Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa
File:                     8243bda0-f4c5-3196-872d-cda3f2256d3a.roa (raw, json)
Hash identifier:          bvDV/LnVBgIh9kzFN/ONn3m24g3PRcvPYGiIiHpgX1Q=
Subject key identifier:   CF:E9:17:E1:77:DB:F5:0A:67:68:E0:16:2B:24:06:82:92:A4:B1:61
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4974B86D050F71C62895E600
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b8:6d:05:0f:71:c6:28:95:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=72c450b7-6fa6-41ef-87f6-7e4b0dd15b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:5f:df:d3:b6:1f:5a:4f:19:17:d5:26:a1:
                    dd:c6:77:31:73:f1:16:09:3f:79:22:22:38:5a:bf:
                    ad:15:95:7a:a0:32:45:62:77:aa:62:7c:64:2a:05:
                    ad:a3:13:2e:45:df:3d:14:cd:b7:9e:5e:30:e8:ff:
                    98:90:55:e2:a3:71:6b:5d:f9:de:00:a9:29:a5:c3:
                    5b:b5:8c:ae:a4:2b:56:be:b0:c1:19:99:fb:77:ff:
                    7d:3b:da:b3:56:f2:5b:fd:93:98:a2:bc:0e:7a:91:
                    84:d7:bb:b6:fc:52:4a:55:7d:51:71:60:08:a8:a7:
                    eb:71:64:9d:d3:40:1f:cc:b1:16:10:02:5e:95:2b:
                    c7:eb:4f:7c:18:81:a6:af:87:e3:02:d5:d2:b1:e4:
                    ed:3d:03:cb:5d:c2:6b:2c:99:c5:ec:db:2a:d5:ff:
                    ac:ad:54:af:5a:84:a9:1d:ce:9b:2a:cc:c3:50:a5:
                    f2:71:1f:54:ce:e9:e5:3c:64:71:d1:29:ee:5d:16:
                    85:df:4a:f9:ab:9f:80:b6:b0:36:0c:1c:9f:c8:a6:
                    0d:34:05:85:93:9d:5d:40:27:d1:66:9a:ae:46:72:
                    75:a2:ee:5b:d0:7a:d2:cb:f2:e3:d5:be:e3:62:78:
                    f5:51:55:35:3a:08:ec:fc:95:2c:0b:e2:f4:16:b4:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E9:17:E1:77:DB:F5:0A:67:68:E0:16:2B:24:06:82:92:A4:B1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:df:09:26:29:a6:85:f3:31:65:76:52:e3:86:ec:1d:fd:
         83:a4:43:14:75:83:c6:aa:51:ed:36:75:f5:d1:27:fa:07:7c:
         03:cf:81:c3:f5:0a:f8:45:78:54:3f:15:2a:9b:86:35:2d:87:
         c7:d1:b5:c4:35:64:ec:5f:ae:45:5f:7b:71:6f:40:cf:23:5f:
         d7:74:26:5e:50:5d:47:fe:10:6c:9d:b3:3c:9b:e6:77:1f:be:
         12:31:48:bc:78:46:e5:a2:21:9b:0e:d8:32:8d:93:7f:99:8c:
         38:eb:00:c4:22:3f:85:db:53:e3:83:e5:1f:cd:07:73:21:21:
         0c:45:ac:ed:04:d8:23:bb:f0:6b:4d:9d:a7:78:64:30:66:f8:
         f7:64:1b:de:f2:b9:f6:b3:1d:dc:64:04:5b:a5:cc:be:0e:71:
         7e:e8:8b:6e:77:d7:74:3c:85:78:6a:1c:8f:e9:ac:32:fd:96:
         bb:1a:a1:c5:5c:f9:d3:be:d6:4a:76:73:0a:08:27:ba:1a:88:
         c3:ab:8c:a0:c0:ea:8b:c8:83:f1:51:5c:7a:97:e8:d2:a1:8e:
         76:fc:b9:14:aa:01:b5:8f:75:28:06:9f:ff:ce:0c:ab:27:a0:
         66:b5:75:86:56:5d:a7:0a:98:6e:02:66:41:3b:f7:21:24:9b:
         77:2b:ea:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLhtBQ9xxiiV5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzJjNDUwYjctNmZhNi00MWVmLTg3ZjYtN2U0YjBkZDE1YjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjtf39O2H1pPGRfVJqHdxncxc/EWCT95IiI4
Wr+tFZV6oDJFYneqYnxkKgWtoxMuRd89FM23nl4w6P+YkFXio3FrXfneAKkppcNb
tYyupCtWvrDBGZn7d/99O9qzVvJb/ZOYorwOepGE17u2/FJKVX1RcWAIqKfrcWSd
00AfzLEWEAJelSvH6098GIGmr4fjAtXSseTtPQPLXcJrLJnF7Nsq1f+srVSvWoSp
Hc6bKszDUKXycR9UzunlPGRx0SnuXRaF30r5q5+AtrA2DByfyKYNNAWFk51dQCfR
ZpquRnJ1ou5b0HrSy/Lj1b7jYnj1UVU1Ogjs/JUsC+L0FrSVmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/pF+F32/UKZ2jgFiskBoKSpLFhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODI0M2JkYTAtZjRjNS0z
MTk2LTg3MmQtY2RhM2YyMjU2ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIM93wkmKaaF8zFldlLjhuwd/YOkQxR1g8aqUe02dfXRJ/oHfAPPgcP1
CvhFeFQ/FSqbhjUth8fRtcQ1ZOxfrkVfe3FvQM8jX9d0Jl5QXUf+EGydszyb5ncf
vhIxSLx4RuWiIZsO2DKNk3+ZjDjrAMQiP4XbU+OD5R/NB3MhIQxFrO0E2CO78GtN
nad4ZDBm+PdkG97yufazHdxkBFulzL4OcX7oi25313Q8hXhqHI/prDL9lrsaocVc
+dO+1kp2cwoIJ7oaiMOrjKDA6ovIg/FRXHqX6NKhjnb8uRSqAbWPdSgGn//ODKsn
oGa1dYZWXacKmG4CZkE79yEkm3cr6ro=
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:38:15 2026 by rpki-client