Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5e871f5d-702d-3fe0-832c-be6aee315200.roa
File:                     5e871f5d-702d-3fe0-832c-be6aee315200.roa (raw, json)
Hash identifier:          a+/7efJP/GJw8fnGPdVDzsaAfNUQ/AxkK5ZhpHnL2RA=
Subject key identifier:   4B:CF:6C:08:10:62:20:04:80:F0:DA:F9:87:99:FE:85:7F:87:D6:01
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4989E7E757CA547F23E4F100
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5e871f5d-702d-3fe0-832c-be6aee315200.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:e7:e7:57:ca:54:7f:23:e4:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a0c5984d-b884-4dd8-9045-cced1e946de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:27:3e:6a:31:64:8f:63:63:ee:01:03:1e:
                    1b:85:2d:8c:07:f3:2b:c2:0c:21:c5:f3:3e:7e:c0:
                    b4:0b:74:8e:ee:98:c5:5d:56:61:24:a4:68:48:0a:
                    e9:d6:68:4a:1c:99:bc:dd:6e:94:74:1c:c2:9b:e5:
                    ee:c8:a4:04:17:7d:a2:ce:47:43:5f:fb:71:64:2c:
                    09:bd:40:91:be:3d:1a:c8:99:5c:14:8a:74:8f:5c:
                    fe:e5:be:a5:cf:1e:c4:8d:71:c9:99:d8:56:90:ce:
                    c6:75:00:9a:73:0a:6f:30:ae:e4:a1:c0:55:60:09:
                    b1:d1:3b:a8:29:05:63:b2:71:d2:1f:29:c0:bd:5f:
                    64:62:96:09:60:93:5f:cd:80:27:78:af:a2:e2:92:
                    c6:2c:75:41:15:4f:b7:f2:19:52:99:0a:42:b5:c4:
                    3c:13:c7:84:50:5a:1b:08:a7:d6:d0:71:c6:24:0f:
                    52:60:7c:9e:93:d2:06:12:14:74:52:e0:f5:f4:c3:
                    e0:6d:c7:0b:aa:b7:41:67:be:1c:34:f5:8b:aa:f7:
                    ff:97:e9:89:98:ab:37:43:6a:17:da:fa:bf:19:66:
                    67:30:88:7a:5a:4c:eb:d4:2d:c5:e0:dd:47:dc:b9:
                    dd:31:78:b2:41:c5:62:90:2f:97:8c:6f:8e:53:32:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CF:6C:08:10:62:20:04:80:F0:DA:F9:87:99:FE:85:7F:87:D6:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5e871f5d-702d-3fe0-832c-be6aee315200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8c:73:21:7f:30:fc:c8:27:0f:e7:9d:b5:e0:3d:53:b8:ca:
         99:50:ac:6f:1f:9c:03:df:c1:bd:3b:27:0b:c3:e9:d1:72:fb:
         76:9c:44:2b:86:bb:56:b7:6f:ef:d5:2c:89:68:c0:9c:87:08:
         0b:22:69:99:91:83:3f:cf:51:14:25:b5:56:5e:df:22:b2:f5:
         43:81:c3:91:13:14:40:1d:1a:b0:ab:d5:6f:dd:70:8d:92:ae:
         4c:f0:c1:e9:7f:ee:01:09:00:9b:7f:1c:d0:89:d8:32:38:1f:
         19:c8:62:c8:ba:ad:28:aa:ba:1e:42:2f:ca:94:53:1b:79:92:
         ca:86:85:86:2c:c3:41:e6:a4:bb:87:42:b0:e2:ca:07:db:ad:
         d4:69:17:ba:f5:26:0c:41:2b:aa:27:a8:83:f5:96:31:41:98:
         98:dd:ac:1b:e8:9e:e3:9b:b0:37:ad:e2:52:79:7e:38:98:73:
         43:ef:a4:1c:d5:07:d9:7c:f8:f2:d8:01:61:94:20:7f:fd:06:
         f4:cb:0c:ab:6b:d0:46:4b:59:a9:c6:7b:3a:95:9a:f1:24:ad:
         c8:9d:67:ab:1d:d7:bb:bd:54:75:f8:f1:ea:f7:1b:76:8a:ea:
         d1:66:eb:73:51:a5:29:46:40:63:2a:a8:a9:e6:58:ac:19:39:
         32:27:7b:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiefnV8pUfyPk8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTBjNTk4NGQtYjg4NC00ZGQ4LTkwNDUtY2NlZDFlOTQ2ZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXInPmoxZI9jY+4BAx4bhS2MB/MrwgwhxfM+
fsC0C3SO7pjFXVZhJKRoSArp1mhKHJm83W6UdBzCm+XuyKQEF32izkdDX/txZCwJ
vUCRvj0ayJlcFIp0j1z+5b6lzx7EjXHJmdhWkM7GdQCacwpvMK7kocBVYAmx0Tuo
KQVjsnHSHynAvV9kYpYJYJNfzYAneK+i4pLGLHVBFU+38hlSmQpCtcQ8E8eEUFob
CKfW0HHGJA9SYHyek9IGEhR0UuD19MPgbccLqrdBZ74cNPWLqvf/l+mJmKs3Q2oX
2vq/GWZnMIh6Wkzr1C3F4N1H3LndMXiyQcVikC+XjG+OUzLIoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvPbAgQYiAEgPDa+YeZ/oV/h9YBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWU4NzFmNWQtNzAyZC0z
ZmUwLTgzMmMtYmU2YWVlMzE1MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByMcyF/MPzIJw/nnbXgPVO4yplQrG8fnAPfwb07JwvD6dFy+3acRCuG
u1a3b+/VLIlowJyHCAsiaZmRgz/PURQltVZe3yKy9UOBw5ETFEAdGrCr1W/dcI2S
rkzwwel/7gEJAJt/HNCJ2DI4HxnIYsi6rSiquh5CL8qUUxt5ksqGhYYsw0HmpLuH
QrDiygfbrdRpF7r1JgxBK6onqIP1ljFBmJjdrBvonuObsDet4lJ5fjiYc0PvpBzV
B9l8+PLYAWGUIH/9BvTLDKtr0EZLWanGezqVmvEkrcidZ6sd17u9VHX48er3G3aK
6tFm63NRpSlGQGMqqKnmWKwZOTInezE=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:09:16 2026 by rpki-client