Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa
File:                     c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa (raw, json)
Hash identifier:          UE/uZK2yvdrnt9mhARglpFt9ejJPhYCFEGT0TMGlMcA=
Subject key identifier:   42:DA:A4:F2:DD:5D:B5:5D:6C:D3:A7:18:B6:5B:10:53:A4:A7:37:C3
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A0E127014582C2A7CEF80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:0e:12:70:14:58:2c:2a:7c:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=329e347e-83bc-4753-857e-2873d6f73be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d3:3f:50:4a:b1:af:04:19:48:e7:09:42:c1:
                    11:1f:71:13:04:fb:77:cd:26:09:f5:46:13:f6:f4:
                    5d:62:20:0e:bf:c3:7d:2d:1f:2b:d2:1f:c7:60:84:
                    9f:06:05:17:c4:02:7e:34:bd:5f:0f:f2:58:1c:59:
                    d8:9f:29:5a:3a:dc:e8:c5:b6:79:c2:11:5d:53:20:
                    47:89:b3:6a:e2:35:59:7d:42:0c:6d:b9:49:57:7f:
                    37:6e:e9:90:3b:22:5d:2c:73:d1:23:e6:1a:56:55:
                    9e:f5:7d:4e:9b:81:87:bb:a9:82:fb:b7:47:71:f3:
                    9f:df:78:44:da:c7:7f:44:af:d3:ee:f7:68:da:c5:
                    ed:81:66:00:2d:f5:bf:7f:52:63:df:88:3f:81:bc:
                    01:cf:50:dc:89:c7:17:7f:3e:04:46:95:54:dd:08:
                    24:91:19:2b:58:4a:1e:38:45:85:71:51:7d:92:59:
                    4b:2e:32:12:4b:ea:9d:02:3d:a0:59:80:a4:a3:30:
                    34:6c:13:0d:c9:ad:d3:0c:1c:6c:e1:b4:f3:e3:dc:
                    67:92:43:cf:37:d0:cb:8c:8b:2c:6a:5e:2f:54:57:
                    44:36:78:e5:f7:bc:3a:db:ce:42:4e:a7:df:1c:51:
                    aa:8a:e0:40:4b:31:9c:02:6a:b4:a5:0e:6f:a4:4c:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DA:A4:F2:DD:5D:B5:5D:6C:D3:A7:18:B6:5B:10:53:A4:A7:37:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:e6:b0:27:17:a7:4f:7d:9e:8d:47:4b:7e:f5:ac:55:85:
         af:69:c1:25:7a:d7:b0:cb:f6:51:51:b4:60:4e:cb:0f:1e:6a:
         97:8e:88:a1:76:30:d0:a0:e5:f4:ee:c9:49:66:86:ab:56:3f:
         80:85:19:e5:cb:b4:78:8a:68:e7:9f:b1:83:4c:e2:9c:84:fe:
         ec:be:14:72:c5:fd:3c:11:3f:69:c0:b9:7b:4f:53:b9:7e:b8:
         62:7d:cd:e2:82:25:3e:31:7d:d4:af:86:b9:5e:72:82:97:28:
         79:42:bb:9d:a9:61:cb:79:92:6b:75:65:6e:43:e8:ac:0e:96:
         90:bd:84:3b:4c:39:7c:a4:ed:68:d8:5e:c3:25:ba:12:e0:62:
         cc:6e:4e:5c:29:8b:53:07:ff:f0:70:35:dc:c1:3d:98:45:6b:
         07:bf:4c:33:4e:73:f0:f7:47:95:4b:08:b3:16:3b:34:aa:0b:
         44:c1:d5:38:d7:54:b6:c1:44:04:ca:10:3c:96:a2:99:92:77:
         35:46:db:14:f8:5f:ee:6b:0d:79:89:ca:4e:48:57:f3:96:a1:
         a9:5b:34:60:38:49:5f:90:f4:23:21:ae:8b:86:14:40:c3:dd:
         9c:0a:ed:19:d4:dc:22:88:f7:15:ae:ac:05:50:c3:a3:ea:63:
         7f:72:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:45 2026 by rpki-client