Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa
File:                     37fb047b-5012-3f7c-b83e-f1839b19285b.roa (raw, json)
Hash identifier:          jOFVf128p7x1NRteMBjyrcbb2468TnmnKGy2+qKuzF8=
Subject key identifier:   FD:68:FD:B9:EF:CE:96:98:C7:BB:FF:A3:BA:66:FF:64:A5:C6:B9:34
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4974E7C2907FDB752B5E4E90
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e7:c2:90:7f:db:75:2b:5e:4e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2c159671-2f2c-47d1-b19d-3b4d836d4852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:09:22:aa:ff:5f:0f:59:e1:22:75:d0:77:4d:
                    10:03:e4:6c:03:d5:df:6f:d5:95:82:9e:d7:f1:41:
                    97:c8:3d:59:50:58:de:4b:c9:27:e4:bc:21:54:19:
                    be:85:74:dc:cb:69:50:58:c9:5d:db:d0:55:59:07:
                    e4:dc:17:d9:c2:7c:0a:c0:cc:47:3b:d7:0a:c4:23:
                    5b:48:d6:77:70:b5:b5:c1:96:c2:ba:23:a4:25:07:
                    51:c8:6b:5a:f2:35:b1:03:75:51:09:98:bc:f0:fe:
                    12:e8:7c:e2:70:ad:3f:db:d9:71:f9:86:44:03:34:
                    7c:42:3a:12:7f:6f:19:50:f0:8a:4c:2b:60:32:5b:
                    ca:40:44:72:ec:95:ef:a5:c3:74:9e:60:ab:4c:e5:
                    5b:52:f0:0d:58:9f:b2:45:34:da:ef:73:b9:7e:2d:
                    46:c6:f5:8f:05:b1:93:88:3a:58:c7:0b:4a:e5:74:
                    be:54:0b:95:3d:70:b9:00:a4:3a:6a:81:16:87:71:
                    42:03:32:5d:83:9d:ac:12:7b:0b:26:bf:cf:d3:3a:
                    06:66:cd:a0:76:76:6f:c6:68:03:c9:d2:d4:55:f6:
                    aa:68:e8:e4:51:cd:31:ef:63:34:57:55:09:16:00:
                    dd:10:a7:9f:8c:f5:fb:de:ad:71:0c:5a:f8:d0:b6:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:68:FD:B9:EF:CE:96:98:C7:BB:FF:A3:BA:66:FF:64:A5:C6:B9:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:0e:d3:64:df:d3:e5:c5:89:5d:66:32:42:e4:d5:f8:1b:81:
         9a:d8:61:70:ed:33:9e:27:b6:5b:24:71:e8:9e:13:5c:5c:32:
         62:24:03:ee:40:cd:13:b0:d3:a4:41:3b:c0:cc:12:ba:1a:93:
         6f:f6:c0:64:11:c7:47:6c:ff:91:72:ea:d3:22:a8:02:94:de:
         0e:40:3e:c9:d9:ff:73:4e:a3:0d:41:0a:4f:e5:e1:94:1f:fe:
         62:c5:76:69:30:9b:ed:1c:a8:3c:f3:54:43:2d:52:b5:c3:0f:
         ff:19:38:7d:56:d0:3b:9e:d6:54:aa:1d:ef:27:a2:7a:68:02:
         31:f7:c6:fc:49:3c:a0:bb:e3:aa:e1:6d:23:9c:ed:3b:3f:77:
         61:c7:c1:84:19:e0:67:09:87:f2:fa:1f:6d:8f:9b:32:e8:1c:
         f2:47:87:49:d1:9a:67:d4:77:4c:d4:5e:65:8e:d5:30:c0:5f:
         c0:0e:50:22:3d:32:01:35:09:c3:0f:80:d7:2c:21:64:dd:d3:
         29:43:fd:58:d3:6b:c4:e9:ef:09:f4:bc:f7:a9:3a:f6:e4:35:
         d8:94:99:c6:93:e5:59:60:4b:b1:9c:e9:82:a8:57:0e:09:7e:
         4e:3d:8f:8a:45:1b:bb:f5:f2:91:d0:f7:6c:20:86:11:41:9b:
         fe:28:fd:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOfCkH/bdSteTpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MmMxNTk2NzEtMmYyYy00N2QxLWIxOWQtM2I0ZDgzNmQ0ODUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAkiqv9fD1nhInXQd00QA+RsA9Xfb9WVgp7X
8UGXyD1ZUFjeS8kn5LwhVBm+hXTcy2lQWMld29BVWQfk3BfZwnwKwMxHO9cKxCNb
SNZ3cLW1wZbCuiOkJQdRyGta8jWxA3VRCZi88P4S6HzicK0/29lx+YZEAzR8QjoS
f28ZUPCKTCtgMlvKQERy7JXvpcN0nmCrTOVbUvANWJ+yRTTa73O5fi1GxvWPBbGT
iDpYxwtK5XS+VAuVPXC5AKQ6aoEWh3FCAzJdg52sEnsLJr/P0zoGZs2gdnZvxmgD
ydLUVfaqaOjkUc0x72M0V1UJFgDdEKefjPX73q1xDFr40LaB3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1o/bnvzpaYx7v/o7pm/2Slxrk0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzdmYjA0N2ItNTAxMi0z
ZjdjLWI4M2UtZjE4MzliMTkyODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALkO02Tf0+XFiV1mMkLk1fgbgZrYYXDtM54ntlskceieE1xcMmIkA+5A
zROw06RBO8DMEroak2/2wGQRx0ds/5Fy6tMiqAKU3g5APsnZ/3NOow1BCk/l4ZQf
/mLFdmkwm+0cqDzzVEMtUrXDD/8ZOH1W0Due1lSqHe8nonpoAjH3xvxJPKC746rh
bSOc7Ts/d2HHwYQZ4GcJh/L6H22PmzLoHPJHh0nRmmfUd0zUXmWO1TDAX8AOUCI9
MgE1CcMPgNcsIWTd0ylD/VjTa8Tp7wn0vPepOvbkNdiUmcaT5VlgS7Gc6YKoVw4J
fk49j4pFG7v18pHQ92wghhFBm/4o/f0=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:46:21 2026 by rpki-client