Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/64b1f14d-90df-3171-9bff-66d0fd94a68b.roa
File:                     64b1f14d-90df-3171-9bff-66d0fd94a68b.roa (raw, json)
Hash identifier:          csnkqFycDYd2jz0eF0X5hxYcwp1ggWPZIrY+XKKimPM=
Subject key identifier:   0C:B0:69:47:7F:25:F3:DD:C9:E4:CC:1B:B1:01:A4:54:0F:49:67:DE
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A730573F0BF0EBACA5EC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/64b1f14d-90df-3171-9bff-66d0fd94a68b.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     207266
IP address blocks:        65.22.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:73:05:73:f0:bf:0e:ba:ca:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=b6d0ab55-7c26-46aa-82e8-c7b9ac14f7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:b2:05:8d:36:5f:df:aa:68:ee:14:aa:55:
                    e5:21:81:2d:27:9c:1b:23:58:cf:fb:a6:50:81:06:
                    f0:f7:2c:5e:34:7f:4d:00:10:ce:2d:d1:b8:1b:c7:
                    2c:79:14:53:5d:45:eb:a8:eb:e5:87:81:91:03:28:
                    e5:92:77:e9:5c:a8:0b:9d:81:5b:27:e5:40:07:45:
                    e8:f1:66:59:d7:d3:80:fb:7c:be:d1:10:c0:80:cf:
                    4c:54:c5:8d:fd:9e:35:54:cb:57:3b:7a:20:b7:88:
                    c9:d8:db:a6:3e:74:af:1e:89:0c:b5:74:a3:32:c0:
                    42:ac:21:2f:a7:6d:a3:7b:a4:db:6e:22:fa:36:74:
                    df:3e:ec:46:ea:79:10:5e:53:9e:26:78:f0:5e:e9:
                    57:68:06:e4:e8:23:a7:42:83:09:2e:00:cf:d3:ac:
                    15:5b:b2:8a:44:3f:4c:8a:0d:c5:10:7b:da:d1:09:
                    d3:2f:77:33:bd:28:82:5b:87:d5:80:4e:ac:59:a2:
                    f9:5d:51:e3:e2:90:5a:ff:90:e1:eb:eb:20:ba:32:
                    dd:5c:5d:f0:87:3d:49:74:a4:e9:27:78:b6:05:3d:
                    af:96:e7:99:79:da:dc:31:dc:fa:28:78:f7:df:4b:
                    c4:33:c0:7f:ce:66:0d:aa:86:b8:14:40:0f:cd:02:
                    28:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B0:69:47:7F:25:F3:DD:C9:E4:CC:1B:B1:01:A4:54:0F:49:67:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/64b1f14d-90df-3171-9bff-66d0fd94a68b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:d6:66:fb:c0:fb:80:dd:30:f0:e7:69:86:2e:b5:ef:89:
         77:75:c1:a3:0d:9c:21:bc:10:34:e3:c5:bb:18:bf:d1:a4:6c:
         28:e6:16:ab:6c:8b:d9:b2:a7:27:b9:86:c4:99:4c:9e:6b:98:
         48:e0:0c:33:b6:60:27:23:0d:bc:dd:39:10:3b:9f:0b:e4:af:
         ed:68:36:ce:1b:e6:17:23:54:b5:30:d7:83:b0:76:1c:18:5e:
         c2:77:9f:ed:09:e8:16:ad:ba:60:d0:40:60:26:e1:11:22:f6:
         c3:67:43:d9:94:65:49:11:1d:91:7f:04:26:2b:e1:8d:92:0f:
         e9:fd:b7:c9:3a:a5:be:a7:9b:02:de:07:f7:dd:bf:09:50:30:
         17:d9:19:10:4a:37:d3:7c:fc:b1:53:b9:68:87:59:a0:51:57:
         ac:dd:01:87:d9:9f:e0:61:76:26:33:e4:50:79:44:11:49:70:
         fe:f8:58:e4:9e:9a:d5:99:cb:e2:2f:d2:a9:7d:92:de:00:cd:
         cd:f7:32:db:f4:b0:07:5b:e8:3b:13:6f:91:9f:f8:2c:cb:c8:
         18:2a:46:6c:49:f2:bb:eb:24:3d:55:7a:77:80:25:05:0a:74:
         d5:7f:b2:5c:d2:4c:c4:34:47:bf:ea:63:46:1a:52:fc:ca:5d:
         42:89:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:27 2026 by rpki-client