Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80626d16-a5c6-3452-9a09-2f931dd68483.roa
File:                     80626d16-a5c6-3452-9a09-2f931dd68483.roa (raw, json)
Hash identifier:          WKpLzy/lXxkUinZYCF+JvDRIHLG3G314AGLaONe8Q0Y=
Subject key identifier:   FC:86:37:7A:38:AD:65:AD:BF:FE:8A:56:D4:9C:B8:37:A9:A7:43:F5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C9EE2109B153CC34BD000
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80626d16-a5c6-3452-9a09-2f931dd68483.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:9e:e2:10:9b:15:3c:c3:4b:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8c495328-f2d9-40b4-83fc-8e146c379c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:5d:2c:99:83:bf:15:79:2f:aa:3f:af:8d:
                    e5:b3:42:ee:90:6b:05:8b:2f:7c:e4:c7:fd:d9:87:
                    a6:d1:63:4a:16:fb:f1:7a:b4:ab:a9:4d:4e:67:fe:
                    87:75:cf:81:3a:01:a3:f2:72:11:a2:f2:88:54:34:
                    ed:f6:ab:47:ce:a0:d9:97:6c:7b:08:28:d8:fa:f0:
                    d2:7e:6f:68:b6:55:99:61:e2:c3:db:67:0f:58:60:
                    7a:00:3e:20:09:f0:67:ce:e7:a8:1d:3a:5a:7b:16:
                    b7:bd:89:1a:8e:86:0a:be:47:48:7b:07:11:1a:76:
                    1b:55:1b:5c:65:8f:b4:a7:8d:c7:92:2d:fe:11:9a:
                    30:f7:f8:60:fc:40:cb:3b:85:b0:7b:3c:f1:68:86:
                    58:10:a4:e4:58:bd:05:8c:56:e4:02:78:81:8e:00:
                    6d:03:35:7a:f7:63:05:38:46:c2:e3:0e:11:71:be:
                    ee:fe:a8:4c:64:6e:a9:ae:4c:be:ab:7e:29:e3:46:
                    6d:89:c2:ad:ce:49:3c:c6:9b:72:cf:e3:71:57:e7:
                    d6:12:a6:55:73:59:2e:6e:2b:de:01:b1:2d:e0:17:
                    37:f0:c7:d5:cc:e9:92:4d:ea:0d:79:3b:7b:c2:16:
                    4e:98:90:cc:59:6b:34:4c:7d:f5:a7:ec:07:71:d4:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:86:37:7A:38:AD:65:AD:BF:FE:8A:56:D4:9C:B8:37:A9:A7:43:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80626d16-a5c6-3452-9a09-2f931dd68483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:95:02:3d:da:5e:cd:6c:27:b7:a7:a5:fa:54:f9:29:1e:bf:
         51:4e:a3:cd:1f:74:e1:1c:42:15:18:60:96:b9:5f:19:df:81:
         98:f7:99:56:57:5c:eb:24:b0:41:ab:af:96:db:96:03:2a:af:
         c1:81:88:c1:69:4c:68:d3:2c:ed:9f:86:9f:02:8f:75:27:20:
         e0:1d:03:8f:5d:45:21:15:e3:97:61:2b:e5:31:49:d9:84:de:
         9e:8d:3c:4d:c7:1b:3b:7b:56:74:ba:70:4d:7a:77:2f:09:32:
         c5:f0:ef:da:bc:5b:22:d0:f7:69:e5:9e:9c:85:11:2f:a6:a3:
         c3:76:63:cb:0d:fa:f1:81:cc:c1:b5:54:93:b1:30:1a:72:f8:
         91:49:ac:bc:ff:9a:c6:b2:9c:fd:bd:85:0b:25:28:0d:29:ac:
         35:f0:0b:05:bd:2d:4a:85:41:aa:0a:5e:20:c0:d5:d8:03:ec:
         27:26:c8:37:4b:94:c7:06:8a:73:55:26:6b:8f:3f:a4:16:ff:
         33:6f:a7:25:9d:11:3c:32:f8:60:93:36:8c:4a:49:31:4e:d7:
         e2:10:7e:be:22:16:5e:cf:30:60:49:78:03:9a:2a:d1:a0:f5:
         28:6f:e6:95:1c:67:a2:6e:b4:1d:28:46:c6:55:37:29:ef:9c:
         30:2a:f7:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnJ7iEJsVPMNL0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OGM0OTUzMjgtZjJkOS00MGI0LTgzZmMtOGUxNDZjMzc5Yzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhItdLJmDvxV5L6o/r43ls0LukGsFiy985Mf9
2Yem0WNKFvvxerSrqU1OZ/6Hdc+BOgGj8nIRovKIVDTt9qtHzqDZl2x7CCjY+vDS
fm9otlWZYeLD22cPWGB6AD4gCfBnzueoHTpaexa3vYkajoYKvkdIewcRGnYbVRtc
ZY+0p43Hki3+EZow9/hg/EDLO4WwezzxaIZYEKTkWL0FjFbkAniBjgBtAzV692MF
OEbC4w4Rcb7u/qhMZG6prky+q34p40ZticKtzkk8xptyz+NxV+fWEqZVc1kubive
AbEt4Bc38MfVzOmSTeoNeTt7whZOmJDMWWs0TH31p+wHcdSviwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPyGN3o4rWWtv/6KVtScuDepp0P1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODA2MjZkMTYtYTVjNi0z
NDUyLTlhMDktMmY5MzFkZDY4NDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqVAj3aXs1sJ7enpfpU+Skev1FOo80fdOEcQhUYYJa5XxnfgZj3mVZX
XOsksEGrr5bblgMqr8GBiMFpTGjTLO2fhp8Cj3UnIOAdA49dRSEV45dhK+UxSdmE
3p6NPE3HGzt7VnS6cE16dy8JMsXw79q8WyLQ92nlnpyFES+mo8N2Y8sN+vGBzMG1
VJOxMBpy+JFJrLz/msaynP29hQslKA0prDXwCwW9LUqFQaoKXiDA1dgD7CcmyDdL
lMcGinNVJmuPP6QW/zNvpyWdETwy+GCTNoxKSTFO1+IQfr4iFl7PMGBJeAOaKtGg
9Shv5pUcZ6JutB0oRsZVNynvnDAq92k=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:46 2026 by rpki-client