Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa
File:                     f8f30434-cd44-39b5-9767-fd50db071a96.roa (raw, json)
Hash identifier:          pHbb7/8lIn05ilxbtfzxhS+ZCDixcR5J5YoQvgdy6Ns=
Subject key identifier:   F4:7B:8C:D2:C2:A0:7A:97:36:2D:DF:41:1E:11:2B:E1:30:04:D4:F4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E043627BA498F8FCAEB45D8C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     207266
IP address blocks:        65.22.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:27:ba:49:8f:8f:ca:eb:45:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=54486b5e-e888-4f07-8375-bbb7f25e33bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:37:24:bf:82:24:33:a6:89:da:45:2a:79:
                    a7:18:e7:c9:8f:7d:66:3b:40:33:eb:5b:ca:79:cd:
                    e9:42:b5:f3:e6:09:5a:ba:84:59:af:dc:05:08:2e:
                    81:b0:b1:0b:61:c5:4a:2b:b7:c8:33:07:fa:90:00:
                    c2:b7:53:c9:c0:65:dd:58:b0:a4:2b:33:46:1d:e8:
                    e8:fb:33:4f:17:d5:8f:3c:29:b5:db:b9:a4:4a:96:
                    18:4b:3a:03:a8:1e:04:3f:29:31:37:08:4a:23:1e:
                    93:0f:47:c4:d3:1e:5f:88:0c:b1:1c:e3:13:24:f2:
                    d6:fb:02:0a:fe:26:bd:d4:2a:4e:c8:71:1c:df:ec:
                    1e:fc:4d:81:42:07:53:bf:5a:1b:5f:3a:47:8f:f6:
                    42:b7:e2:fa:59:71:93:88:cb:44:09:21:38:97:fe:
                    6b:56:69:98:ec:5b:37:d0:18:ce:25:f0:fd:f7:b9:
                    7a:d0:44:ea:04:cd:f9:14:6f:5b:f1:88:e4:82:d3:
                    93:ad:34:9f:2c:98:83:7a:40:e6:72:7e:92:1a:6a:
                    7d:85:91:92:de:9f:21:42:87:dd:8a:0c:b6:b6:f4:
                    36:4b:5e:12:23:56:33:a6:de:54:55:f1:2a:5e:f6:
                    b8:a7:23:6d:1e:21:1f:d1:52:e9:49:b8:5e:dc:2d:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7B:8C:D2:C2:A0:7A:97:36:2D:DF:41:1E:11:2B:E1:30:04:D4:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:94:04:00:86:45:ab:1d:87:7a:a5:41:0c:24:fe:a4:d5:ca:
         c6:57:e9:e4:c2:1b:67:ff:ea:d4:dc:a0:1c:1c:23:28:92:95:
         6b:8a:bb:35:a4:07:d8:b0:ca:54:e3:6a:c6:ec:61:6c:62:83:
         5c:8e:42:b2:09:68:80:f4:cc:a5:09:dd:46:e5:09:a8:d1:fa:
         dc:67:83:48:ad:e7:76:44:46:51:c2:7d:4b:13:d7:91:61:df:
         1a:e7:56:ca:cb:22:e1:21:92:2c:63:b1:00:8b:64:30:f4:71:
         a5:2c:f3:56:03:5b:98:0a:07:03:40:1e:15:b7:e8:12:a1:1a:
         7f:f1:e5:5f:d2:1c:6a:b5:74:2f:c9:cd:47:8a:d6:2e:37:0a:
         e9:ce:b8:50:1b:59:eb:c8:a8:89:e1:d4:98:74:5c:8f:f5:34:
         36:50:d4:45:96:61:2c:55:fe:19:67:b2:88:02:6f:a1:dd:ab:
         41:46:18:2a:26:bd:ed:3d:82:f0:23:78:8d:a6:b3:7a:da:12:
         84:4d:04:1f:60:ce:39:3b:07:b8:60:77:85:d7:35:30:bd:95:
         bf:7e:e4:66:2a:ae:4b:64:31:4e:8e:7a:27:37:4f:9a:ca:7c:
         f0:81:66:5a:60:07:2c:c2:8c:07:05:df:a4:88:f8:13:8c:4e:
         db:f3:1a:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENie6SY+PyutF2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
NTQ0ODZiNWUtZTg4OC00ZjA3LTgzNzUtYmJiN2YyNWUzM2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCE3JL+CJDOmidpFKnmnGOfJj31mO0Az61vK
ec3pQrXz5glauoRZr9wFCC6BsLELYcVKK7fIMwf6kADCt1PJwGXdWLCkKzNGHejo
+zNPF9WPPCm127mkSpYYSzoDqB4EPykxNwhKIx6TD0fE0x5fiAyxHOMTJPLW+wIK
/ia91CpOyHEc3+we/E2BQgdTv1obXzpHj/ZCt+L6WXGTiMtECSE4l/5rVmmY7Fs3
0BjOJfD997l60ETqBM35FG9b8YjkgtOTrTSfLJiDekDmcn6SGmp9hZGS3p8hQofd
igy2tvQ2S14SI1Yzpt5UVfEqXva4pyNtHiEf0VLpSbhe3C2SzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPR7jNLCoHqXNi3fQR4RK+EwBNT0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjhmMzA0MzQtY2Q0NC0z
OWI1LTk3NjctZmQ1MGRiMDcxYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRavMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOUBACGRasdh3qlQQwk/qTVysZX6eTCG2f/6tTcoBwcIyiSlWuKuzWk
B9iwylTjasbsYWxig1yOQrIJaID0zKUJ3UblCajR+txng0it53ZERlHCfUsT15Fh
3xrnVsrLIuEhkixjsQCLZDD0caUs81YDW5gKBwNAHhW36BKhGn/x5V/SHGq1dC/J
zUeK1i43CunOuFAbWevIqInh1Jh0XI/1NDZQ1EWWYSxV/hlnsogCb6Hdq0FGGCom
ve09gvAjeI2ms3raEoRNBB9gzjk7B7hgd4XXNTC9lb9+5GYqrktkMU6Oeic3T5rK
fPCBZlpgByzCjAcF36SI+BOMTtvzGuc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:59 2026 by rpki-client