Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa
File:                     1a455cc3-9abe-3dad-95d6-93b7407f4803.roa (raw, json)
Hash identifier:          L5QTHxiH5p7NfEQLldPxGCyfbPUE9r3/zHnvVnRBcWU=
Subject key identifier:   E1:97:E7:B8:C8:7D:CF:4F:56:12:40:9E:72:AD:9F:23:80:F6:8F:CB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201E4CE6A12D3A3785DDD00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e4:ce:6a:12:d3:a3:78:5d:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=76384c77-1387-4f23-87cb-4f4bc4ca5bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:ab:7c:a8:0c:00:7c:ef:2e:d8:ec:7d:24:
                    c5:31:1e:3d:e1:2d:8c:cd:79:79:ce:06:85:10:52:
                    e2:c4:36:53:05:49:86:79:ef:42:f1:03:f4:83:3a:
                    47:57:3a:39:ee:ee:18:c3:ed:ac:f5:eb:52:a9:72:
                    9a:46:36:10:9f:65:f9:05:b3:57:7a:3f:12:33:b1:
                    5e:46:47:20:33:d4:64:3a:07:21:86:6a:d4:9e:0d:
                    7d:44:45:41:29:39:36:f3:08:1e:58:fb:28:81:25:
                    18:d5:53:e9:36:0a:42:2d:50:db:ba:19:20:92:b5:
                    38:34:1f:96:1d:e9:d8:49:4a:92:b8:61:2a:60:12:
                    4b:ea:e8:02:70:1b:a2:13:4f:65:bf:9e:a8:8e:51:
                    44:f8:c0:06:69:f9:44:72:8c:61:cc:77:84:4a:ca:
                    5b:8a:59:34:9b:bf:88:ee:46:89:9f:ce:75:7e:5a:
                    8e:20:fc:e2:90:6f:c7:96:0c:cf:a4:ee:71:4b:24:
                    48:17:be:9f:d7:84:47:93:2a:67:21:0a:45:1a:5a:
                    35:98:e4:5b:ef:f1:33:6c:c8:bc:d4:ca:14:e6:d8:
                    dd:1b:99:d3:cf:a7:a6:3a:af:4d:f2:b8:1f:e6:54:
                    c4:ea:58:f7:fc:ab:6c:e2:58:03:b1:62:1c:bf:f0:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:97:E7:B8:C8:7D:CF:4F:56:12:40:9E:72:AD:9F:23:80:F6:8F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:df:ac:23:a9:85:81:e6:60:79:6c:00:d6:a4:88:72:b5:
         18:47:b7:cd:6a:78:36:ff:54:97:5a:81:cb:6e:74:3a:b5:5b:
         6c:42:07:3b:f9:e6:57:86:8f:12:fc:8a:7d:3a:14:38:00:56:
         6c:c5:da:81:0a:c1:5f:db:f8:ad:31:f6:4c:5f:70:dd:73:63:
         63:82:47:d6:4d:f5:0d:78:1c:58:6f:08:6d:d1:e4:a8:70:53:
         5b:7e:de:82:61:21:0e:55:eb:66:19:37:91:b1:6b:40:2b:70:
         a8:28:e5:0e:45:11:23:67:f1:55:e8:09:64:c7:f4:4d:60:e5:
         92:4b:d4:fe:9d:d2:e7:a7:c1:01:e3:f9:97:64:1c:33:ef:7a:
         3d:09:f0:98:94:72:d8:4d:13:36:6e:c4:d7:63:5b:1b:ea:d0:
         fa:a7:69:5a:7f:cc:77:65:12:e7:75:a9:14:b3:20:b2:6a:d3:
         91:05:f3:8a:3f:21:96:6c:82:5d:f0:e0:95:66:38:91:c0:29:
         f9:91:41:3f:29:ea:1a:0b:b2:ca:96:14:cd:90:27:33:31:66:
         bc:9d:64:45:9c:d1:8e:35:6e:3d:41:55:2e:e1:0c:de:70:d9:
         90:d7:c0:ac:97:63:1f:77:5b:ac:01:d2:92:63:bb:6a:0a:28:
         a8:c4:3f:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeTOahLTo3hd3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NzYzODRjNzctMTM4Ny00ZjIzLTg3Y2ItNGY0YmM0Y2E1YmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNCrfKgMAHzvLtjsfSTFMR494S2MzXl5zgaF
EFLixDZTBUmGee9C8QP0gzpHVzo57u4Yw+2s9etSqXKaRjYQn2X5BbNXej8SM7Fe
RkcgM9RkOgchhmrUng19REVBKTk28wgeWPsogSUY1VPpNgpCLVDbuhkgkrU4NB+W
HenYSUqSuGEqYBJL6ugCcBuiE09lv56ojlFE+MAGaflEcoxhzHeESspbilk0m7+I
7kaJn851flqOIPzikG/HlgzPpO5xSyRIF76f14RHkypnIQpFGlo1mORb7/EzbMi8
1MoU5tjdG5nTz6emOq9N8rgf5lTE6lj3/Kts4lgDsWIcv/BU5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGX57jIfc9PVhJAnnKtnyOA9o/LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWE0NTVjYzMtOWFiZS0z
ZGFkLTk1ZDYtOTNiNzQwN2Y0ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAov36wjqYWB5mB5bADWpIhytRhHt81qeDb/VJdagctudDq1W2xCBzv5
5leGjxL8in06FDgAVmzF2oEKwV/b+K0x9kxfcN1zY2OCR9ZN9Q14HFhvCG3R5Khw
U1t+3oJhIQ5V62YZN5Gxa0ArcKgo5Q5FESNn8VXoCWTH9E1g5ZJL1P6d0uenwQHj
+ZdkHDPvej0J8JiUcthNEzZuxNdjWxvq0PqnaVp/zHdlEud1qRSzILJq05EF84o/
IZZsgl3w4JVmOJHAKfmRQT8p6hoLssqWFM2QJzMxZrydZEWc0Y41bj1BVS7hDN5w
2ZDXwKyXYx93W6wB0pJju2oKKKjEP2s=
-----END CERTIFICATE-----
Generated at Sat Oct 11 05:55:26 2025 by rpki-client