Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa
File:                     0127bea2-01a8-3f87-a54f-6a97edd38e82.roa (raw, json)
Hash identifier:          xs1cEi/X4+VYWHbAd95piaAtfLvvPxRIwvqio3MOIIE=
Subject key identifier:   0F:5B:AB:3F:64:D3:8A:7D:31:3E:3E:DC:CF:07:AB:74:76:CD:F5:91
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A528772C30A3015264740
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:52:87:72:c3:0a:30:15:26:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=94bfc93c-09f5-4431-8f61-4df2c70eea5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:f5:a2:11:3d:d1:0a:95:d2:e0:31:1a:c8:
                    05:14:57:26:0b:20:c5:c1:a9:95:d5:12:13:e4:ef:
                    2c:f9:46:70:35:cb:d6:64:bb:e7:10:46:6e:0a:78:
                    0b:5c:16:ec:83:dd:40:b3:88:3d:71:6d:48:93:75:
                    2f:7e:5f:b9:f1:3e:0f:9e:ee:5e:63:ec:fc:9a:bf:
                    0c:31:eb:8f:34:5d:cc:fd:6d:1e:78:22:ee:b1:b8:
                    ad:10:74:41:a1:1e:ec:bb:40:54:47:56:9a:56:32:
                    9f:ab:5c:35:c8:ca:db:ec:49:59:84:2f:2a:e4:c8:
                    ff:8b:f1:cc:fc:22:5c:f7:f4:4d:f0:40:e1:dd:35:
                    b3:1b:f8:98:12:a9:d7:82:f1:e6:d8:ea:4f:d5:7d:
                    cb:26:e6:a9:6a:21:5a:7b:0f:34:d8:62:11:aa:83:
                    5d:99:2e:69:bd:80:67:f6:03:0d:35:75:c0:75:24:
                    af:eb:00:9a:23:91:26:26:e4:ce:33:a9:a3:19:22:
                    2d:25:59:d6:bc:a0:90:80:84:8d:53:16:b5:fc:82:
                    83:1c:51:82:d0:3c:b2:7b:16:fb:e6:a1:a1:88:fc:
                    00:61:10:75:47:61:1a:43:3c:4d:ca:7d:d8:f5:96:
                    83:0d:ce:e3:2c:62:aa:4e:58:4d:dc:06:62:0d:90:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5B:AB:3F:64:D3:8A:7D:31:3E:3E:DC:CF:07:AB:74:76:CD:F5:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5b:c3:16:44:96:3f:3a:3a:6b:ed:fc:36:10:b2:59:fd:ff:
         3c:5d:24:7f:38:b9:4b:8a:7a:d0:86:1a:21:36:f2:3c:82:42:
         38:ba:7a:e4:1d:3b:e1:c8:20:3a:71:f4:37:4a:43:62:9f:0f:
         e7:8c:21:29:eb:1e:44:ce:05:54:1b:50:2e:cd:d0:2f:d1:f3:
         bb:7d:84:a7:b8:97:7c:6b:2e:e4:fa:12:6d:6d:30:83:74:81:
         bb:4a:ec:84:22:71:19:2c:1e:66:0d:b0:06:54:ef:fc:5e:2e:
         d3:76:7d:07:b3:8a:6c:e5:07:1f:77:11:51:8c:51:48:4e:de:
         1f:48:24:ee:90:be:06:08:12:7b:a2:38:79:e5:d2:1f:ea:38:
         0c:3b:da:3b:ed:e6:96:6c:96:6e:d8:4b:b9:35:81:7d:6e:4c:
         10:c8:46:7e:eb:62:d5:f4:77:b8:c6:06:3a:b4:a0:37:1a:94:
         bb:d2:c3:d2:8a:f9:3a:32:f6:b4:fa:35:6d:2a:17:4f:b4:37:
         f5:1f:62:28:cf:73:4a:ce:d8:77:72:be:d8:33:da:4e:49:dc:
         dd:5c:4b:09:0c:24:6b:f4:95:53:f8:d0:14:b4:f7:2f:39:f0:
         fd:49:12:07:ed:14:56:54:fa:6d:47:33:a4:b5:cf:24:f3:b9:
         01:b4:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:37 2026 by rpki-client