Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa
File:                     10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa (raw, json)
Hash identifier:          7dn7066MA+3RXi/KFDjMFF+AIh/5INkDkS9X6+xWX2g=
Subject key identifier:   83:77:DB:FA:B3:22:0F:E2:F2:48:FA:DB:56:4C:7C:A1:98:43:A4:52
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04362DED05D4B9EA7FEBC940
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:2d:ed:05:d4:b9:ea:7f:eb:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=a1a0a17f-34c5-4559-892a-53a30fa1d8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:29:f1:ec:06:69:9f:8b:12:34:3b:02:50:
                    b4:11:f9:58:e7:ad:79:10:16:68:17:16:27:5d:57:
                    ee:fd:9d:a8:9b:fe:f3:c9:41:07:de:6b:f5:21:13:
                    76:16:52:54:a0:45:e9:a1:6f:ea:c7:80:bb:36:bc:
                    a0:b0:7d:14:8b:f0:9c:ea:6f:fc:a5:e0:93:48:84:
                    c9:4c:c0:60:79:1a:9f:ab:ab:2d:dd:51:b6:63:b9:
                    83:61:93:bc:54:ab:4a:67:b5:3e:cd:3d:67:94:43:
                    4d:84:02:eb:54:1d:9d:e9:e4:18:c8:e0:b6:4f:e4:
                    66:97:cb:de:9c:24:fa:d9:8b:b4:f8:73:8a:03:61:
                    de:ad:2a:ce:eb:1a:17:71:77:ba:1b:0c:2b:16:35:
                    96:c5:52:9d:e0:bf:33:e5:56:2c:76:3e:2e:86:f8:
                    7b:bd:11:78:13:a4:a5:02:85:ec:24:72:b9:25:0c:
                    80:42:6e:9d:21:34:63:e6:b4:79:aa:6d:1a:29:44:
                    b0:0c:95:53:aa:ff:a3:04:d1:36:f0:07:75:20:00:
                    8c:17:e4:a7:6a:db:6f:b5:7b:95:68:79:f3:50:09:
                    a9:47:cd:26:a6:9e:8a:e0:be:4c:27:bf:85:0c:95:
                    9a:cd:df:e1:03:6f:52:c8:12:bf:73:71:62:e4:b9:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:DB:FA:B3:22:0F:E2:F2:48:FA:DB:56:4C:7C:A1:98:43:A4:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9c:bf:0c:95:6d:0c:83:42:d3:af:bb:46:c0:c3:f4:c1:05:
         60:70:3b:cf:b5:a7:6b:35:73:df:1d:73:1b:d2:b4:ad:b8:64:
         e3:58:fa:66:2a:e9:b8:4a:df:49:f8:65:14:3e:57:2c:ab:dc:
         07:34:35:a4:90:3c:40:a8:c0:57:45:f3:df:a0:24:48:39:19:
         64:d6:6e:38:f4:ab:f2:41:53:7f:88:37:41:7f:2c:49:18:2b:
         5d:02:c2:c0:76:44:2a:a3:30:1f:a0:fe:28:11:d0:84:f6:f1:
         9d:3b:b3:c1:d2:62:94:25:00:bf:67:65:b2:cb:e7:9b:49:86:
         9d:f4:3d:16:bd:9b:fa:c4:a3:03:fa:49:d9:55:90:70:18:c1:
         a3:ce:01:58:c4:2a:11:3e:ab:57:a1:12:8f:ce:63:96:1d:79:
         78:cb:b8:13:59:41:99:86:7c:0e:bc:52:1f:f3:fb:1f:26:eb:
         b2:ad:22:71:e4:b3:2b:a5:7e:be:9c:15:a4:78:76:68:d0:c0:
         11:e6:01:59:bf:fd:37:a8:ed:46:f6:70:66:74:e4:9f:79:af:
         f1:ea:b4:65:c6:71:f1:e1:c3:99:9c:f7:7f:0c:97:39:0d:d0:
         87:59:05:53:22:71:5b:d7:45:4e:97:78:0c:92:03:ef:14:78:
         8f:a5:74:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENi3tBdS56n/ryUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
YTFhMGExN2YtMzRjNS00NTU5LTg5MmEtNTNhMzBmYTFkOGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwukp8ewGaZ+LEjQ7AlC0EflY5615EBZoFxYn
XVfu/Z2om/7zyUEH3mv1IRN2FlJUoEXpoW/qx4C7NrygsH0Ui/Cc6m/8peCTSITJ
TMBgeRqfq6st3VG2Y7mDYZO8VKtKZ7U+zT1nlENNhALrVB2d6eQYyOC2T+Rml8ve
nCT62Yu0+HOKA2HerSrO6xoXcXe6GwwrFjWWxVKd4L8z5VYsdj4uhvh7vRF4E6Sl
AoXsJHK5JQyAQm6dITRj5rR5qm0aKUSwDJVTqv+jBNE28Ad1IACMF+SnattvtXuV
aHnzUAmpR80mpp6K4L5MJ7+FDJWazd/hA29SyBK/c3Fi5LnFVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIN32/qzIg/i8kj621ZMfKGYQ6RSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTBlMWEyYTgtZWM1ZC0z
YmRmLTliMmQtYWIxOGJkMDk4ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAicvwyVbQyDQtOvu0bAw/TBBWBwO8+1p2s1c98dcxvStK24ZONY+mYq
6bhK30n4ZRQ+Vyyr3Ac0NaSQPECowFdF89+gJEg5GWTWbjj0q/JBU3+IN0F/LEkY
K10CwsB2RCqjMB+g/igR0IT28Z07s8HSYpQlAL9nZbLL55tJhp30PRa9m/rEowP6
SdlVkHAYwaPOAVjEKhE+q1ehEo/OY5YdeXjLuBNZQZmGfA68Uh/z+x8m67KtInHk
syulfr6cFaR4dmjQwBHmAVm//Teo7Ub2cGZ05J95r/HqtGXGcfHhw5mc938MlzkN
0IdZBVMicVvXRU6XeAySA+8UeI+ldIo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:39 2026 by rpki-client