Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa
File:                     bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa (raw, json)
Hash identifier:          9sTud37R/pUmVVF0T1efpBywNkggBi2a9TrBhe7o7Jo=
Subject key identifier:   55:6A:79:59:9E:16:1E:90:88:6D:7E:08:6A:91:E1:BC:98:08:A9:ED
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C1461F26CC23CED30AF40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:14:61:f2:6c:c2:3c:ed:30:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a766d938-6103-43a4-9190-92ceab60f496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:39:52:83:b8:38:7e:42:93:86:02:1a:57:
                    4a:65:11:b4:22:ef:97:fc:f1:68:8f:3e:bc:4c:a5:
                    2e:1c:11:49:b0:0e:8c:71:08:37:c7:46:03:be:0c:
                    0f:71:4e:1f:59:26:67:93:70:16:9b:de:d1:c1:37:
                    9e:96:98:66:e8:0f:82:09:68:8a:e3:34:d0:3a:0d:
                    45:bb:b0:6c:89:c7:46:b8:2c:0d:54:77:7b:3d:3d:
                    32:74:4c:d1:23:89:24:ce:7e:55:a0:31:ed:24:5f:
                    0a:30:ad:fb:3e:45:08:a3:ef:34:cb:aa:d1:21:75:
                    3e:cc:be:aa:e1:69:f1:f3:18:a3:f6:40:94:90:8d:
                    ed:49:43:09:59:d6:34:84:47:21:22:bb:94:e6:98:
                    30:c7:b0:07:77:f6:81:1f:a8:52:b6:75:61:10:4c:
                    af:b4:6f:2e:67:c2:9c:71:d6:6d:da:fe:33:c3:e2:
                    ca:e3:1a:89:f8:c5:f6:0c:38:11:5d:e6:6a:e8:8a:
                    31:4f:70:f0:bd:b7:ff:61:f8:dd:05:bf:be:95:2b:
                    f4:eb:18:22:7a:6e:64:04:f2:41:ac:a9:55:15:1a:
                    c4:19:9d:d6:cb:da:76:b8:7f:f9:94:89:24:fb:d6:
                    82:1a:aa:af:07:9b:a9:0c:ae:03:cd:7b:0a:69:d8:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6A:79:59:9E:16:1E:90:88:6D:7E:08:6A:91:E1:BC:98:08:A9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:dc:37:7b:64:f2:54:11:32:c4:c8:4b:40:66:84:52:48:74:
         9f:4a:5c:a6:ee:5a:13:9b:42:db:0b:d0:08:0f:22:32:d7:cf:
         06:39:2d:51:ef:1c:d4:75:0b:59:b5:70:62:da:aa:85:8f:46:
         74:13:36:64:8e:d5:ab:92:f8:d7:88:fd:3a:fc:b6:6e:04:17:
         bb:31:8d:d9:83:80:7d:b7:78:20:02:1b:22:2d:01:7d:e4:6e:
         99:c8:fc:e0:c0:69:79:72:b0:2d:bc:d1:68:a7:eb:0e:b2:60:
         48:fb:3a:08:99:f2:75:a7:74:92:5c:a3:da:2c:51:e2:47:66:
         0c:62:5e:42:a2:af:36:04:df:b3:b2:d0:15:9f:64:98:8c:6b:
         bb:94:5a:33:d3:94:51:5f:83:1a:f9:c3:3a:c1:09:7a:ba:dd:
         e1:3c:e8:7d:4a:23:ee:ca:a9:e7:f0:10:44:f5:9c:e1:fb:34:
         6c:00:9e:e8:a8:62:3d:5b:f1:e5:1f:b0:72:b1:12:f9:a8:7f:
         ee:93:04:30:e5:36:33:db:2a:8a:d8:f7:14:6e:0b:bb:a1:e5:
         14:85:79:a1:b6:bf:03:a8:fb:21:c7:a3:84:4b:e8:e0:b9:d2:
         1d:de:ca:d2:69:ca:0f:9a:87:d3:8e:ba:4a:38:97:c6:7f:11:
         6f:3b:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:50 2026 by rpki-client