Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa
File:                     17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa (raw, json)
Hash identifier:          BPyiq3g41HY1XZAMUzj2x6gtQ+DsMLn1aeKCTWr0nAU=
Subject key identifier:   29:C8:FF:90:46:E9:67:67:CF:0F:08:B8:15:AE:6A:FE:F9:A3:2D:F2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6202388D6B68F7085DEF6F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:38:8d:6b:68:f7:08:5d:ef:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=7ad216f4-577e-47d5-9650-9e5b148ff2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:36:65:3b:83:fc:7e:a7:71:58:b7:65:00:
                    5c:72:8b:c6:8f:b4:24:4f:6d:ac:2e:35:08:9e:3e:
                    a6:04:e4:21:b5:2b:ad:9e:bc:e0:bd:35:d9:3c:7e:
                    9f:47:f1:83:9d:68:7b:7a:f1:a2:29:02:e6:8a:84:
                    44:d5:15:3f:f6:84:1d:eb:4b:1b:72:6d:7f:53:e0:
                    6c:28:38:7f:64:35:51:d3:8f:0a:7d:94:f4:fd:ca:
                    47:13:57:5f:f4:53:d3:41:f0:cf:c6:ee:f8:37:c5:
                    ec:e6:93:fe:75:50:60:4c:43:2c:21:bb:69:dc:b7:
                    96:ee:d2:86:2e:dd:4d:09:fd:34:da:08:45:75:c7:
                    d6:95:73:57:94:5f:3e:fc:ea:cb:04:94:da:6e:ed:
                    a0:a0:9c:be:7c:76:6d:02:f1:dd:98:0f:dd:8a:7d:
                    cb:df:41:24:9d:ca:8b:54:bf:06:ae:cd:a0:6c:1f:
                    f5:0b:d8:64:ea:b1:2d:02:68:db:b3:85:3a:41:da:
                    fe:14:17:c3:cd:65:68:b1:79:3f:13:66:bc:9c:ea:
                    0a:0b:68:cd:38:8c:c0:00:01:e5:2b:16:04:0b:6c:
                    2a:b1:c6:b5:87:8e:8c:7c:2f:9e:1d:8e:aa:14:60:
                    e2:f7:8e:09:06:2c:77:35:5f:60:42:a6:c2:75:2e:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C8:FF:90:46:E9:67:67:CF:0F:08:B8:15:AE:6A:FE:F9:A3:2D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d4:b4:36:f3:79:80:c8:ca:af:94:dd:36:98:9a:88:63:2d:
         85:b9:5b:9a:15:81:59:7d:93:fc:70:7d:80:5f:0a:86:1e:85:
         19:cf:e2:4d:8f:17:97:ee:98:d7:5b:65:04:e8:e9:07:df:0d:
         fb:3e:a1:bc:a6:0a:5b:d0:09:99:13:b3:9b:19:6b:87:3d:b3:
         11:60:82:2d:da:05:0d:74:aa:a9:64:be:3b:a7:2f:c8:72:a6:
         b0:71:5b:df:2c:cb:f4:45:98:fd:e2:5b:51:ac:3e:04:46:53:
         bb:ad:3d:c1:7c:97:13:27:03:3d:72:f4:5e:dc:40:3e:d0:04:
         8a:f9:ed:ec:8e:b8:52:ee:26:88:53:5e:5f:65:bc:15:96:8b:
         39:6b:7c:f6:1c:65:99:7c:40:4d:c8:f5:53:2a:7b:e0:61:34:
         12:03:6b:e2:a9:fb:44:a2:6e:2a:a8:47:af:53:5f:02:8b:62:
         a4:61:f6:e9:8f:7a:7f:32:58:a3:a4:eb:0b:47:bc:12:a7:e4:
         33:3b:37:37:5e:14:f9:4d:db:4d:28:76:83:54:e7:7e:92:ef:
         ba:14:93:10:a5:47:6c:d8:a8:74:1c:18:0e:7c:b0:88:7b:d9:
         55:dd:e2:db:69:e8:f2:99:1a:43:3e:1e:24:cb:a7:8d:14:c5:
         ce:f1:aa:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjiNa2j3CF3vbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
N2FkMjE2ZjQtNTc3ZS00N2Q1LTk2NTAtOWU1YjE0OGZmMmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VU2ZTuD/H6ncVi3ZQBccovGj7QkT22sLjUI
nj6mBOQhtSutnrzgvTXZPH6fR/GDnWh7evGiKQLmioRE1RU/9oQd60sbcm1/U+Bs
KDh/ZDVR048KfZT0/cpHE1df9FPTQfDPxu74N8Xs5pP+dVBgTEMsIbtp3LeW7tKG
Lt1NCf002ghFdcfWlXNXlF8+/OrLBJTabu2goJy+fHZtAvHdmA/din3L30EkncqL
VL8Grs2gbB/1C9hk6rEtAmjbs4U6Qdr+FBfDzWVosXk/E2a8nOoKC2jNOIzAAAHl
KxYEC2wqsca1h46MfC+eHY6qFGDi944JBix3NV9gQqbCdS6uHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnI/5BG6Wdnzw8IuBWuav75oy3yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTdhY2I5ZTUtNGUzMC0z
NDhhLTg5YjktZWE0MWFjMWJjNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvUtDbzeYDIyq+U3TaYmohjLYW5W5oVgVl9k/xwfYBfCoYehRnP4k2P
F5fumNdbZQTo6QffDfs+obymClvQCZkTs5sZa4c9sxFggi3aBQ10qqlkvjunL8hy
prBxW98sy/RFmP3iW1GsPgRGU7utPcF8lxMnAz1y9F7cQD7QBIr57eyOuFLuJohT
Xl9lvBWWizlrfPYcZZl8QE3I9VMqe+BhNBIDa+Kp+0SibiqoR69TXwKLYqRh9umP
en8yWKOk6wtHvBKn5DM7NzdeFPlN200odoNU536S77oUkxClR2zYqHQcGA58sIh7
2VXd4ttp6PKZGkM+HiTLp40Uxc7xqo0=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:22 2025 by rpki-client