Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46267bb1-7662-3f7b-afdb-b9d43dfe3a03.roa
File:                     46267bb1-7662-3f7b-afdb-b9d43dfe3a03.roa (raw, json)
Hash identifier:          Y16Atqu36hoVZLZJ197G8st0vGnnlHrfrq9XPeQ8y/Y=
Subject key identifier:   22:1D:05:24:7D:CE:CF:9E:9C:4E:2B:C3:65:C5:EB:5D:3B:8D:3C:7D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A0BBB65F12E9C4BD24B00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46267bb1-7662-3f7b-afdb-b9d43dfe3a03.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:0b:bb:65:f1:2e:9c:4b:d2:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=4ae686be-c36e-41b7-89e6-d91fc334a781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:ee:8f:a7:6b:b8:d7:8e:b9:5e:9b:cf:6d:
                    08:c0:48:4e:df:52:d8:cb:95:27:74:c2:42:fc:9b:
                    f6:64:ce:8e:86:d8:6e:b5:ff:44:2e:3d:5e:f5:df:
                    f1:72:f3:a3:3a:54:80:06:ad:a4:95:55:0a:66:8c:
                    6c:93:fc:4c:30:c2:ff:f9:bb:f9:8f:16:bc:24:73:
                    af:f3:93:b5:6f:2c:75:26:a6:02:4d:82:21:62:6b:
                    a0:98:b7:f1:cc:4c:30:6e:52:6f:37:06:05:f4:cd:
                    a0:ec:32:c5:fa:55:fd:05:48:02:2c:0b:54:98:5d:
                    43:9b:5c:9c:2d:44:47:bd:95:3e:6f:71:1e:ca:29:
                    70:51:11:06:e6:0a:fd:f1:5e:19:5d:e7:57:9a:26:
                    fc:e9:b2:46:5b:4a:f6:e6:ee:55:af:ac:01:42:e3:
                    3b:dc:bd:30:94:42:58:7c:60:e2:f2:e8:41:f0:17:
                    4b:20:7e:29:60:3c:42:7b:11:09:11:cb:14:df:b5:
                    47:87:55:de:83:1e:e3:d7:fc:c2:30:60:c7:7d:ba:
                    17:c2:7a:db:fb:79:41:a2:2d:aa:9a:3e:ba:ad:1f:
                    ef:3f:93:21:3d:b2:7c:18:c3:f0:bd:9c:0f:a2:18:
                    94:cd:cc:41:c1:96:0b:67:9a:a5:1f:f7:76:a0:54:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1D:05:24:7D:CE:CF:9E:9C:4E:2B:C3:65:C5:EB:5D:3B:8D:3C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46267bb1-7662-3f7b-afdb-b9d43dfe3a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:be:c4:2b:01:3b:d1:69:69:c8:68:ff:69:b9:97:0b:b7:39:
         9f:7d:eb:97:33:fb:6f:0c:25:53:5a:eb:e6:c7:b9:0e:6f:39:
         de:f9:21:da:e2:e3:50:1f:2e:c9:8e:53:80:6f:28:09:be:26:
         ac:9f:84:07:e9:76:f9:e5:60:b3:2a:82:6b:6e:7b:46:54:f3:
         03:8e:e1:82:8a:07:d9:b8:2f:8b:e3:2d:80:61:53:24:31:76:
         68:ce:80:60:3f:9a:33:f2:b8:89:e9:83:26:79:75:e2:58:fd:
         1c:88:ba:68:be:6d:3d:26:79:2d:9a:8e:35:ba:a9:1a:2c:81:
         44:10:1e:d3:00:e5:b6:2e:66:1d:94:3c:4e:27:ea:66:28:24:
         6e:bc:0e:f0:f6:86:f6:64:3c:0d:bb:82:4f:9b:15:e3:53:07:
         93:2b:c0:ff:e1:58:b5:af:85:ed:85:cb:0f:e2:30:5a:d1:be:
         6b:7f:9a:4c:7a:65:b9:19:ea:11:e4:2d:ae:62:a9:ed:ee:74:
         be:1e:18:fb:b1:ea:5f:66:f9:43:6b:93:f9:aa:9d:99:7f:01:
         aa:71:96:64:b3:25:c3:fb:18:21:39:cc:a3:34:47:61:ba:be:
         bf:21:f9:81:1a:9d:8d:14:51:34:4d:1d:37:26:74:cc:96:f7:
         3d:3c:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:17:01 2026 by rpki-client