Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f54b8294-5305-3863-9afd-27bda354c727.roa
File:                     f54b8294-5305-3863-9afd-27bda354c727.roa (raw, json)
Hash identifier:          gwbHYZkkqMmUCZCEo0m41wivLmDN10Ww1dg1gveqlWY=
Subject key identifier:   A9:1A:34:80:5E:06:99:0D:8E:3D:83:81:D8:BE:57:90:ED:92:F5:83
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79BEE46E1F37890956B5A00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f54b8294-5305-3863-9afd-27bda354c727.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        65.22.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:ee:46:e1:f3:78:90:95:6b:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=caf8236f-a877-4782-a27f-bd73d34b06e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:d0:7b:88:40:86:3f:a0:9a:74:62:e8:58:
                    94:8c:e8:3c:33:42:d7:84:c1:3e:e9:0a:b9:fe:56:
                    dd:c5:4d:05:f9:01:d8:c7:6d:a0:7b:22:3f:09:05:
                    51:75:22:46:18:a0:60:21:26:f3:1a:53:54:8e:12:
                    6a:eb:a5:30:b8:bd:3c:08:c3:32:ca:4d:83:9e:a5:
                    70:a3:0d:11:a4:02:48:94:23:5d:de:c3:27:1b:a7:
                    86:c1:b5:7b:18:02:b7:6f:e6:1d:11:04:9f:c8:ec:
                    03:a8:cd:a0:b0:f9:21:c7:13:1a:7a:39:86:e5:06:
                    5f:08:cd:56:a4:5a:8e:6f:0b:0f:d4:de:7f:aa:36:
                    b1:ae:14:e5:ed:e5:0f:6c:d2:7b:2b:66:08:1d:da:
                    be:5c:57:85:1a:6c:de:d7:1a:fa:61:6f:f5:49:f0:
                    76:02:20:cf:c4:18:66:3e:17:e3:92:77:39:9b:4e:
                    db:c7:cc:85:b3:7f:85:5d:3b:ab:02:1c:c5:f5:b0:
                    fa:93:a7:0c:6b:c2:b4:7c:a9:08:4f:a7:9c:db:de:
                    26:ff:4c:dc:f2:61:96:0c:5e:f1:a1:96:fe:84:f2:
                    94:ae:39:76:2c:95:8a:79:2b:2e:a8:1b:2f:44:7f:
                    43:f8:28:81:c3:17:0a:a7:8a:d9:f6:33:34:22:7b:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1A:34:80:5E:06:99:0D:8E:3D:83:81:D8:BE:57:90:ED:92:F5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f54b8294-5305-3863-9afd-27bda354c727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:00:15:35:4f:0c:cc:8b:98:c9:57:51:42:e3:f3:5a:df:
         eb:a6:9d:4a:6c:bf:41:f3:3b:25:9d:f3:2f:92:c8:2c:71:da:
         30:49:b0:3e:cf:14:41:e3:15:0f:19:14:0b:90:7e:f4:0c:40:
         bf:5f:08:4a:d7:17:f0:93:cd:d5:7c:03:2c:d8:5a:af:ee:a1:
         41:89:6d:de:b8:95:8a:5a:8c:23:9c:3d:d5:3b:42:83:8c:10:
         f5:3e:70:2a:36:ef:1c:91:c7:bb:a2:03:60:5b:b9:ae:a2:62:
         08:da:d2:f0:43:ca:f6:04:b6:e1:3b:bf:b5:2d:79:f8:d7:3c:
         ae:4e:dc:2a:6d:26:cb:8a:e7:a4:f6:50:a5:c3:43:61:df:ca:
         ed:ad:d0:bb:04:73:d7:47:6f:bc:0a:3a:1a:9d:41:a2:4e:8c:
         00:bf:07:bf:c5:8e:a4:d2:22:e6:b3:ea:41:f5:98:21:92:1e:
         40:d0:7a:4d:59:6a:9f:cc:37:a6:48:cd:a4:34:71:eb:59:b7:
         b4:fe:ea:4b:f1:98:1f:50:62:b7:c9:f0:7b:cc:b4:18:b1:55:
         55:15:10:36:2b:67:c4:4c:38:12:ee:a0:77:3d:55:d9:bf:2f:
         2d:fd:78:3a:d9:b3:90:cd:25:ec:51:82:8b:e9:a4:e4:2e:a6:
         aa:54:2e:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm+5G4fN4kJVrWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Y2FmODIzNmYtYTg3Ny00NzgyLWEyN2YtYmQ3M2QzNGIwNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM7Qe4hAhj+gmnRi6FiUjOg8M0LXhME+6Qq5
/lbdxU0F+QHYx22geyI/CQVRdSJGGKBgISbzGlNUjhJq66UwuL08CMMyyk2DnqVw
ow0RpAJIlCNd3sMnG6eGwbV7GAK3b+YdEQSfyOwDqM2gsPkhxxMaejmG5QZfCM1W
pFqObwsP1N5/qjaxrhTl7eUPbNJ7K2YIHdq+XFeFGmze1xr6YW/1SfB2AiDPxBhm
Phfjknc5m07bx8yFs3+FXTurAhzF9bD6k6cMa8K0fKkIT6ec294m/0zc8mGWDF7x
oZb+hPKUrjl2LJWKeSsuqBsvRH9D+CiBwxcKp4rZ9jM0IntJiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkaNIBeBpkNjj2Dgdi+V5DtkvWDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjU0YjgyOTQtNTMwNS0z
ODYzLTlhZmQtMjdiZGEzNTRjNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3UABU1TwzMi5jJV1FC4/Na3+umnUpsv0HzOyWd8y+SyCxx2jBJsD7P
FEHjFQ8ZFAuQfvQMQL9fCErXF/CTzdV8AyzYWq/uoUGJbd64lYpajCOcPdU7QoOM
EPU+cCo27xyRx7uiA2Bbua6iYgja0vBDyvYEtuE7v7UtefjXPK5O3CptJsuK56T2
UKXDQ2Hfyu2t0LsEc9dHb7wKOhqdQaJOjAC/B7/FjqTSIuaz6kH1mCGSHkDQek1Z
ap/MN6ZIzaQ0cetZt7T+6kvxmB9QYrfJ8HvMtBixVVUVEDYrZ8RMOBLuoHc9Vdm/
Ly39eDrZs5DNJexRgovppOQupqpULjM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:17 2026 by rpki-client