Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1498c40-84fa-3906-826b-09370506500b.roa
File:                     d1498c40-84fa-3906-826b-09370506500b.roa (raw, json)
Hash identifier:          E0j6zaFNijSG1nMQECt1MWYGV6SSpDF1s7E4XscEvHY=
Subject key identifier:   2C:F1:08:A4:EF:1E:06:47:8E:FF:EC:88:C5:2C:ED:46:9A:41:41:60
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4972F39877931E66E856F1E0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1498c40-84fa-3906-826b-09370506500b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:f3:98:77:93:1e:66:e8:56:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=08156995-2878-4b18-ab53-e81c55e3cee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:8d:8d:8d:81:68:39:01:83:91:b7:ce:34:
                    ba:f7:04:b4:a7:be:b6:e1:e9:1b:c9:63:91:c2:79:
                    df:be:50:5d:43:c4:37:ee:24:6a:d2:69:14:9b:40:
                    6a:63:63:8d:e9:7b:c1:e9:23:19:f7:22:1b:9a:3c:
                    b1:01:34:0b:73:49:6b:e5:e6:ad:77:6a:f9:ab:45:
                    11:8f:d9:58:93:78:74:4e:37:d8:72:a4:8b:8e:b6:
                    51:4a:b0:ec:81:fa:ff:71:29:75:1b:67:02:3c:31:
                    2a:af:2d:ae:89:51:fd:96:c0:cf:42:e4:ca:5f:e8:
                    71:27:b7:3f:90:58:59:ca:f8:0b:64:b5:ea:bd:a2:
                    73:f7:90:02:e1:c2:b2:85:12:ef:a3:28:37:cb:40:
                    84:5f:af:58:bc:5d:c9:a4:c9:91:a8:a0:04:43:db:
                    37:4f:85:bf:95:7c:b2:b6:6c:cd:78:dd:35:38:d5:
                    bb:7f:d3:5a:9b:ba:19:5e:24:dc:16:46:0f:27:08:
                    ad:f5:8c:d2:18:09:02:f0:2c:4c:bd:30:d6:0a:d6:
                    70:ef:86:4f:1b:76:36:96:c3:3a:4f:b3:2c:88:ce:
                    d6:5a:ac:8f:0b:0b:d8:40:37:bb:4c:5f:1b:35:65:
                    0e:4c:a0:02:24:d2:79:df:b6:4b:d8:76:ee:b2:51:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F1:08:A4:EF:1E:06:47:8E:FF:EC:88:C5:2C:ED:46:9A:41:41:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1498c40-84fa-3906-826b-09370506500b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:6d:f7:33:9e:1d:7c:9a:13:63:2f:ae:44:d1:30:7f:f9:
         cc:b4:38:39:38:26:51:ec:a4:64:4f:50:c7:8a:18:eb:6d:8e:
         4a:0f:03:7c:d0:67:9c:d1:ef:a4:8b:a9:8c:5b:34:5f:06:27:
         dc:ba:d1:67:ac:da:70:bc:7e:e3:fa:f5:7f:b7:c8:ad:b8:76:
         db:3a:84:33:e3:39:09:01:d7:7a:17:e7:22:e8:fd:95:d5:b7:
         5a:84:89:f3:0d:4e:0c:f0:20:ae:5b:e7:7d:78:58:1c:a5:99:
         6a:ab:df:72:2c:20:4d:7d:b4:19:ae:c2:6d:11:c3:ba:77:e6:
         da:4b:2a:52:61:06:61:b9:6d:f1:3e:a8:d4:27:63:9d:a6:77:
         e5:0f:66:47:a2:1b:6e:8d:dc:72:c9:56:40:e0:02:da:ec:1f:
         3d:28:ba:5d:5d:79:1e:d2:01:15:85:e2:bb:b3:fb:a6:cd:58:
         a1:d5:29:b8:fc:8c:aa:bc:8b:f6:2f:e1:e5:6a:dc:8e:0b:1d:
         3b:27:93:5b:6e:ce:68:e7:a5:c0:65:f1:be:1c:33:84:5c:dc:
         14:2a:11:85:18:ca:3c:49:99:2c:92:21:44:ab:c5:6e:1a:93:
         ec:3b:3a:55:87:f1:93:4d:03:58:44:25:81:df:8e:0d:56:5b:
         0a:63:3b:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvOYd5MeZuhW8eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDgxNTY5OTUtMjg3OC00YjE4LWFiNTMtZTgxYzU1ZTNjZWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf6NjY2BaDkBg5G3zjS69wS0p7624ekbyWOR
wnnfvlBdQ8Q37iRq0mkUm0BqY2ON6XvB6SMZ9yIbmjyxATQLc0lr5eatd2r5q0UR
j9lYk3h0TjfYcqSLjrZRSrDsgfr/cSl1G2cCPDEqry2uiVH9lsDPQuTKX+hxJ7c/
kFhZyvgLZLXqvaJz95AC4cKyhRLvoyg3y0CEX69YvF3JpMmRqKAEQ9s3T4W/lXyy
tmzNeN01ONW7f9Nam7oZXiTcFkYPJwit9YzSGAkC8CxMvTDWCtZw74ZPG3Y2lsM6
T7MsiM7WWqyPCwvYQDe7TF8bNWUOTKACJNJ537ZL2HbuslF2pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzxCKTvHgZHjv/siMUs7UaaQUFgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDE0OThjNDAtODRmYS0z
OTA2LTgyNmItMDkzNzA1MDY1MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6Cbfcznh18mhNjL65E0TB/+cy0ODk4JlHspGRPUMeKGOttjkoPA3zQ
Z5zR76SLqYxbNF8GJ9y60Wes2nC8fuP69X+3yK24dts6hDPjOQkB13oX5yLo/ZXV
t1qEifMNTgzwIK5b5314WBylmWqr33IsIE19tBmuwm0Rw7p35tpLKlJhBmG5bfE+
qNQnY52md+UPZkeiG26N3HLJVkDgAtrsHz0oul1deR7SARWF4ruz+6bNWKHVKbj8
jKq8i/Yv4eVq3I4LHTsnk1tuzmjnpcBl8b4cM4Rc3BQqEYUYyjxJmSySIUSrxW4a
k+w7OlWH8ZNNA1hEJYHfjg1WWwpjOyc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:53:58 2026 by rpki-client