Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fe0af998-9b26-32c4-afef-96f10010a1e8.roa
File:                     fe0af998-9b26-32c4-afef-96f10010a1e8.roa (raw, json)
Hash identifier:          maDsFdID3SWXPqIGnzEF4ndEYX8/uh2s6NmNa7weL2A=
Subject key identifier:   D4:28:E6:41:13:62:11:E6:60:56:2E:17:93:63:74:46:81:B2:DD:3E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F4973356A0C21C4140D386500
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fe0af998-9b26-32c4-afef-96f10010a1e8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        65.22.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:35:6a:0c:21:c4:14:0d:38:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=161ddf38-31ac-4f06-8b89-0aff3aa1a3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:eb:76:b6:12:fa:11:74:b9:3b:e2:c3:1a:
                    54:76:30:76:dc:ab:74:f2:fe:63:4f:26:2b:67:2a:
                    de:91:81:b1:3a:1b:9a:bb:23:1a:c1:e4:9a:80:ee:
                    be:91:1d:99:56:a3:95:a4:40:5a:1e:dd:59:8b:36:
                    80:66:00:c4:ca:b2:46:57:7e:d8:f5:77:49:35:d6:
                    71:e6:49:b3:fc:52:a6:77:77:d9:96:48:53:b9:6e:
                    17:d6:62:56:0e:2b:4d:ac:74:27:c9:36:3a:bc:2b:
                    45:d0:17:9a:ab:11:aa:24:88:15:8a:93:97:43:0d:
                    75:0d:88:79:c7:79:16:ab:5c:9f:92:bb:b0:d2:31:
                    79:cd:f0:0a:34:13:ec:43:dc:8f:0f:81:95:d1:9f:
                    59:36:b4:f4:72:74:54:b7:f1:a5:30:cd:99:97:6a:
                    45:88:a4:9a:76:dd:3a:13:71:c0:e6:af:bd:f5:a2:
                    17:d4:b4:d5:af:5d:87:8f:02:57:0b:ef:80:7d:21:
                    2a:2c:b5:40:ac:ac:2b:3d:6d:14:f3:c6:52:d5:3d:
                    88:23:66:a0:43:27:f2:80:e4:17:05:ea:18:5b:35:
                    1e:0b:61:e1:bc:8f:51:7e:37:64:87:ab:e5:0f:80:
                    e2:29:55:5f:35:d8:82:ca:86:86:bb:de:95:d5:8f:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:E6:41:13:62:11:E6:60:56:2E:17:93:63:74:46:81:B2:DD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fe0af998-9b26-32c4-afef-96f10010a1e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:99:c4:2f:2d:0e:83:c6:ae:e9:b8:37:c1:a7:6a:16:df:
         6a:ac:c5:17:f3:01:78:5d:8b:7d:88:2a:d6:85:a6:35:04:18:
         e3:40:28:ab:08:de:f1:d6:fd:07:d2:d3:0e:9e:5d:e4:b0:87:
         0a:f3:a7:5f:83:f6:06:d1:ee:dd:9a:1c:e3:bc:66:25:ed:91:
         f8:1a:43:93:ea:2e:7a:c6:85:cc:ea:70:73:25:32:13:2c:e8:
         5c:a3:44:73:3b:b4:2b:83:d6:91:9c:41:ad:6e:32:ad:90:82:
         d5:45:dd:9d:c2:8e:9e:cf:65:3d:ee:6b:27:3e:4f:6b:6e:2f:
         2a:1f:f2:98:03:df:c1:8f:ab:65:a2:6b:cb:83:c1:06:c1:6c:
         ea:a2:86:0b:f8:ab:b5:60:75:b5:66:91:f3:0e:37:60:15:07:
         cb:bd:ce:44:2b:83:b5:5c:3a:e1:37:d2:14:5b:04:1e:21:02:
         3e:72:ea:4e:0d:e6:d4:4a:35:c9:4e:36:6e:32:04:03:22:68:
         c3:a0:b7:3a:32:bc:de:61:03:25:52:59:2e:70:36:58:a9:6e:
         c8:03:ae:80:a4:71:3a:9a:b0:2f:91:3e:9b:d0:d8:75:2b:58:
         dc:42:89:ee:84:f5:a2:44:5b:64:17:0e:f2:6d:70:64:31:b2:
         1a:b0:bd:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczVqDCHEFA04ZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTYxZGRmMzgtMzFhYy00ZjA2LThiODktMGFmZjNhYTFhM2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfXrdrYS+hF0uTviwxpUdjB23Kt08v5jTyYr
ZyrekYGxOhuauyMaweSagO6+kR2ZVqOVpEBaHt1ZizaAZgDEyrJGV37Y9XdJNdZx
5kmz/FKmd3fZlkhTuW4X1mJWDitNrHQnyTY6vCtF0BeaqxGqJIgVipOXQw11DYh5
x3kWq1yfkruw0jF5zfAKNBPsQ9yPD4GV0Z9ZNrT0cnRUt/GlMM2Zl2pFiKSadt06
E3HA5q+99aIX1LTVr12HjwJXC++AfSEqLLVArKwrPW0U88ZS1T2II2agQyfygOQX
BeoYWzUeC2HhvI9Rfjdkh6vlD4DiKVVfNdiCyoaGu96V1Y+TDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQo5kETYhHmYFYuF5NjdEaBst0+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmUwYWY5OTgtOWIyNi0z
MmM0LWFmZWYtOTZmMTAwMTBhMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRayMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPUmcQvLQ6Dxq7puDfBp2oW32qsxRfzAXhdi32IKtaFpjUEGONAKKsI
3vHW/QfS0w6eXeSwhwrzp1+D9gbR7t2aHOO8ZiXtkfgaQ5PqLnrGhczqcHMlMhMs
6FyjRHM7tCuD1pGcQa1uMq2QgtVF3Z3Cjp7PZT3uayc+T2tuLyof8pgD38GPq2Wi
a8uDwQbBbOqihgv4q7VgdbVmkfMON2AVB8u9zkQrg7VcOuE30hRbBB4hAj5y6k4N
5tRKNclONm4yBAMiaMOgtzoyvN5hAyVSWS5wNlipbsgDroCkcTqasC+RPpvQ2HUr
WNxCie6E9aJEW2QXDvJtcGQxshqwvTg=
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:25:59 2026 by rpki-client