Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa
File:                     bf24e998-f4cb-3166-9844-bebff8d2d03a.roa (raw, json)
Hash identifier:          2OQaYaRZ6fPB1whNp/Yd3F9Oi2o0ur5jhqCfWOn5UGo=
Subject key identifier:   93:D0:D4:71:C7:28:22:D2:9C:51:6A:33:86:C0:27:A3:F4:FB:37:FA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79BE936AFB3A2D7F7346C40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     207266
IP address blocks:        65.22.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:e9:36:af:b3:a2:d7:f7:34:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f0489316-3bb3-44e9-bb74-726baa8596ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:e4:37:c8:f6:45:ff:5b:92:d5:01:34:18:
                    27:d9:29:b2:e6:ac:66:79:42:da:50:ed:a6:24:4f:
                    fd:81:02:5b:eb:05:5b:c4:2c:27:7a:80:31:a6:9d:
                    fc:a7:44:3a:72:cd:51:30:df:c2:8d:d1:fa:37:1e:
                    8d:ab:9f:23:1c:46:04:29:30:5a:be:e0:ce:23:4e:
                    2a:23:e8:69:e3:14:d7:59:7a:94:9b:1b:68:62:f3:
                    46:1c:9c:62:65:e6:1e:ac:b1:e7:6a:4c:cc:7b:66:
                    60:06:16:9f:43:b0:4d:fc:58:e4:18:0f:67:36:a2:
                    d2:18:08:55:37:52:42:a0:3e:9c:33:88:9d:93:f2:
                    d9:b2:35:f6:36:bd:2c:d8:c3:d9:5e:04:06:f2:0c:
                    6a:a2:22:86:56:39:c7:63:a4:28:15:fc:3f:96:d0:
                    82:07:2d:7b:3f:9c:7c:fa:4e:02:2f:58:87:1d:e6:
                    b9:f4:5a:cd:71:d0:10:d9:18:3d:16:31:1e:c0:e2:
                    2a:ad:92:78:7e:16:b4:17:07:7a:fc:c6:b2:60:d6:
                    50:27:4a:fb:85:f9:18:05:b3:0f:fe:81:8f:d5:44:
                    40:0d:b2:cd:e0:6e:0e:06:8a:a1:38:99:21:f5:57:
                    b3:13:ee:8b:43:3f:04:a3:f6:23:ad:e0:29:ba:65:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D0:D4:71:C7:28:22:D2:9C:51:6A:33:86:C0:27:A3:F4:FB:37:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5f:6f:c4:b5:45:a0:bc:13:37:06:5e:ee:68:e5:2e:4a:1f:
         19:b2:f6:53:09:f3:79:5b:c5:67:6e:3a:e7:b1:c5:81:ac:a0:
         17:25:fc:55:01:ae:0f:bb:d5:43:b3:dc:98:85:02:9f:fd:b3:
         5c:d2:47:57:f5:e2:3f:e8:41:9c:76:46:e8:83:04:ab:23:c9:
         17:67:33:10:73:39:4b:17:ce:59:ee:17:07:d1:6e:54:c1:7c:
         28:7b:64:28:8e:28:5e:67:72:89:9d:d1:8e:b1:0c:74:25:cc:
         5f:ea:3d:9d:6f:5c:22:cd:00:95:5e:cc:c4:a6:50:fc:2e:a2:
         08:dd:92:eb:b6:7e:25:5f:68:ad:c7:50:f0:44:b0:af:1e:09:
         ed:54:88:00:d6:69:f3:34:16:8d:94:f7:76:69:85:b4:ae:f3:
         bf:10:e0:ed:a1:67:02:c5:2f:16:bc:01:c4:fc:92:4a:e7:47:
         0b:53:4e:44:58:7f:c0:be:4b:d6:ef:50:02:60:91:06:3a:48:
         d0:a1:f3:c9:6d:f8:ba:70:a3:15:3d:24:b7:37:bf:b2:f5:c5:
         e7:f0:15:79:98:77:0d:6d:c9:b5:f9:01:c9:73:fe:c0:27:4c:
         2a:77:f1:a4:46:b3:80:24:55:77:6e:b3:a5:88:4f:42:c5:22:
         61:e4:37:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm+k2r7Oi1/c0bEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjA0ODkzMTYtM2JiMy00NGU5LWJiNzQtNzI2YmFhODU5NmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN7kN8j2Rf9bktUBNBgn2Smy5qxmeULaUO2m
JE/9gQJb6wVbxCwneoAxpp38p0Q6cs1RMN/CjdH6Nx6Nq58jHEYEKTBavuDOI04q
I+hp4xTXWXqUmxtoYvNGHJxiZeYerLHnakzMe2ZgBhafQ7BN/FjkGA9nNqLSGAhV
N1JCoD6cM4idk/LZsjX2Nr0s2MPZXgQG8gxqoiKGVjnHY6QoFfw/ltCCBy17P5x8
+k4CL1iHHea59FrNcdAQ2Rg9FjEewOIqrZJ4fha0Fwd6/MayYNZQJ0r7hfkYBbMP
/oGP1URADbLN4G4OBoqhOJkh9VezE+6LQz8Eo/YjreApumV4hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPQ1HHHKCLSnFFqM4bAJ6P0+zf6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmYyNGU5OTgtZjRjYi0z
MTY2LTk4NDQtYmViZmY4ZDJkMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElfb8S1RaC8EzcGXu5o5S5KHxmy9lMJ83lbxWduOuexxYGsoBcl/FUB
rg+71UOz3JiFAp/9s1zSR1f14j/oQZx2RuiDBKsjyRdnMxBzOUsXzlnuFwfRblTB
fCh7ZCiOKF5ncomd0Y6xDHQlzF/qPZ1vXCLNAJVezMSmUPwuogjdkuu2fiVfaK3H
UPBEsK8eCe1UiADWafM0Fo2U93ZphbSu878Q4O2hZwLFLxa8AcT8kkrnRwtTTkRY
f8C+S9bvUAJgkQY6SNCh88lt+LpwoxU9JLc3v7L1xefwFXmYdw1tybX5Aclz/sAn
TCp38aRGs4AkVXdus6WIT0LFImHkN7g=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:42 2026 by rpki-client