Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44bcd16-436b-3470-b9b1-fa9519758ea1.roa
File:                     b44bcd16-436b-3470-b9b1-fa9519758ea1.roa (raw, json)
Hash identifier:          Ww7gLE3vnoBPn3fYxu1l9DS4BJD6meE9Z881rxb99wQ=
Subject key identifier:   55:F6:92:E8:8F:41:2E:7C:AC:6C:25:E7:A8:DA:79:0E:CC:5A:56:48
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F49748EF7B9CCE878476A3780
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44bcd16-436b-3470-b9b1-fa9519758ea1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:8e:f7:b9:cc:e8:78:47:6a:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ae33947-43c1-4103-9787-6e107abf59b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:22:0c:3d:b1:f9:d8:3a:9b:2f:74:db:c5:9c:
                    b1:fc:82:45:cc:77:ec:bd:7c:93:db:07:dd:8a:8e:
                    0a:cb:1c:56:e1:4b:58:91:a3:fd:a8:d6:e0:ae:bf:
                    81:46:64:47:f0:7b:f0:a0:ec:9c:f9:04:ca:1f:ae:
                    2c:b4:4c:51:bb:6d:3b:69:5a:6a:d7:be:86:1d:34:
                    e4:82:c1:9b:71:e8:42:2d:5f:c2:a5:40:52:50:9b:
                    85:4e:ac:05:4b:be:15:63:89:67:59:f9:0b:ca:b8:
                    96:ae:f8:eb:68:f5:12:46:87:61:89:6c:7f:e0:95:
                    d9:71:bd:65:09:8f:47:ec:df:2e:1f:e5:95:8a:0b:
                    e8:73:66:9d:15:7d:00:7d:69:2a:50:ba:45:42:d7:
                    ce:ba:67:80:6e:8f:1b:6c:9d:07:b9:cc:e6:30:0c:
                    86:35:5b:7b:5a:aa:52:aa:a8:31:34:25:e4:53:49:
                    9d:cf:9c:f0:03:f6:75:2c:2d:25:eb:73:6a:61:ff:
                    0d:92:96:14:ce:40:0e:35:cb:d7:8b:82:0c:2a:0e:
                    61:9e:04:ac:52:ea:32:fe:5c:fc:61:9c:32:1c:e5:
                    f5:24:43:8e:eb:54:6f:86:6f:5b:b1:78:d8:c1:f8:
                    b8:ca:68:42:1c:4d:8d:34:4f:0a:d2:ac:c4:a2:95:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F6:92:E8:8F:41:2E:7C:AC:6C:25:E7:A8:DA:79:0E:CC:5A:56:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44bcd16-436b-3470-b9b1-fa9519758ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:80:dd:2d:db:cf:93:fd:ad:eb:74:b2:c2:20:c8:7c:0e:7a:
         98:42:38:7a:e5:96:8e:7c:a4:f3:49:c5:d8:8e:c0:5e:91:aa:
         56:97:81:4a:75:6a:88:4d:88:37:fc:b5:5f:d5:de:6e:ca:e2:
         10:5e:42:18:de:13:eb:ac:2e:71:ae:9c:4c:7d:db:a4:16:82:
         73:3b:3f:3b:c4:32:16:d0:06:57:f0:48:37:82:09:23:a9:d9:
         49:b9:0f:1e:40:bf:56:9d:c4:f8:98:ea:38:b8:ef:cc:4e:ad:
         f8:bf:df:c9:29:5d:a0:fe:b2:d0:f1:c3:32:47:d6:e4:dd:95:
         2e:88:ce:70:c2:d8:3a:d7:3a:57:28:3d:c8:63:1b:c5:31:80:
         6a:4c:44:22:52:99:69:43:7a:20:0f:2b:30:c4:70:3f:b9:87:
         74:03:a0:5e:fb:8a:cd:bb:ac:91:eb:27:ed:47:3e:4f:9b:4c:
         14:f4:b9:9b:41:b3:96:fb:74:b9:63:f1:c8:5c:7e:30:6c:88:
         0a:54:76:84:d3:a6:41:0e:91:c1:42:5f:38:02:f2:9a:fe:6a:
         6d:91:e7:1c:e6:14:bf:bf:9b:2f:97:ed:80:27:fe:d1:99:2b:
         94:af:24:a1:6e:55:58:b3:86:2e:1d:4b:5a:e3:27:df:d2:b7:
         c3:1d:b9:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdI73uczoeEdqN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWFlMzM5NDctNDNjMS00MTAzLTk3ODctNmUxMDdhYmY1OWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yIMPbH52DqbL3TbxZyx/IJFzHfsvXyT2wfd
io4KyxxW4UtYkaP9qNbgrr+BRmRH8HvwoOyc+QTKH64stExRu207aVpq176GHTTk
gsGbcehCLV/CpUBSUJuFTqwFS74VY4lnWfkLyriWrvjraPUSRodhiWx/4JXZcb1l
CY9H7N8uH+WVigvoc2adFX0AfWkqULpFQtfOumeAbo8bbJ0HuczmMAyGNVt7WqpS
qqgxNCXkU0mdz5zwA/Z1LC0l63NqYf8NkpYUzkAONcvXi4IMKg5hngSsUuoy/lz8
YZwyHOX1JEOO61Rvhm9bsXjYwfi4ymhCHE2NNE8K0qzEopXg1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFX2kuiPQS58rGwl56jaeQ7MWlZIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjQ0YmNkMTYtNDM2Yi0z
NDcwLWI5YjEtZmE5NTE5NzU4ZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSA3S3bz5P9ret0ssIgyHwOephCOHrllo58pPNJxdiOwF6RqlaXgUp1
aohNiDf8tV/V3m7K4hBeQhjeE+usLnGunEx926QWgnM7PzvEMhbQBlfwSDeCCSOp
2Um5Dx5Av1adxPiY6ji478xOrfi/38kpXaD+stDxwzJH1uTdlS6IznDC2DrXOlco
PchjG8UxgGpMRCJSmWlDeiAPKzDEcD+5h3QDoF77is27rJHrJ+1HPk+bTBT0uZtB
s5b7dLlj8chcfjBsiApUdoTTpkEOkcFCXzgC8pr+am2R5xzmFL+/my+X7YAn/tGZ
K5SvJKFuVVizhi4dS1rjJ9/St8MduSk=
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:37:26 2026 by rpki-client