Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa
File:                     c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa (raw, json)
Hash identifier:          yhlodkIuUYBVYaGU/ywcbJiTHQg0m7y16s1lBlABfE0=
Subject key identifier:   EB:55:8D:71:9A:9A:C9:BB:8D:12:F1:3D:CD:43:12:CE:9C:84:8A:70
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79C962A4661239F743AFC00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:96:2a:46:61:23:9f:74:3a:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f06a1b0a-7d4d-404a-9385-67c348aecfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:95:b5:af:59:ed:dd:0e:32:cf:32:cc:a3:21:
                    b3:59:f5:59:d8:7a:33:6b:00:78:e7:ff:07:b7:e4:
                    43:20:96:e4:2b:63:02:08:24:64:0d:43:20:ca:6d:
                    a0:20:af:0f:ec:a6:49:dd:db:f2:6f:7d:fa:b4:08:
                    1e:f1:82:35:ca:65:57:3f:43:8a:b8:89:a7:6d:68:
                    16:8c:ec:e7:93:ed:f8:3d:fa:ac:a0:19:a7:a3:11:
                    9b:aa:8d:d8:74:db:b5:8b:1e:37:04:d7:24:f3:78:
                    70:c1:02:79:8d:4c:6a:78:09:cf:de:5f:52:db:3f:
                    91:26:11:37:68:f6:44:85:4d:c1:97:26:03:22:c8:
                    eb:38:31:7e:65:04:f9:fc:60:f1:fc:49:18:ab:c6:
                    71:24:ae:a7:e5:98:87:3c:a4:cb:7c:40:b7:e8:bd:
                    1b:92:94:87:88:3b:37:4e:d5:c9:d5:26:ae:2e:f4:
                    8a:f8:7b:3e:5a:35:f1:d7:a9:93:e9:7e:40:fd:5f:
                    0d:af:b4:36:04:f0:fa:69:46:5b:21:d5:77:6c:77:
                    df:c7:57:a9:07:c8:91:1c:3f:60:b3:fd:02:4e:e9:
                    71:d9:fa:b8:a9:ad:c2:6f:0e:9a:a2:c2:a0:d2:f4:
                    fa:0f:a6:94:f9:f3:59:45:5f:7c:5d:d9:17:68:dd:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:55:8D:71:9A:9A:C9:BB:8D:12:F1:3D:CD:43:12:CE:9C:84:8A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:b1:28:48:d3:f3:d0:4c:fe:d8:0b:10:c5:be:9d:2b:3b:
         d0:b5:d6:04:34:2d:06:a2:f4:5d:63:67:b9:99:5c:59:27:bf:
         5c:6f:6e:b0:a0:58:01:ba:02:0d:ec:b6:25:f0:27:fe:ed:64:
         82:a2:25:ce:dc:95:74:ef:4c:1d:23:2a:bc:2d:58:03:23:ce:
         42:59:37:ce:47:22:c1:d1:25:fe:c7:1c:86:e2:8f:aa:8d:b3:
         be:63:1b:07:47:e8:13:64:e1:3f:2f:34:db:64:97:28:63:59:
         f6:5a:91:83:8b:db:db:0e:0f:94:fc:3e:3b:bd:40:b5:73:d5:
         fb:8e:27:9a:e8:4f:85:55:85:12:e8:95:c5:03:a4:8b:81:3b:
         41:7e:a6:ab:e9:5e:dd:5f:d4:07:51:ef:91:3f:69:df:1d:ac:
         4f:82:5e:83:11:f6:d7:81:06:eb:77:2d:5a:35:21:75:60:02:
         15:bc:81:3c:fe:0e:1a:fb:98:29:23:7c:28:0a:19:3c:07:aa:
         1a:02:fc:67:be:22:f1:30:ed:00:d7:5b:00:6d:ca:cc:ed:d6:
         08:de:ac:c4:a2:6b:54:dd:04:2c:e8:7d:d0:d6:bb:23:a3:f6:
         ce:a2:59:ed:75:b0:a9:58:67:5b:b2:e6:38:62:35:de:ca:51:
         12:08:ad:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnJYqRmEjn3Q6/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjA2YTFiMGEtN2Q0ZC00MDRhLTkzODUtNjdjMzQ4YWVjZmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJW1r1nt3Q4yzzLMoyGzWfVZ2HozawB45/8H
t+RDIJbkK2MCCCRkDUMgym2gIK8P7KZJ3dvyb336tAge8YI1ymVXP0OKuImnbWgW
jOznk+34PfqsoBmnoxGbqo3YdNu1ix43BNck83hwwQJ5jUxqeAnP3l9S2z+RJhE3
aPZEhU3BlyYDIsjrODF+ZQT5/GDx/EkYq8ZxJK6n5ZiHPKTLfEC36L0bkpSHiDs3
TtXJ1SauLvSK+Hs+WjXx16mT6X5A/V8Nr7Q2BPD6aUZbIdV3bHffx1epB8iRHD9g
s/0CTulx2fq4qa3Cbw6aosKg0vT6D6aU+fNZRV98XdkXaN1LAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtVjXGamsm7jRLxPc1DEs6chIpwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzZlOWY2YzItYWQzZC0z
NGM5LTk2MDktZGJjY2Y3MjdkOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmasShI0/PQTP7YCxDFvp0rO9C11gQ0LQai9F1jZ7mZXFknv1xvbrCg
WAG6Ag3stiXwJ/7tZIKiJc7clXTvTB0jKrwtWAMjzkJZN85HIsHRJf7HHIbij6qN
s75jGwdH6BNk4T8vNNtklyhjWfZakYOL29sOD5T8Pju9QLVz1fuOJ5roT4VVhRLo
lcUDpIuBO0F+pqvpXt1f1AdR75E/ad8drE+CXoMR9teBBut3LVo1IXVgAhW8gTz+
Dhr7mCkjfCgKGTwHqhoC/Ge+IvEw7QDXWwBtyszt1gjerMSia1TdBCzofdDWuyOj
9s6iWe11sKlYZ1uy5jhiNd7KURIIrew=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:18 2026 by rpki-client