Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47d200cc-c09c-39a1-99ff-79465787a690.roa
File:                     47d200cc-c09c-39a1-99ff-79465787a690.roa (raw, json)
Hash identifier:          kLLYfqJnihN6bnMcYkaIyVaw6Wb1j9jHPk0c90vIrcc=
Subject key identifier:   62:0D:ED:90:77:76:22:A3:BB:70:27:A1:0B:E8:E8:69:FE:0F:AD:DB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04361A4B36BBA263490BD480
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47d200cc-c09c-39a1-99ff-79465787a690.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     207266
IP address blocks:        65.22.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:1a:4b:36:bb:a2:63:49:0b:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=048713c8-0e4f-4cb2-adff-681317ff99c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:2a:15:b3:c7:0f:9e:20:d1:80:37:de:a8:
                    71:8c:e8:94:75:d7:c2:53:5e:4b:b4:42:34:6c:7c:
                    aa:2a:93:f6:bc:ec:de:9c:80:89:43:e4:46:5a:61:
                    cc:44:02:1c:51:93:b1:7a:73:82:b9:3d:c8:f1:a4:
                    ea:a4:68:fa:7d:1c:8f:79:fc:34:25:d4:34:ee:33:
                    9e:1e:7a:cb:7e:06:80:74:d2:93:3f:f0:fa:c3:f6:
                    b7:ae:e5:ed:ca:0f:7e:e6:91:ed:a7:ea:38:dc:c5:
                    e4:87:c5:39:f7:2f:55:6f:d0:fb:12:45:8d:3e:4d:
                    9a:af:6a:54:c9:79:94:e7:17:f2:a9:a7:7b:fc:a0:
                    6c:a6:2c:23:fd:e6:8c:82:6f:3e:be:2f:f1:58:81:
                    84:9a:86:a8:19:10:15:12:46:e0:07:01:23:ed:df:
                    3c:e5:b3:a9:99:c5:96:ec:3e:8c:9f:6d:4e:d7:4c:
                    56:d7:63:d3:8f:75:c9:e4:69:06:6a:98:67:93:49:
                    cb:73:66:8e:e0:bc:89:15:e7:79:66:cf:a3:d0:61:
                    c6:d8:19:7b:9d:ee:d6:fc:ce:8b:3d:57:f1:1b:36:
                    98:da:45:06:86:9c:d6:90:7c:ad:d7:96:cb:49:0e:
                    35:1f:7a:38:03:b0:49:ed:b7:7f:4c:42:7a:60:66:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0D:ED:90:77:76:22:A3:BB:70:27:A1:0B:E8:E8:69:FE:0F:AD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47d200cc-c09c-39a1-99ff-79465787a690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:46:5f:54:41:98:7c:5a:99:95:45:35:dd:b7:9c:7a:bb:5e:
         91:4a:46:43:4d:2f:bb:0d:76:c6:39:ca:27:22:06:b9:43:12:
         d1:74:2c:f1:d8:ec:62:d2:38:93:37:ac:73:04:5b:35:f3:1b:
         f8:28:60:ba:fd:36:68:83:34:ec:6d:29:8a:57:d0:ca:fd:f0:
         17:fe:20:4b:6a:88:76:e0:de:f2:35:a2:f1:92:73:20:73:29:
         4e:ad:a2:9e:4e:a1:6f:3f:a6:96:ac:42:d6:cf:93:7a:0d:b6:
         e7:55:40:60:76:2f:c9:73:1a:08:e3:e3:fd:9f:af:4e:5b:0d:
         15:fc:12:1d:d3:68:aa:5e:93:fd:0e:c2:f3:9c:4e:6e:85:bc:
         69:e9:0b:71:97:ac:90:00:d4:94:2f:b2:c2:66:c1:38:7b:05:
         36:0a:b3:ab:78:57:df:71:fc:22:da:b5:f7:e1:f6:6b:a6:2b:
         e5:9a:e6:a3:7c:65:ea:73:56:86:fa:7e:41:3e:cc:12:8e:42:
         fb:58:18:8e:20:e8:c9:88:37:3b:b0:b4:3e:63:82:bf:9b:4b:
         5a:3c:ee:da:5d:de:e6:46:c1:e1:fd:96:b2:48:1d:0e:c0:2f:
         b7:a5:73:cc:ce:50:00:52:e8:d4:bf:34:91:0a:6c:a4:c9:3d:
         7e:c0:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:05 2026 by rpki-client