Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa
File:                     5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa (raw, json)
Hash identifier:          uY03xGxQzbayHAeEz2vUOJJXrt9bzSxVata7moHvCxs=
Subject key identifier:   B3:1C:C3:5F:B5:5D:13:C4:6F:ED:05:9C:B8:76:B8:80:57:D2:3B:4D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F498860AEAF3D7F33E395B180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:60:ae:af:3d:7f:33:e3:95:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f92b6fd2-034e-4236-ba1b-9fc3d0a27957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:3e:0d:0d:16:3a:23:06:48:4d:1b:3b:1e:
                    d9:6a:2f:df:de:30:54:12:f2:f9:6c:a5:fa:cb:f5:
                    c5:1c:88:86:34:e3:65:e9:1f:c1:9b:ad:4a:90:fb:
                    dd:d4:a9:c8:4e:aa:da:b9:63:77:d1:a0:d6:28:1b:
                    ca:66:81:6d:39:9c:c8:47:4a:9d:15:2a:6a:c1:65:
                    fe:bf:d4:47:79:d3:88:02:ff:05:0a:47:e8:5c:dc:
                    8f:bc:a5:7d:3b:64:14:48:3d:dc:21:93:bb:da:ed:
                    bd:e3:e3:a5:07:05:14:14:a3:e7:96:39:3c:f9:74:
                    5a:96:9e:11:2e:48:90:a0:87:ce:bb:da:3f:81:82:
                    07:c0:84:9a:27:82:73:90:b4:1f:12:d9:c6:16:ff:
                    9f:65:eb:09:a6:b7:51:c3:20:98:5a:af:ac:c0:8b:
                    09:4f:bd:ea:01:de:80:26:10:ee:ee:95:79:d2:83:
                    c3:ed:dd:dd:72:0b:ea:ef:79:b3:07:99:79:68:68:
                    cc:47:3c:e1:21:3b:23:57:4e:d1:2d:bf:6b:c2:2b:
                    e6:5d:81:89:d6:c0:97:ac:53:7d:34:e2:9b:df:3b:
                    25:c5:39:cf:80:12:81:91:ed:6c:21:51:4a:f1:75:
                    df:9b:fe:2d:45:ba:aa:73:24:a3:7b:5d:ff:8e:a6:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1C:C3:5F:B5:5D:13:C4:6F:ED:05:9C:B8:76:B8:80:57:D2:3B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:92:3f:b8:54:ba:e0:3b:8c:4a:a2:63:0a:5d:f3:dc:e3:
         1d:86:4a:18:72:2e:eb:cd:12:2b:5a:8e:05:11:ac:51:15:3d:
         bc:dd:d6:04:0d:9a:f0:65:db:8e:48:32:30:bd:cb:d4:eb:8a:
         7a:79:fb:fb:76:36:58:04:8b:6a:61:04:60:5f:5f:fd:3f:67:
         60:0d:d4:7d:28:cd:06:65:52:b3:9f:b5:c4:3d:f6:8e:98:c6:
         b7:19:1d:a2:09:87:13:58:ab:19:01:d0:97:4e:1b:68:68:bc:
         6a:cd:9c:46:52:22:b2:bb:3b:f1:46:5b:67:4e:ad:b4:7c:13:
         2f:89:94:8e:3d:42:00:3d:e9:0e:fc:50:52:7e:1b:51:7b:ce:
         3f:82:e5:ac:0d:fe:60:68:9e:0e:04:b1:8f:c2:aa:a4:ac:ca:
         b9:d9:68:7b:66:58:7e:6c:c5:31:7c:61:fd:35:9c:e7:a6:a5:
         de:50:13:05:93:0a:63:c1:c7:b0:dc:bd:c8:5c:5d:4b:78:5c:
         cd:f3:a4:65:e1:70:86:14:ac:66:2d:5b:20:34:d0:f7:7d:83:
         88:2f:12:69:9f:42:1e:33:7c:71:06:8a:09:d5:93:83:d0:3f:
         aa:f0:05:88:45:62:77:d4:67:f6:c0:98:33:fc:5d:c8:f6:ab:
         4c:bf:66:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiGCurz1/M+OVsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjkyYjZmZDItMDM0ZS00MjM2LWJhMWItOWZjM2QwYTI3OTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g4+DQ0WOiMGSE0bOx7Zai/f3jBUEvL5bKX6
y/XFHIiGNONl6R/Bm61KkPvd1KnITqrauWN30aDWKBvKZoFtOZzIR0qdFSpqwWX+
v9RHedOIAv8FCkfoXNyPvKV9O2QUSD3cIZO72u294+OlBwUUFKPnljk8+XRalp4R
LkiQoIfOu9o/gYIHwISaJ4JzkLQfEtnGFv+fZesJprdRwyCYWq+swIsJT73qAd6A
JhDu7pV50oPD7d3dcgvq73mzB5l5aGjMRzzhITsjV07RLb9rwivmXYGJ1sCXrFN9
NOKb3zslxTnPgBKBke1sIVFK8XXfm/4tRbqqcySje13/jqZBzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMcw1+1XRPEb+0FnLh2uIBX0jtNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWE5NDBlZWEtY2I3NC0z
ZDY3LWIwY2MtYTcyNmUyODUzYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3Pkj+4VLrgO4xKomMKXfPc4x2GShhyLuvNEitajgURrFEVPbzd1gQN
mvBl245IMjC9y9Trinp5+/t2NlgEi2phBGBfX/0/Z2AN1H0ozQZlUrOftcQ99o6Y
xrcZHaIJhxNYqxkB0JdOG2hovGrNnEZSIrK7O/FGW2dOrbR8Ey+JlI49QgA96Q78
UFJ+G1F7zj+C5awN/mBong4EsY/CqqSsyrnZaHtmWH5sxTF8Yf01nOempd5QEwWT
CmPBx7DcvchcXUt4XM3zpGXhcIYUrGYtWyA00Pd9g4gvEmmfQh4zfHEGignVk4PQ
P6rwBYhFYnfUZ/bAmDP8Xcj2q0y/Zv4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:09:04 2026 by rpki-client