Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa
File:                     207a1c3d-3f68-3335-bba2-7651a99a336b.roa (raw, json)
Hash identifier:          oNC0d4KHN5/Tsh2ycdNqK+SK3A5A2twS+6vA5XdwLOw=
Subject key identifier:   9D:BE:1C:8A:27:EC:F0:E0:81:EA:F1:BC:51:66:BE:F7:AA:E9:75:AD
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A71B4D0054841A0CB5080
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     207266
IP address blocks:        65.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:71:b4:d0:05:48:41:a0:cb:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=d23cf0e4-75fe-49ca-b3c8-8a6defce3e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:b9:c7:b1:35:19:fe:e1:67:c2:64:6d:44:
                    0e:43:a8:34:1f:c9:19:f7:10:8f:f3:57:6e:56:9f:
                    fd:0b:e2:bc:01:d9:44:f3:c0:38:8a:9c:60:f3:31:
                    d2:09:36:ad:d7:cd:1b:b9:49:6a:b1:93:4f:a8:af:
                    a7:c2:3b:99:a0:cb:53:e2:bc:37:9d:83:cf:04:54:
                    53:45:12:bd:7b:da:e1:17:16:55:51:c5:ef:f5:c6:
                    55:f9:6c:c1:03:e1:5f:0b:a4:8b:b7:c5:98:c4:ad:
                    41:06:9b:32:60:38:0a:76:9e:4b:af:1e:67:68:f8:
                    82:1e:cd:5f:e1:34:14:7c:01:91:87:28:a6:e7:e9:
                    38:02:4f:92:e7:23:11:42:a7:ee:0a:51:d4:8a:97:
                    3f:d7:0a:37:00:f5:3c:c3:a5:69:9b:4f:d6:45:f5:
                    92:32:99:7f:d9:1d:dd:d3:84:f4:f6:1b:85:9f:6f:
                    05:01:09:a1:68:11:cf:ad:90:93:99:d5:40:3f:e7:
                    57:fc:93:1c:c6:5b:c6:3d:d6:4c:64:66:bd:bd:89:
                    f9:5a:41:5c:ff:96:f9:64:b3:3f:20:76:f8:82:7b:
                    72:dd:35:ed:2a:24:8c:82:b3:c5:0a:8e:20:34:9c:
                    df:d6:47:90:84:f2:f4:15:55:0d:d7:56:ed:d1:0f:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BE:1C:8A:27:EC:F0:E0:81:EA:F1:BC:51:66:BE:F7:AA:E9:75:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:0b:d5:35:15:5f:d3:71:9e:fd:01:86:a8:2c:28:32:13:f7:
         0a:f9:c6:28:e8:dc:2c:2e:11:af:fd:e9:96:97:73:8e:97:1f:
         4f:c6:f6:d7:4a:ae:e6:52:ea:d9:39:48:39:88:5f:43:81:f7:
         be:73:f2:02:5d:24:f2:cd:6d:d0:ea:e6:51:8f:12:65:25:a5:
         02:a4:44:05:59:89:97:b7:27:b4:54:b8:b6:9b:58:23:2d:68:
         34:4f:b9:60:ea:b4:10:dc:e7:42:df:97:89:79:03:11:7c:57:
         c5:a5:97:e7:90:02:72:af:87:9c:ae:74:da:e2:09:98:2f:cf:
         98:dc:b8:f8:60:c0:5c:cf:25:98:67:89:7e:8c:ec:d9:74:b9:
         21:a6:c7:a3:69:c7:0b:55:e8:dd:c8:02:76:78:29:54:11:77:
         4f:6e:32:d6:a4:5a:db:6c:70:6f:e0:11:05:30:ca:c0:a2:e1:
         bc:19:f6:e0:66:b0:2c:67:c1:22:9b:e6:0d:9b:43:d1:56:96:
         01:ee:cc:86:60:4d:44:01:cf:fb:23:bc:5d:ac:96:b2:14:8e:
         94:58:cb:08:d8:8b:87:a7:f3:75:38:e3:ef:9a:cc:56:bf:13:
         4f:da:ba:16:7b:39:40:39:54:3f:92:53:af:ac:54:db:d0:e9:
         bb:b8:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:32 2026 by rpki-client