Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa
File:                     9957d7bb-4a48-379a-8699-0af885f6a4a3.roa (raw, json)
Hash identifier:          c0Vu7BzVdGT/tk+0mInVNiMhg84cqVksD2bKGIFPPS4=
Subject key identifier:   D8:35:2D:6A:9A:99:F6:2A:67:AD:20:8D:97:AB:A0:69:69:19:D8:7D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C146C3D441A3F5A1CE5CC
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:14:6c:3d:44:1a:3f:5a:1c:e5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e3abf16e-fa6d-4ea9-a32c-ec3fa08b7e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:7b:09:ac:ab:3f:31:5f:b3:e3:c8:a8:e5:
                    fa:8a:34:71:be:f1:47:02:e3:00:fc:28:3f:82:31:
                    90:c8:bc:f1:77:7c:17:60:87:04:cc:ae:39:cf:32:
                    7d:d2:ae:5b:c4:69:22:f5:49:3c:b0:1f:b5:9a:51:
                    e7:e9:7c:39:d5:a9:07:ff:69:b4:ba:83:a9:a2:d0:
                    9f:12:5c:bd:92:0a:56:0c:90:43:bb:11:74:10:89:
                    50:ad:c1:6e:5d:33:8d:9e:9d:24:5f:18:85:8a:e7:
                    9e:b6:24:de:a7:cd:a6:c5:80:f0:ca:8e:e7:20:fe:
                    b6:95:98:9c:a3:ee:95:a4:a4:44:fa:81:40:39:41:
                    cc:6d:7a:9c:d1:ac:98:9f:e4:9d:35:c9:ba:0f:c5:
                    5a:5e:51:b9:61:0e:0a:e2:bd:f1:a1:01:5d:17:43:
                    36:6f:2d:00:d2:9d:9e:4d:10:e2:e0:60:5a:2f:57:
                    15:94:89:bd:71:5d:bc:1d:92:1c:df:c5:68:21:19:
                    54:28:22:1d:66:80:94:04:23:bd:d4:5d:c0:44:cb:
                    d7:d0:e6:67:fe:c6:1e:74:76:49:15:61:dd:2d:39:
                    a8:73:d9:fa:14:2b:b8:ef:10:56:b8:f6:cd:93:8a:
                    b7:a4:25:ca:8c:5f:17:57:54:4a:d8:8d:2d:f5:e0:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:35:2D:6A:9A:99:F6:2A:67:AD:20:8D:97:AB:A0:69:69:19:D8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8b:04:51:0e:76:05:0a:91:ba:42:d3:1e:0f:ce:9c:dd:77:
         40:de:36:05:ce:33:3c:9a:20:68:78:a6:89:19:d6:59:6f:d9:
         3d:9b:f0:47:7d:e4:8b:25:db:13:18:58:6f:72:7f:34:7e:c7:
         dd:1c:8d:ab:2c:a5:af:fc:9a:86:3f:1e:23:b9:d0:b6:e2:b4:
         4c:ac:94:61:59:d9:16:aa:53:63:ac:a0:d7:f0:c1:4b:8d:f4:
         e0:a9:fa:16:26:f2:66:91:64:05:01:ae:26:40:95:6c:eb:1f:
         bd:21:5e:99:1c:17:6d:ed:c3:d3:3b:0e:14:f3:81:c6:1c:a8:
         41:e5:85:9d:04:b4:4d:b8:e1:6c:6e:69:d7:12:f1:b6:e4:13:
         28:e2:4e:d0:29:01:32:10:7e:72:6b:80:30:b6:0e:bc:b6:2f:
         de:7a:38:fd:a8:b2:9d:8a:57:f6:e4:48:2a:30:43:8d:2f:8d:
         85:b2:ad:dc:22:87:a8:84:45:5e:14:ff:aa:77:2c:77:a9:70:
         ca:46:44:52:c2:34:5d:a4:72:55:45:34:cf:d6:25:7f:f5:32:
         16:e2:61:4f:4a:02:a6:fb:80:6a:ed:ef:ec:d6:33:8b:28:71:
         4d:a5:52:fd:0c:18:b6:6b:22:ec:dd:c2:7f:28:85:1a:f9:66:
         f8:84:da:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnBRsPUQaP1oc5cwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTNhYmYxNmUtZmE2ZC00ZWE5LWEzMmMtZWMzZmEwOGI3ZTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/p7CayrPzFfs+PIqOX6ijRxvvFHAuMA/Cg/
gjGQyLzxd3wXYIcEzK45zzJ90q5bxGki9Uk8sB+1mlHn6Xw51akH/2m0uoOpotCf
Ely9kgpWDJBDuxF0EIlQrcFuXTONnp0kXxiFiueetiTep82mxYDwyo7nIP62lZic
o+6VpKRE+oFAOUHMbXqc0ayYn+SdNcm6D8VaXlG5YQ4K4r3xoQFdF0M2by0A0p2e
TRDi4GBaL1cVlIm9cV28HZIc38VoIRlUKCIdZoCUBCO91F3ARMvX0OZn/sYedHZJ
FWHdLTmoc9n6FCu47xBWuPbNk4q3pCXKjF8XV1RK2I0t9eCNawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNg1LWqamfYqZ60gjZeroGlpGdh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTk1N2Q3YmItNGE0OC0z
NzlhLTg2OTktMGFmODg1ZjZhNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGLBFEOdgUKkbpC0x4Pzpzdd0DeNgXOMzyaIGh4pokZ1llv2T2b8Ed9
5Isl2xMYWG9yfzR+x90cjasspa/8moY/HiO50LbitEyslGFZ2RaqU2OsoNfwwUuN
9OCp+hYm8maRZAUBriZAlWzrH70hXpkcF23tw9M7DhTzgcYcqEHlhZ0EtE244Wxu
adcS8bbkEyjiTtApATIQfnJrgDC2Dry2L956OP2osp2KV/bkSCowQ40vjYWyrdwi
h6iERV4U/6p3LHepcMpGRFLCNF2kclVFNM/WJX/1MhbiYU9KAqb7gGrt7+zWM4so
cU2lUv0MGLZrIuzdwn8ohRr5ZviE2rg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:34 2026 by rpki-client