Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa
File:                     0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa (raw, json)
Hash identifier:          U0QHlDLjGLqJR/XsnIUmBgQfoeR9OJZ/AG+Pz5IivIs=
Subject key identifier:   75:5B:69:04:1C:65:16:A5:3F:43:72:14:B8:39:71:95:0E:3A:19:C3
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A1B51CFCA5E19632F01C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:1b:51:cf:ca:5e:19:63:2f:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=9fb85516-73bd-447a-8ee1-b85b295fd107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:85:69:79:4e:55:77:25:71:ae:40:5b:16:
                    98:e7:86:f0:b0:ea:73:2d:a0:9e:f9:bd:96:41:03:
                    98:8c:7b:3f:8c:af:40:ff:7a:22:04:bb:96:f9:0e:
                    54:c7:f9:8b:42:b7:44:9a:96:4d:2b:b9:63:46:4a:
                    ab:0d:b4:46:87:e5:2c:57:61:1e:5a:8b:51:2f:ee:
                    5b:a1:87:cc:b3:2e:bc:7c:01:50:8b:37:13:b5:d5:
                    ba:12:53:29:71:0c:da:a5:27:51:b5:22:7c:26:09:
                    e3:a5:a3:b8:6a:85:0c:cf:94:ec:94:d1:e6:a9:4a:
                    5d:01:30:d1:d4:c2:1e:b8:56:23:72:16:91:9b:44:
                    e6:55:86:df:b5:25:b9:9d:06:0d:85:c2:d4:58:ba:
                    6d:3b:0e:1b:6c:8a:49:54:f8:56:15:51:08:5d:21:
                    78:3d:ea:b8:1f:e1:47:85:01:25:b2:a9:60:c4:11:
                    33:02:17:fd:c5:6c:7b:4d:10:42:1f:4d:92:a3:6d:
                    19:eb:3a:41:14:c9:be:f6:2c:eb:7f:d0:58:fd:a7:
                    e4:74:ee:13:5d:a5:be:cf:28:1f:b7:2f:9c:e1:bd:
                    09:5f:e2:31:eb:94:09:12:38:9e:b3:b5:a0:92:3f:
                    f0:82:ac:d8:c7:e0:22:c9:bd:dd:0c:a9:09:9c:75:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5B:69:04:1C:65:16:A5:3F:43:72:14:B8:39:71:95:0E:3A:19:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:80:30:7d:15:f4:2d:aa:55:d4:ec:64:4c:ba:fa:07:21:e3:
         e4:fe:c9:0c:9a:f0:f0:82:f8:d7:e7:36:8f:b8:5b:00:6d:e4:
         99:89:54:d4:86:ff:a9:0b:91:76:52:37:20:74:ee:06:a0:c9:
         ef:3f:08:c1:2b:70:d0:72:2c:74:52:95:26:98:56:c2:1f:f4:
         1c:d9:e6:43:d7:ac:71:e8:11:12:83:1d:b5:41:3e:92:3b:c6:
         27:42:66:24:d4:39:04:f3:dd:07:56:88:e4:3f:47:61:69:b0:
         a3:d3:6d:66:67:c7:6c:3d:e9:de:44:93:2d:a9:93:d1:7a:fb:
         37:ad:c6:84:4a:5c:35:e7:d0:62:28:ad:7f:1a:68:77:43:39:
         a4:75:a6:63:41:a6:2b:d0:9a:19:5f:d2:20:05:ad:14:4c:53:
         b5:2a:cc:5d:89:6e:ea:49:f7:7b:7c:4f:d8:26:6b:9d:6b:3a:
         f5:43:d8:77:05:7f:61:a4:63:bf:c4:a7:5d:6d:ae:5a:63:2e:
         3f:74:94:9d:e3:5b:f9:66:74:1f:00:62:72:65:fd:21:11:ac:
         68:00:2f:8b:a1:1f:ea:8b:42:22:46:69:ce:c7:52:d8:47:70:
         ed:4f:88:d3:9b:7d:4d:09:0c:fb:6f:8f:60:15:2b:95:75:5d:
         fc:7e:56:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehtRz8peGWMvAcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
OWZiODU1MTYtNzNiZC00NDdhLThlZTEtYjg1YjI5NWZkMTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEuFaXlOVXclca5AWxaY54bwsOpzLaCe+b2W
QQOYjHs/jK9A/3oiBLuW+Q5Ux/mLQrdEmpZNK7ljRkqrDbRGh+UsV2EeWotRL+5b
oYfMsy68fAFQizcTtdW6ElMpcQzapSdRtSJ8JgnjpaO4aoUMz5TslNHmqUpdATDR
1MIeuFYjchaRm0TmVYbftSW5nQYNhcLUWLptOw4bbIpJVPhWFVEIXSF4Peq4H+FH
hQElsqlgxBEzAhf9xWx7TRBCH02So20Z6zpBFMm+9izrf9BY/afkdO4TXaW+zygf
ty+c4b0JX+Ix65QJEjies7Wgkj/wgqzYx+Aiyb3dDKkJnHUyYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVbaQQcZRalP0NyFLg5cZUOOhnDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDAxNzc5NmUtMmRjYi0z
ZjgzLWFkZTUtNTMzMGNmOWJiYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOAMH0V9C2qVdTsZEy6+gch4+T+yQya8PCC+NfnNo+4WwBt5JmJVNSG
/6kLkXZSNyB07gagye8/CMErcNByLHRSlSaYVsIf9BzZ5kPXrHHoERKDHbVBPpI7
xidCZiTUOQTz3QdWiOQ/R2FpsKPTbWZnx2w96d5Eky2pk9F6+zetxoRKXDXn0GIo
rX8aaHdDOaR1pmNBpivQmhlf0iAFrRRMU7UqzF2JbupJ93t8T9gma51rOvVD2HcF
f2GkY7/Ep11trlpjLj90lJ3jW/lmdB8AYnJl/SERrGgAL4uhH+qLQiJGac7HUthH
cO1PiNObfU0JDPtvj2AVK5V1Xfx+Vpc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:47 2026 by rpki-client