Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa
File:                     298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa (raw, json)
Hash identifier:          iUQmEfL3r8FGOK0PV5C2HZHrprcyAjuJ+e6lIRdVwwc=
Subject key identifier:   B6:B4:FD:14:33:28:DC:6C:88:94:04:97:A7:3B:1E:4C:15:8B:30:5B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201FCAFAC6FFA4ECA123C00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:fc:af:ac:6f:fa:4e:ca:12:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=4931edb0-f9bc-4423-a64c-2c7b953c7f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:93:22:14:10:2c:3a:03:84:2e:72:a4:92:
                    97:fc:25:8c:18:06:ce:4a:d0:bc:77:2b:11:63:22:
                    0a:11:8f:8d:72:bb:0e:2f:92:5d:04:a8:f3:73:83:
                    be:f0:d4:17:83:1e:f7:86:92:d2:f5:0a:54:93:7f:
                    f8:74:b2:71:2c:d5:8d:75:92:e7:f1:72:b4:97:56:
                    ae:14:de:65:05:55:94:ec:30:05:34:f7:78:cb:30:
                    f0:a8:17:48:f8:dd:5e:3c:b1:ee:a8:b4:41:a5:d6:
                    19:59:1e:86:94:07:f4:96:4b:1e:97:f1:c6:5d:a3:
                    47:f6:08:a6:74:f9:87:ff:24:ed:94:06:8c:8d:39:
                    ba:b4:82:48:82:61:f5:cc:ad:4d:c8:d1:c1:af:74:
                    80:17:02:bd:9c:52:5d:a9:e2:14:59:90:0e:16:b6:
                    aa:ba:06:1a:fe:0b:e6:7b:2a:77:c7:a2:5c:3f:7d:
                    2f:8f:c7:aa:f6:06:a2:89:ec:9d:5a:65:d1:2e:29:
                    06:09:2b:88:e1:cc:01:05:b2:0b:ef:9b:6f:04:73:
                    c1:74:49:9e:50:be:67:e3:2c:0b:06:d3:aa:2e:74:
                    d9:d6:b7:28:10:f2:ee:09:b7:91:14:a0:3d:55:28:
                    e1:71:99:60:9d:01:f5:01:79:0a:a8:2b:f4:79:51:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B4:FD:14:33:28:DC:6C:88:94:04:97:A7:3B:1E:4C:15:8B:30:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:21:6b:8d:fb:03:f8:bc:90:ad:9b:2a:bc:2e:37:7b:95:be:
         2f:9a:c6:a3:74:5d:7a:cc:26:4e:89:7c:2d:68:3e:db:68:fb:
         f1:8c:8d:1b:08:75:25:1d:68:0d:02:aa:c8:18:6e:6a:6c:20:
         99:ab:2e:58:9a:33:a1:15:b7:58:9e:b6:6f:c9:13:2f:fd:28:
         6f:8d:a2:f2:09:05:87:95:e8:9e:8e:b6:96:dd:d5:99:28:ab:
         2a:3f:03:70:e1:5c:fb:d1:0c:ee:ef:ec:1b:19:ca:51:ed:e5:
         f9:8a:58:ac:ad:01:d3:6e:7b:c1:50:07:3e:03:4b:93:70:b4:
         27:8e:15:73:de:68:20:62:eb:47:63:32:25:e1:ae:72:7c:f3:
         b9:e6:06:0f:f8:8e:a6:4b:ef:cf:1d:65:b0:b9:de:d8:cc:d8:
         ff:e9:a5:f6:2c:83:83:be:57:41:9e:d5:0c:ad:24:56:59:da:
         23:8a:bc:b7:b3:73:43:66:67:d0:69:87:af:59:f0:07:fe:de:
         d5:83:2c:3d:de:4e:b9:c6:9e:ca:ea:6d:5d:e6:a5:99:db:34:
         1d:fe:58:f1:b2:3b:b2:b2:49:20:27:dc:fa:04:db:03:d1:bc:
         4e:b0:c1:61:10:78:ef:a2:27:99:64:ba:8b:25:58:78:94:99:
         1f:55:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:08:00 2025 by rpki-client