Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa
File:                     763f52b2-d755-32c5-9727-61ee6f561e05.roa (raw, json)
Hash identifier:          wIgSEguZGd5I5OB2ZePsqwlGOkoE66r0QPLj3mJdhvA=
Subject key identifier:   A4:67:E8:1C:44:13:CE:68:E4:C5:DD:2A:C5:C6:6B:05:A7:8F:38:F8
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C11C613E9154EB24560A0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:11:c6:13:e9:15:4e:b2:45:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eea3bdc2-8368-421f-85de-5ec01f653178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:2a:04:b5:ea:da:49:34:0d:26:fb:66:94:
                    aa:1b:fb:b5:4e:a4:48:40:a4:88:dd:39:88:92:5a:
                    25:9b:53:cd:f7:14:58:f7:4f:7d:4f:9b:57:20:ed:
                    3f:b2:23:1d:c9:96:a4:0d:28:99:e1:48:55:5d:8b:
                    9b:37:55:d1:39:c1:f4:a2:b1:a4:ad:2e:36:e0:37:
                    55:d8:1d:0b:bb:ba:98:a2:bb:06:d2:46:a4:de:4d:
                    02:b8:8f:77:32:d1:ea:69:99:e1:5a:a1:05:3c:0d:
                    31:04:bb:e1:41:2f:33:86:33:1c:f5:a3:bf:92:c6:
                    95:5f:2e:70:0e:91:f4:d8:5d:f6:22:1b:44:18:5a:
                    52:08:25:c7:95:03:38:49:16:eb:d2:82:8a:10:13:
                    ae:cd:59:7f:74:45:64:25:f0:a3:b8:24:a1:03:e2:
                    3d:49:72:7f:66:a3:76:0e:33:f5:be:3e:b6:44:16:
                    93:11:42:b0:16:30:84:ea:92:f7:3f:ef:5b:db:30:
                    64:e5:7a:c4:a5:e3:46:f2:10:f4:a7:21:b3:ec:c3:
                    b7:c3:96:82:c4:fb:e2:16:26:69:7d:65:62:e6:cd:
                    63:15:eb:78:74:d7:85:33:96:71:ac:28:1d:68:5c:
                    82:fe:7c:4d:50:37:ca:5f:e7:54:fe:1d:c9:33:6a:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:67:E8:1C:44:13:CE:68:E4:C5:DD:2A:C5:C6:6B:05:A7:8F:38:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:90:fb:a4:f5:4c:35:ef:ff:e7:72:f7:a5:e3:15:46:8c:1f:
         a7:da:b6:df:39:a7:b0:a5:9b:e5:a9:a4:32:03:b3:3a:7d:05:
         3d:fc:09:5d:4e:a0:95:fe:40:8b:23:a6:41:94:ca:d2:85:a7:
         1d:24:64:a2:6d:fd:9e:52:0f:af:c4:ef:38:cb:55:91:e0:b0:
         19:5f:47:33:ac:a9:c3:ef:bb:51:42:98:b2:bc:94:da:00:ee:
         ab:e0:f7:64:10:c4:55:07:e8:e1:f4:eb:ba:b8:79:f5:58:e2:
         a7:61:ec:0d:06:c9:b9:3a:5f:9f:52:94:78:c8:e2:75:f9:c8:
         cf:fb:23:1f:7a:22:79:c7:98:ca:6d:7e:2a:2d:25:ec:ad:2f:
         68:cd:45:e2:56:34:4c:b9:c1:41:33:62:ea:72:44:e6:ee:29:
         e5:12:3f:ef:70:6a:08:9c:c5:72:eb:d4:78:d3:0f:4c:0e:bf:
         5c:a4:7f:a5:2d:63:6c:59:15:80:d8:f6:b7:e4:d3:b2:f4:54:
         a5:83:e9:db:21:20:66:39:c9:2e:29:0d:b4:87:f1:a2:95:0d:
         d1:63:6c:a0:b5:99:9c:36:af:50:85:ec:47:57:ba:04:07:6d:
         49:06:9d:d1:ea:6b:35:f9:1e:8a:03:af:f0:c5:8a:56:27:f7:
         b3:79:bf:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnBHGE+kVTrJFYKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZWVhM2JkYzItODM2OC00MjFmLTg1ZGUtNWVjMDFmNjUzMTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKcqBLXq2kk0DSb7ZpSqG/u1TqRIQKSI3TmI
klolm1PN9xRY9099T5tXIO0/siMdyZakDSiZ4UhVXYubN1XROcH0orGkrS424DdV
2B0Lu7qYorsG0kak3k0CuI93MtHqaZnhWqEFPA0xBLvhQS8zhjMc9aO/ksaVXy5w
DpH02F32IhtEGFpSCCXHlQM4SRbr0oKKEBOuzVl/dEVkJfCjuCShA+I9SXJ/ZqN2
DjP1vj62RBaTEUKwFjCE6pL3P+9b2zBk5XrEpeNG8hD0pyGz7MO3w5aCxPviFiZp
fWVi5s1jFet4dNeFM5ZxrCgdaFyC/nxNUDfKX+dU/h3JM2rj9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRn6BxEE85o5MXdKsXGawWnjzj4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzYzZjUyYjItZDc1NS0z
MmM1LTk3MjctNjFlZTZmNTYxZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWQ+6T1TDXv/+dy96XjFUaMH6fatt85p7Clm+WppDIDszp9BT38CV1O
oJX+QIsjpkGUytKFpx0kZKJt/Z5SD6/E7zjLVZHgsBlfRzOsqcPvu1FCmLK8lNoA
7qvg92QQxFUH6OH067q4efVY4qdh7A0Gybk6X59SlHjI4nX5yM/7Ix96InnHmMpt
fiotJeytL2jNReJWNEy5wUEzYupyRObuKeUSP+9wagicxXLr1HjTD0wOv1ykf6Ut
Y2xZFYDY9rfk07L0VKWD6dshIGY5yS4pDbSH8aKVDdFjbKC1mZw2r1CF7EdXugQH
bUkGndHqazX5HooDr/DFilYn97N5v4o=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:56 2026 by rpki-client