Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa
File:                     2be93fff-4c46-33c5-9359-9e2b6eada742.roa (raw, json)
Hash identifier:          GHoU96UO/3gKJOB/HJPY2L2jiupmobbioXLcpmFINoY=
Subject key identifier:   FB:78:D7:D1:1E:DA:FF:0B:A4:5D:A5:C9:A9:D4:6F:65:08:99:F6:FC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584ED001D2638FBD7D35BAFF7000
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     13810
IP address blocks:        65.22.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d2:63:8f:bd:7d:35:ba:ff:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=d4357d02-30f9-4d3e-b80b-eeb95c4bf45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:ee:ca:6c:a4:2b:2e:7a:3d:eb:01:17:ff:
                    98:5c:ed:4f:0b:72:ae:36:5b:e3:0e:dc:12:bd:5d:
                    ab:33:5f:ed:d7:c7:74:ea:d0:98:38:a7:33:e0:f3:
                    75:9a:64:62:76:72:9e:e1:d2:3c:86:6d:14:fa:17:
                    65:ae:4e:d9:5d:73:77:9b:62:0b:0e:e7:94:90:1c:
                    e5:66:4d:ad:8d:cc:48:09:94:6b:6e:89:dd:48:27:
                    f2:cc:f4:f6:82:a4:83:9b:f2:08:c4:85:f9:17:60:
                    bf:c5:45:44:d2:06:c3:67:c5:67:8b:f6:89:66:5d:
                    2a:dd:ce:e7:ff:f9:60:bf:f3:d6:0f:f1:c3:45:0c:
                    a7:bc:e8:d9:a6:51:55:3e:49:06:24:01:5c:db:c8:
                    bf:67:5f:93:77:07:dd:4f:ba:23:18:b7:28:7e:95:
                    9c:12:34:7d:12:73:7b:83:e2:e3:48:48:40:3a:cc:
                    cb:c4:23:dc:a6:54:7a:c2:10:3f:1a:aa:7a:11:e3:
                    82:ae:de:f6:5c:83:db:93:fe:23:b8:24:18:95:ff:
                    63:40:da:93:d3:bc:9e:70:ba:d8:73:db:ad:da:1f:
                    e1:86:81:f5:c7:a4:5e:5a:a9:98:da:ff:12:82:c6:
                    08:cb:d2:03:66:d0:b5:bf:27:3e:c6:71:e7:47:6e:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:D7:D1:1E:DA:FF:0B:A4:5D:A5:C9:A9:D4:6F:65:08:99:F6:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:b4:b6:6e:86:f9:31:ee:78:0d:e0:9f:6b:d8:63:a0:bd:
         3d:de:8c:2e:19:82:13:44:e2:6e:77:38:0b:b8:7d:d5:27:83:
         51:ef:9d:97:32:31:2a:73:78:5a:d8:63:c6:66:d3:50:21:96:
         6d:71:32:2a:38:fa:e0:46:56:5b:69:9c:ca:12:87:42:f1:f0:
         5f:c3:24:57:d6:da:8b:41:72:ce:8d:c1:70:53:65:6a:19:29:
         ec:d7:d6:e8:8d:c7:49:3c:c9:56:d2:70:5e:8f:2b:41:38:bc:
         9e:da:db:2d:a6:f5:37:c2:3e:98:d2:95:85:27:1c:ce:88:95:
         a9:b9:1d:7e:71:92:50:b3:04:ce:2e:ca:db:7c:a7:42:c0:13:
         de:84:45:e7:99:2a:30:a2:a5:11:84:cb:69:35:7c:bf:c2:ab:
         ce:92:71:9f:6c:34:d5:f3:54:96:4d:cb:51:50:ea:67:0a:34:
         0c:3e:48:3a:63:ab:a0:3a:73:e7:4f:ae:02:69:1c:86:4c:1e:
         28:26:e1:8a:b6:b5:65:16:ed:43:49:e7:7a:5b:bb:e5:06:55:
         7d:62:26:2f:48:26:20:46:5c:69:dd:67:aa:79:88:4a:f2:91:
         86:5e:be:4c:99:cf:b7:a6:36:48:6e:10:c4:2d:8b:5b:9d:04:
         b0:84:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:58 2026 by rpki-client