Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e669f815-f1f2-3143-bed3-6cc18c71499b.roa
File:                     e669f815-f1f2-3143-bed3-6cc18c71499b.roa (raw, json)
Hash identifier:          ZKlmHKUUCR7EO5ME/b1tOANAh49VImBfbGLMC7s58/o=
Subject key identifier:   28:A6:1E:97:F1:5A:26:D6:A9:F6:94:1C:52:18:B4:F7:11:D5:3E:D1
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F49731EA3CA39005BA91FC400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e669f815-f1f2-3143-bed3-6cc18c71499b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:1e:a3:ca:39:00:5b:a9:1f:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ac46cfa-2e43-49e3-ae32-1871b7f8d097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:49:e4:2d:88:50:f2:b9:b4:d4:70:0f:91:
                    a7:f0:fc:16:db:72:c2:6b:63:d6:ef:16:7f:47:e7:
                    73:ab:f0:86:25:5b:3a:f4:37:fc:8d:ce:b6:4d:6e:
                    ab:d9:5e:08:5b:e4:db:38:c7:bf:f4:72:89:86:22:
                    78:1f:c5:ec:a1:b5:c1:78:25:ae:08:e3:9b:7d:e5:
                    8a:0b:c8:84:29:51:32:23:8d:a1:d9:ba:3d:80:4b:
                    26:45:ab:e4:32:fd:a7:fd:3a:6f:cb:7f:76:43:72:
                    67:f2:39:38:66:4e:a2:97:23:0a:e4:b0:35:32:45:
                    44:a6:b7:7b:aa:76:4e:3c:8a:71:71:e4:a0:96:8c:
                    b2:bb:b7:31:df:ec:6d:3f:22:96:bc:0b:c5:50:3b:
                    b8:25:9f:a9:36:4d:13:7c:f9:67:69:e2:26:78:32:
                    f4:75:30:f0:c8:70:c1:5e:7d:0c:ca:f2:5a:1b:cd:
                    b1:7e:98:2b:cf:b8:c9:75:66:db:f7:2e:7b:7a:48:
                    c8:e1:b0:40:e6:be:0e:59:fc:0f:3b:fb:04:99:93:
                    70:6a:84:57:57:f5:9d:07:09:65:c3:c5:6a:7e:62:
                    f8:6c:27:01:64:dd:76:1e:c6:df:59:12:75:98:a6:
                    00:a8:27:1d:30:3e:7d:84:a4:73:b9:20:2c:a1:9c:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:1E:97:F1:5A:26:D6:A9:F6:94:1C:52:18:B4:F7:11:D5:3E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e669f815-f1f2-3143-bed3-6cc18c71499b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e3:cf:23:50:d0:eb:54:ef:d9:62:1e:02:4d:79:60:7d:fa:
         c5:eb:71:84:ab:53:ab:fa:7a:ce:d6:da:30:b6:43:94:c4:e8:
         7f:24:f2:2d:c3:f3:48:02:10:55:9d:a1:29:39:7a:63:34:a2:
         a7:68:1c:08:d4:ca:d3:7f:84:8d:5f:2f:fa:15:4e:96:eb:28:
         4e:7a:ca:92:96:53:cf:a8:65:e2:b3:76:7a:b5:35:5f:4d:20:
         a1:cf:84:0c:18:96:53:75:1b:c4:4d:3b:39:b4:01:85:49:62:
         4a:0c:35:84:f0:65:ed:42:80:dc:eb:0f:f6:bb:a2:31:86:71:
         ea:67:06:59:15:b4:cc:47:67:42:57:43:ad:5b:d2:86:c6:45:
         a9:d2:2b:bc:c2:f6:b6:9a:7a:c4:fe:a7:58:5d:3c:d5:c6:95:
         e6:58:93:cb:fe:e7:36:c1:e6:82:22:2d:b5:74:97:80:42:99:
         11:8f:a0:dd:f7:c2:3c:f3:51:35:e6:64:3a:3a:29:0c:0d:a2:
         e4:33:e2:28:95:ea:85:a2:08:7e:d1:b7:e9:41:83:1f:5e:75:
         7c:42:d3:c9:8b:ba:7e:93:35:7d:a0:f0:cb:1f:4f:e7:ae:fc:
         65:d3:3e:c1:ab:c1:cc:58:d1:3a:0f:39:95:3a:b0:d2:86:61:
         21:bc:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:19:22 2026 by rpki-client