Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa
File:                     7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa (raw, json)
Hash identifier:          pAN2aBYGiO2QjjpcnKooXCe81YCskAaZBOVwawJNH3g=
Subject key identifier:   A8:4B:1F:DF:9F:80:37:75:A6:83:E2:86:D0:5B:1D:A5:64:A8:E1:2B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A41DC0E103837F328BC00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     12041
IP address blocks:        65.22.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:41:dc:0e:10:38:37:f3:28:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=79131691-1e66-4a2b-9f34-07619924a28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:5b:ea:25:fe:54:6b:82:ee:13:5c:6d:92:
                    2a:76:42:95:22:05:aa:a4:0c:12:70:3b:7f:65:d8:
                    57:52:ca:18:62:fa:fa:5a:a9:ee:8e:80:5f:46:47:
                    ca:b3:96:2e:47:c6:6c:b4:9f:49:55:2f:4d:87:4d:
                    8c:44:a8:dd:19:fb:84:86:09:c6:dd:ee:98:50:2f:
                    6b:be:f4:37:30:1f:4e:49:99:74:eb:9c:bd:d1:85:
                    96:56:37:57:8a:81:1e:0f:ac:c8:fe:83:fb:3e:ee:
                    ce:b2:cf:cf:49:6b:53:8c:b5:18:b6:98:ca:b4:fc:
                    62:10:04:00:2e:d6:06:2e:99:15:d0:0d:ed:c8:94:
                    01:f2:d3:54:4a:f9:7f:bc:91:35:93:d9:15:7f:e5:
                    fd:12:73:47:7a:0f:bd:81:a7:4f:ca:4f:4b:7b:d9:
                    d6:23:8c:3f:3f:60:43:33:53:62:b1:14:60:71:8d:
                    44:a9:bc:3f:fc:72:50:58:ce:c3:6c:0e:5f:c1:b4:
                    75:27:dc:1e:af:de:cc:fb:f4:01:04:7d:8e:80:9b:
                    5b:50:b2:6b:06:d9:5c:15:d0:61:fb:28:21:26:0e:
                    d6:94:01:ab:4c:56:0e:94:9c:ec:7b:4f:55:d7:bc:
                    43:12:13:57:80:b0:8a:e7:66:a5:9a:ed:96:0e:37:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:1F:DF:9F:80:37:75:A6:83:E2:86:D0:5B:1D:A5:64:A8:E1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a9:5c:93:6c:cd:88:ed:2a:c4:5a:40:ec:7c:9c:c9:76:81:
         87:22:d5:ae:a9:f5:cd:1e:38:1b:b2:4c:77:42:11:e6:85:05:
         a0:77:aa:d5:c6:2f:09:8f:b9:e0:0f:6b:6d:b0:5f:a3:99:24:
         d5:74:ad:8b:19:cb:c3:28:6e:e5:4b:58:f7:53:9d:6d:0c:6b:
         19:e8:0e:d1:03:e2:e8:1c:2b:82:1e:b5:f8:dc:92:4b:fc:0b:
         7d:d5:1d:3d:8c:f1:42:63:6c:39:67:6d:81:af:c9:62:0d:32:
         88:7f:27:af:7c:a1:85:bc:d1:e0:14:6d:22:1e:66:ec:75:f5:
         e8:61:0f:4f:81:d7:a0:6e:46:65:20:64:67:ff:dc:eb:17:fd:
         e7:d7:9d:f0:39:cc:26:d0:a7:29:ec:62:34:6d:a1:2a:66:87:
         90:7d:33:89:54:fc:71:7a:6d:27:b9:0f:2c:21:4b:87:1e:a9:
         90:f6:b5:c7:5d:e0:13:3c:87:2e:c3:e2:0c:ca:aa:1c:28:fc:
         91:e0:9b:4b:e8:fa:77:01:8b:f5:b3:4b:cd:9c:29:1d:21:9c:
         10:eb:83:88:06:43:87:5e:fe:c6:a8:71:23:90:6c:ec:d1:d8:
         43:66:c1:5c:50:c0:b0:11:e8:89:ee:b3:71:12:cf:01:cf:ec:
         7c:93:6e:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekHcDhA4N/MovAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
NzkxMzE2OTEtMWU2Ni00YTJiLTlmMzQtMDc2MTk5MjRhMjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDZb6iX+VGuC7hNcbZIqdkKVIgWqpAwScDt/
ZdhXUsoYYvr6WqnujoBfRkfKs5YuR8ZstJ9JVS9Nh02MRKjdGfuEhgnG3e6YUC9r
vvQ3MB9OSZl065y90YWWVjdXioEeD6zI/oP7Pu7Oss/PSWtTjLUYtpjKtPxiEAQA
LtYGLpkV0A3tyJQB8tNUSvl/vJE1k9kVf+X9EnNHeg+9gadPyk9Le9nWI4w/P2BD
M1NisRRgcY1Eqbw//HJQWM7DbA5fwbR1J9wer97M+/QBBH2OgJtbULJrBtlcFdBh
+yghJg7WlAGrTFYOlJzse09V17xDEhNXgLCK52almu2WDjeSFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhLH9+fgDd1poPihtBbHaVkqOErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzAxM2Y5YTYtOWUxYS0z
ZjNlLWExZTctNDY3ODNiNzFhYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGpXJNszYjtKsRaQOx8nMl2gYci1a6p9c0eOBuyTHdCEeaFBaB3qtXG
LwmPueAPa22wX6OZJNV0rYsZy8MobuVLWPdTnW0MaxnoDtED4ugcK4Ietfjckkv8
C33VHT2M8UJjbDlnbYGvyWINMoh/J698oYW80eAUbSIeZux19ehhD0+B16BuRmUg
ZGf/3OsX/efXnfA5zCbQpynsYjRtoSpmh5B9M4lU/HF6bSe5DywhS4ceqZD2tcdd
4BM8hy7D4gzKqhwo/JHgm0vo+ncBi/WzS82cKR0hnBDrg4gGQ4de/saocSOQbOzR
2ENmwVxQwLAR6Inus3ESzwHP7HyTbok=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:34 2026 by rpki-client