Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa
File:                     b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa (raw, json)
Hash identifier:          yW322bx5oPtu0dpek3mEtH35+88ZRwBdohYJgIiuWlU=
Subject key identifier:   50:7F:A7:F4:68:5C:69:6C:66:7B:82:CB:9C:B3:67:EB:12:4C:84:40
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435D8B9082EA424A0749400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d8:b9:08:2e:a4:24:a0:74:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=cfd64f18-fd47-4e73-b93e-44b419e42a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:d6:0c:00:87:ca:43:31:9c:d5:f2:66:d8:
                    34:13:8b:e4:85:42:f8:4d:5a:36:d4:6b:bc:26:f0:
                    6a:14:50:cb:cb:5f:f5:86:68:aa:c0:8f:f2:9f:af:
                    b7:15:39:1f:8e:0a:9c:2a:e4:24:26:32:2f:90:7a:
                    11:45:63:ca:84:a2:12:a8:ec:92:5d:b2:0a:60:d3:
                    9c:b2:c3:ec:6b:a0:ed:49:b1:65:09:b4:f9:e6:63:
                    21:d7:d1:37:c2:24:2b:6e:f4:19:71:c6:9d:ab:6f:
                    29:85:24:2f:8f:56:b7:1a:e0:1a:ef:31:e5:8b:99:
                    e5:9d:09:e2:6d:59:26:59:f3:98:e0:aa:46:12:09:
                    74:1a:3b:5a:80:d2:95:af:93:cb:6a:9a:92:c3:74:
                    d1:ed:86:e5:04:b2:8f:45:fd:19:f2:e7:54:19:e8:
                    82:32:5b:15:d0:5d:ac:2b:c0:e2:b3:0a:1b:94:28:
                    5e:cb:d3:ba:d5:d8:cd:4e:5f:fb:53:a2:58:b8:25:
                    7f:11:41:6d:ec:aa:27:37:2f:a9:9f:c2:71:d1:df:
                    db:26:ac:9e:40:de:b3:0f:bf:7b:2b:40:fb:ca:39:
                    40:16:52:c5:55:ee:53:62:75:2b:68:a4:04:47:cf:
                    e5:19:7d:9c:20:91:50:a2:ee:bc:03:4d:b4:66:d9:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7F:A7:F4:68:5C:69:6C:66:7B:82:CB:9C:B3:67:EB:12:4C:84:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:54:d6:00:05:eb:e5:90:70:95:ac:e2:1c:f0:eb:be:09:
         59:14:fb:83:08:65:84:a0:43:11:ea:39:ed:4c:ed:0b:3e:07:
         68:1a:e6:d8:c9:2d:69:03:90:51:fb:49:df:c3:ed:b1:24:05:
         bd:3e:b1:cc:92:4f:8a:dc:0e:4b:c5:ae:b8:27:02:28:0e:22:
         d3:23:6c:c5:13:e8:0f:02:b2:18:a5:1a:8c:be:10:3c:5a:65:
         7f:97:2a:54:ba:2d:88:70:28:87:2a:47:89:88:c8:9c:45:1a:
         c8:59:da:98:2c:b4:a2:95:ad:99:c6:69:00:0e:f9:89:c7:3f:
         f9:1c:11:95:01:59:ce:eb:df:54:07:5c:1e:a2:fc:28:df:c2:
         a2:eb:58:8c:ae:5d:98:61:ce:57:c2:61:93:7b:48:b0:78:4f:
         e4:01:a3:b4:4a:ce:7f:21:9a:5d:a7:33:92:43:88:82:d7:74:
         96:fa:8c:b8:a3:c4:a9:12:ed:fb:d3:27:76:60:03:8d:2c:d2:
         a7:95:f3:7e:a7:3f:1d:aa:ad:68:20:fc:a9:9a:ff:e7:54:2b:
         57:ef:fb:28:27:a0:3f:0a:fa:ab:40:99:ff:00:06:90:3e:c8:
         3f:d1:ce:9a:28:d2:60:1c:91:37:e9:75:da:23:43:70:94:2f:
         73:4b:c0:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdi5CC6kJKB0lAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
Y2ZkNjRmMTgtZmQ0Ny00ZTczLWI5M2UtNDRiNDE5ZTQyYTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvXWDACHykMxnNXyZtg0E4vkhUL4TVo21Gu8
JvBqFFDLy1/1hmiqwI/yn6+3FTkfjgqcKuQkJjIvkHoRRWPKhKISqOySXbIKYNOc
ssPsa6DtSbFlCbT55mMh19E3wiQrbvQZccadq28phSQvj1a3GuAa7zHli5nlnQni
bVkmWfOY4KpGEgl0GjtagNKVr5PLapqSw3TR7YblBLKPRf0Z8udUGeiCMlsV0F2s
K8DiswoblChey9O61djNTl/7U6JYuCV/EUFt7KonNy+pn8Jx0d/bJqyeQN6zD797
K0D7yjlAFlLFVe5TYnUraKQER8/lGX2cIJFQou68A020ZtlVJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFB/p/RoXGlsZnuCy5yzZ+sSTIRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjQwYzJhMzMtMTFkNC0z
NjNiLTlhYzgtODJhMmMzYTkzNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDFVNYABevlkHCVrOIc8Ou+CVkU+4MIZYSgQxHqOe1M7Qs+B2ga5tjJ
LWkDkFH7Sd/D7bEkBb0+scyST4rcDkvFrrgnAigOItMjbMUT6A8CshilGoy+EDxa
ZX+XKlS6LYhwKIcqR4mIyJxFGshZ2pgstKKVrZnGaQAO+YnHP/kcEZUBWc7r31QH
XB6i/CjfwqLrWIyuXZhhzlfCYZN7SLB4T+QBo7RKzn8hml2nM5JDiILXdJb6jLij
xKkS7fvTJ3ZgA40s0qeV836nPx2qrWgg/Kma/+dUK1fv+ygnoD8K+qtAmf8ABpA+
yD/Rzpoo0mAckTfpddojQ3CUL3NLwBk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:57 2026 by rpki-client