Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fadcf9f5-7166-3777-b729-e2bb956b4084.roa
File:                     fadcf9f5-7166-3777-b729-e2bb956b4084.roa (raw, json)
Hash identifier:          kL6Y5rHF8gDhnAgFeVsezYGGgAxQKzu/bHXPUqul+OE=
Subject key identifier:   5A:FC:16:1D:FE:C8:0C:1F:1B:0C:B6:75:1D:79:1C:5E:65:8E:C3:05
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E04361B0DD948D9AA69407400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fadcf9f5-7166-3777-b729-e2bb956b4084.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     12041
IP address blocks:        65.22.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:1b:0d:d9:48:d9:aa:69:40:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=3fa52faf-4627-4abf-afad-17087f5adbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:4b:df:12:11:b6:d6:ad:56:f3:ee:d7:45:
                    ba:23:85:01:5d:d5:2b:08:1f:3c:2b:33:79:38:92:
                    8a:0d:ba:80:f0:8d:46:ef:55:42:c4:d0:64:f4:34:
                    2b:e5:25:0e:a7:89:3f:2f:9a:16:8b:82:30:8f:8e:
                    d6:39:16:94:f7:31:35:93:46:29:db:bb:79:49:7e:
                    b1:f6:2d:96:19:70:41:76:b2:2b:c6:a0:42:e6:36:
                    2d:e3:e4:c4:b1:e7:c2:3c:d9:2d:7e:28:20:9c:83:
                    d1:7b:81:98:0a:ad:ce:38:35:12:40:11:4b:7a:e9:
                    50:c6:83:83:71:08:8e:1b:97:2d:7b:be:ff:4a:f9:
                    cf:ce:d1:49:f8:49:9f:d7:7e:aa:e8:f0:e8:12:f1:
                    be:b2:d8:ba:f1:ce:50:7a:57:8a:a1:6e:7b:92:73:
                    c1:32:4e:5f:9a:24:0c:22:99:27:6e:15:70:3a:77:
                    1f:d6:b5:6f:d8:6d:f2:50:7a:5e:3b:9b:ce:ba:32:
                    6c:a0:d9:5c:87:15:e5:c5:86:e9:00:47:e8:5e:46:
                    1b:eb:e5:c2:26:b0:fd:8d:f5:45:15:a5:e9:c6:c7:
                    09:8f:4c:12:d7:40:96:f2:d5:0e:db:fc:22:78:ff:
                    72:88:d9:43:e6:89:76:c6:34:9d:91:42:34:1a:35:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FC:16:1D:FE:C8:0C:1F:1B:0C:B6:75:1D:79:1C:5E:65:8E:C3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fadcf9f5-7166-3777-b729-e2bb956b4084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:55:7c:b0:d0:c9:56:8a:5d:70:45:94:34:49:a2:92:7e:
         15:d3:f5:2f:bc:af:3d:0a:a1:b7:bb:4b:44:6d:56:10:9a:75:
         bd:43:78:7d:34:9c:7c:05:09:17:36:1e:e7:61:ee:f5:ad:98:
         0f:a1:81:8f:5d:b1:d4:10:17:fd:80:26:3d:0b:16:66:1b:12:
         e7:ab:b4:45:f1:a3:cd:9c:f1:f6:a8:54:3d:12:7c:4e:eb:63:
         5a:e8:e5:a8:05:a0:fc:8d:ca:52:da:32:d0:ff:ef:fe:a9:00:
         b8:e5:75:5b:50:c8:47:7c:17:58:62:17:c7:80:31:06:05:fa:
         5f:98:11:c9:13:4e:3f:48:52:e6:b7:05:22:62:af:50:37:32:
         ab:81:86:95:23:d6:5e:1e:29:85:eb:64:af:b5:9d:ca:ec:78:
         ab:dc:2d:4b:0f:b2:05:a2:2d:88:75:f1:20:5d:dc:28:e9:19:
         75:11:48:20:7d:f4:2c:35:c3:03:c2:be:45:2e:76:c4:0a:68:
         7a:45:3d:ee:6e:66:f4:99:c5:24:b2:dd:f5:b2:14:69:02:37:
         10:95:c7:4e:fa:15:8e:8a:2e:32:d5:83:05:2d:4a:f5:ef:07:
         f7:fd:cb:d3:ff:b7:21:35:f0:89:f6:76:4d:4f:45:11:f8:46:
         8b:e8:e2:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhsN2UjZqmlAdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
M2ZhNTJmYWYtNDYyNy00YWJmLWFmYWQtMTcwODdmNWFkYmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVhL3xIRttatVvPu10W6I4UBXdUrCB88KzN5
OJKKDbqA8I1G71VCxNBk9DQr5SUOp4k/L5oWi4Iwj47WORaU9zE1k0Yp27t5SX6x
9i2WGXBBdrIrxqBC5jYt4+TEsefCPNktfiggnIPRe4GYCq3OODUSQBFLeulQxoOD
cQiOG5cte77/SvnPztFJ+Emf136q6PDoEvG+sti68c5QeleKoW57knPBMk5fmiQM
IpknbhVwOncf1rVv2G3yUHpeO5vOujJsoNlchxXlxYbpAEfoXkYb6+XCJrD9jfVF
FaXpxscJj0wS10CW8tUO2/wieP9yiNlD5ol2xjSdkUI0GjUMrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFr8Fh3+yAwfGwy2dR15HF5ljsMFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmFkY2Y5ZjUtNzE2Ni0z
Nzc3LWI3MjktZTJiYjk1NmI0MDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+CVXyw0MlWil1wRZQ0SaKSfhXT9S+8rz0Kobe7S0RtVhCadb1DeH00
nHwFCRc2Hudh7vWtmA+hgY9dsdQQF/2AJj0LFmYbEuertEXxo82c8faoVD0SfE7r
Y1ro5agFoPyNylLaMtD/7/6pALjldVtQyEd8F1hiF8eAMQYF+l+YEckTTj9IUua3
BSJir1A3MquBhpUj1l4eKYXrZK+1ncrseKvcLUsPsgWiLYh18SBd3CjpGXURSCB9
9Cw1wwPCvkUudsQKaHpFPe5uZvSZxSSy3fWyFGkCNxCVx076FY6KLjLVgwUtSvXv
B/f9y9P/tyE18In2dk1PRRH4Rovo4nk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:07 2026 by rpki-client