35:f8:06:d3:5a:31:37:b9:7b:a7:
                    f4:8d:fb:49:ee:42:fe:14:5e:5b:03:53:8d:f9:af:
                    72:c5:88:a8:15:4a:8c:cd:7c:a0:ae:4e:63:d6:93:
                    ff:07:7f:87:de:24:0e:b1:a2:27:ed:9e:e2:0b:ff:
                    32:8e:06:6c:09:10:cc:ea:d0:71:76:9b:ff:16:f5:
                    4e:1d:5e:a6:17:a8:d5:c5:1e:de:1e:de:3e:24:79:
                    b3:ea:8d:57:9f:4f:77:26:11:95:9a:62:31:07:5e:
                    e2:e2:a8:a7:f8:8a:1c:34:88:f3:e9:f3:ab:46:77:
                    a2:71:1f:78:44:96:f2:ac:4c:b4:ef:80:79:7a:32:
                    c2:02:e0:24:ea:c2:f6:28:19:b2:d0:b3:ef:db:78:
                    c5:6f:1f:4f:04:be:c3:23:ab:e0:92:e6:a2:5f:a6:
                    11:d3:43:5d:36:e8:6d:64:5f:0d:50:51:45:83:4b:
                    13:df:46:a8:f3:b2:e8:0c:3c:4d:fe:18:af:e9:7d:
                    08:1e:65:88:f8:52:be:ab:b9:5f:28:63:a7:db:9a:
                    99:fc:06:f9:0b:dc:9b:30:89:b2:09:1d:a3:2b:6f:
                    17:d6:b5:6c:8a:1c:6f:90:fd:e7:ad:3f:4f:47:2a:
                    62:fa:fe:42:da:a1:63:46:a5:89:04:60:5e:4c:eb:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:01:96:CA:FD:E7:97:EA:C0:7F:83:9D:AE:02:17:35:C2:AA:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:d2:0e:b1:d1:ff:8f:ed:5f:d6:dd:70:db:c1:90:57:c7:
         fe:33:6d:f8:a1:39:03:9e:64:34:f4:8a:31:71:ed:97:a6:9e:
         eb:f9:20:6b:ed:0f:b6:ad:17:1b:89:7b:1d:4c:f4:24:7d:8d:
         f6:8d:4b:95:89:3a:6b:a4:e4:cc:4e:b9:f0:c2:69:98:cb:74:
         d5:73:91:75:c5:cb:1a:08:45:22:ba:da:d9:41:27:4c:25:6f:
         8f:f3:fb:46:11:7a:0c:1d:a8:16:9f:0f:fc:23:97:23:77:07:
         73:b9:ff:9c:e5:49:db:8c:f6:81:c1:fe:9c:fd:e3:8a:03:f3:
         0f:e2:d2:01:cd:7b:95:4c:07:4f:b7:76:27:a9:89:a7:d1:b7:
         76:4d:a4:d5:3f:65:f3:57:bc:be:bb:75:53:20:1d:77:c1:92:
         05:d3:12:07:f9:d8:5c:66:ae:15:6c:b6:40:8a:4f:dd:94:ba:
         c5:ab:46:8c:46:95:31:45:71:58:d0:66:ce:73:3a:1a:ea:e9:
         2c:de:d3:79:e8:5e:1e:71:d8:e5:47:80:39:bf:44:f1:af:ea:
         38:41:f3:0b:c8:a2:93:e0:4b:87:9e:da:f2:2f:78:84:b9:8d:
         74:cb:7b:f2:3f:83:66:12:24:08:cf:a3:a7:bf:14:a7:ff:79:
         12:13:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:19 2026 by rpki-client