Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa
File:                     9d460612-f5a9-3eb9-b486-a855994f3189.roa (raw, json)
Hash identifier:          wfpDqRg/GefVa16suuOE6ujW1Pypjj5LZewVzegxmM0=
Subject key identifier:   C1:9C:25:0C:19:49:D3:D6:69:63:55:9B:3A:3B:0B:51:D2:A2:DC:B2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C8FE1D91B928C48024580
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:8f:e1:d9:1b:92:8c:48:02:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=98840ecb-55ce-44a0-b31e-75dc958ba423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:45:f3:3b:54:20:e2:f1:b4:19:e0:3a:d4:
                    a5:0f:b5:3c:90:ed:2a:b9:72:2f:6c:61:ca:d7:87:
                    8d:50:8e:e1:f9:f4:49:5b:05:11:c0:3c:2a:fa:31:
                    ee:e3:10:bf:25:ab:a3:63:63:c3:fc:6b:3c:08:be:
                    cb:14:49:eb:8b:27:e5:0a:0c:35:4f:00:e6:8d:df:
                    45:c6:7e:d5:3e:ef:15:69:81:fc:97:a5:c5:29:1e:
                    85:c1:01:a8:f9:79:12:9b:5c:dd:85:5d:87:5e:26:
                    db:14:cf:17:92:1e:d2:95:3b:06:c1:a5:4a:78:c8:
                    bc:b4:06:f3:09:42:7a:6d:5d:84:63:87:60:24:25:
                    1e:6b:4f:36:ce:b0:87:44:08:97:2a:af:59:02:67:
                    8c:3f:32:a9:1c:0d:26:1c:19:94:5d:67:46:10:1b:
                    dc:3e:76:38:da:e2:9c:fe:7a:b4:90:21:4e:9f:d6:
                    70:95:7f:af:dd:73:87:8d:fa:ec:ec:d0:a8:76:bc:
                    1c:0e:bc:03:b9:c9:05:24:1b:fe:eb:22:d9:b6:4d:
                    ad:38:89:ad:ac:1e:60:3e:00:22:9e:da:d2:02:56:
                    a8:55:57:d3:7c:21:07:59:a5:f4:a2:ac:d9:8d:18:
                    52:7d:eb:53:c1:10:dd:1e:a6:6d:e8:48:f9:3c:9c:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9C:25:0C:19:49:D3:D6:69:63:55:9B:3A:3B:0B:51:D2:A2:DC:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:97:cd:4c:f4:02:cb:4d:0d:12:db:76:4a:24:24:b2:32:9d:
         1c:72:47:d0:06:5e:7f:e9:07:2f:40:36:a3:c7:e3:5c:02:64:
         5d:63:71:a8:ce:5a:36:0e:16:dc:5f:17:a7:34:9e:50:be:fa:
         76:2b:c8:3b:2a:ec:e9:cb:15:d7:27:65:8b:82:55:4a:1b:63:
         13:0d:67:3d:d5:d9:18:a3:07:93:6b:2d:1c:de:a5:4e:ba:a9:
         b5:a1:7b:12:37:6e:f8:9e:05:26:df:04:d6:99:b3:e7:d8:67:
         ae:5b:da:40:dc:f9:0d:dd:7d:e0:49:c7:90:cb:76:53:05:be:
         19:44:ad:65:9c:e1:49:95:43:6a:65:30:8e:76:31:d4:54:46:
         bb:35:1b:45:e0:90:a5:d4:06:0f:87:42:02:91:0d:5e:e9:e4:
         17:cc:95:8b:a9:db:67:7f:aa:71:4e:f1:7a:19:00:e1:94:af:
         a5:b1:c2:5b:ad:e2:a6:74:82:7d:be:3e:ec:dd:f0:70:3b:b9:
         0d:90:74:60:7b:5c:f6:ca:c4:49:9d:ae:fc:23:9a:74:66:d7:
         26:4e:90:9f:81:87:52:81:ad:7e:b3:95:12:a1:f0:54:29:53:
         a5:a7:db:79:03:24:fa:56:b1:4a:d2:9e:4d:9b:86:43:82:04:
         c7:78:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:34 2026 by rpki-client