Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa
File:                     763f52b2-d755-32c5-9727-61ee6f561e05.roa (raw, json)
Hash identifier:          MrC/HKCAxjIizSSHN0zZit2+RKVNcdrlR8pfYj9ZH+M=
Subject key identifier:   A7:76:BC:30:15:B2:F4:F2:63:36:5A:80:89:D2:B3:91:44:3C:DA:48
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435F4DBED78F86855085350
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f4:db:ed:78:f8:68:55:08:53:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=2fb62435-7694-40bb-88a1-06e3d2ba5896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:75:17:3d:04:d7:40:63:9b:76:68:a8:9e:
                    88:1a:55:b4:96:5f:db:f2:41:de:94:a7:2b:04:b3:
                    5e:d4:f3:6f:86:25:e4:4c:ef:98:7a:1c:2b:72:64:
                    5c:38:64:ef:8d:37:d7:e9:ac:cd:65:b9:0e:43:a1:
                    3d:7f:51:a4:bf:1c:f0:9b:5c:74:86:dd:ae:ff:e2:
                    86:34:46:79:4a:31:da:f2:60:07:b3:e0:5a:2e:a4:
                    c3:86:61:48:ed:d1:23:ee:bc:a9:03:95:5b:69:91:
                    f7:7c:f4:55:37:e4:ce:e0:8e:23:5f:7d:4f:08:c6:
                    0c:60:21:11:22:3f:96:2d:11:5b:f6:de:be:74:04:
                    37:af:7a:34:bf:7a:75:5f:69:15:04:3a:0c:36:77:
                    0a:9d:38:11:69:78:9d:f6:31:f3:72:ae:ea:1e:d0:
                    28:b0:8f:22:d9:62:b3:2f:fa:9d:4b:7b:1d:53:f2:
                    9e:84:07:f3:1c:bb:89:e0:fd:06:94:8e:58:1e:66:
                    24:ea:59:f0:ef:89:fc:d1:bd:54:34:3d:30:1a:90:
                    40:2a:0e:8e:aa:c1:6f:4c:5b:eb:85:73:59:2d:69:
                    b6:1a:23:65:cf:d8:b4:e9:48:9e:9d:1a:76:e3:06:
                    31:10:37:b3:b4:82:c0:08:7e:e3:72:21:19:c3:93:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:BC:30:15:B2:F4:F2:63:36:5A:80:89:D2:B3:91:44:3C:DA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:90:62:a1:69:b7:aa:0a:7d:64:a5:67:d9:e2:c2:2e:52:06:
         09:6c:52:d3:11:aa:d2:8d:5f:32:ae:68:97:d8:67:35:e2:84:
         f8:94:f9:9d:5e:db:66:b9:ba:98:4e:7f:db:19:81:1c:0e:1f:
         9e:9e:6a:1f:94:a7:22:eb:0d:a8:53:92:c8:e0:ea:f7:2c:27:
         79:db:d7:92:cc:e4:5c:47:10:dd:6e:3a:26:8b:49:30:20:7b:
         2f:87:a2:72:22:e4:86:84:f3:ee:75:5a:12:6f:87:c8:fd:06:
         47:c1:98:8a:3a:43:c1:da:91:32:35:26:5b:b8:3a:b9:d4:de:
         03:bf:f5:8f:cf:3b:f8:e2:5c:ca:28:e7:d4:72:ef:3f:3c:c4:
         96:54:77:c3:78:88:b4:86:2c:5f:4a:ec:3e:c9:b9:ff:8b:cf:
         33:10:16:e2:e8:69:d8:08:89:b7:5b:59:b9:51:17:94:b4:41:
         8d:8f:49:5d:3a:59:d8:c5:76:d8:40:a4:ea:93:c9:53:a3:67:
         75:ad:8d:75:5d:b2:07:ad:5e:28:de:fc:3e:b5:f1:7d:e1:60:
         18:2e:06:23:43:86:ed:81:82:57:7b:be:f6:1c:ed:bb:cc:a4:
         fd:5f:47:cb:53:d9:c9:47:7a:80:0c:9c:8d:46:f0:42:51:2f:
         e0:da:50:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfTb7Xj4aFUIU1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
MmZiNjI0MzUtNzY5NC00MGJiLTg4YTEtMDZlM2QyYmE1ODk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+d1Fz0E10Bjm3ZoqJ6IGlW0ll/b8kHelKcr
BLNe1PNvhiXkTO+YehwrcmRcOGTvjTfX6azNZbkOQ6E9f1Gkvxzwm1x0ht2u/+KG
NEZ5SjHa8mAHs+BaLqTDhmFI7dEj7rypA5VbaZH3fPRVN+TO4I4jX31PCMYMYCER
Ij+WLRFb9t6+dAQ3r3o0v3p1X2kVBDoMNncKnTgRaXid9jHzcq7qHtAosI8i2WKz
L/qdS3sdU/KehAfzHLuJ4P0GlI5YHmYk6lnw74n80b1UND0wGpBAKg6OqsFvTFvr
hXNZLWm2GiNlz9i06UienRp24wYxEDeztILACH7jciEZw5OcSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKd2vDAVsvTyYzZagInSs5FEPNpIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzYzZjUyYjItZDc1NS0z
MmM1LTk3MjctNjFlZTZmNTYxZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOQYqFpt6oKfWSlZ9niwi5SBglsUtMRqtKNXzKuaJfYZzXihPiU+Z1e
22a5uphOf9sZgRwOH56eah+UpyLrDahTksjg6vcsJ3nb15LM5FxHEN1uOiaLSTAg
ey+HonIi5IaE8+51WhJvh8j9BkfBmIo6Q8HakTI1Jlu4OrnU3gO/9Y/PO/jiXMoo
59Ry7z88xJZUd8N4iLSGLF9K7D7Juf+LzzMQFuLoadgIibdbWblRF5S0QY2PSV06
WdjFdthApOqTyVOjZ3WtjXVdsgetXije/D618X3hYBguBiNDhu2Bgld7vvYc7bvM
pP1fR8tT2clHeoAMnI1G8EJRL+DaUL4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:04 2026 by rpki-client