Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa
File:                     3785b371-e802-3801-bd81-df056b6e23ae.roa (raw, json)
Hash identifier:          Xn4cpjaiPi3PjR6NHvMwZdcip9RmgyT59/5bfHYFyGw=
Subject key identifier:   45:75:98:89:3B:5F:6E:9E:C4:77:10:68:10:C6:BC:7E:1E:C4:24:43
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201FA07DC05C3E84F7E3720
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:fa:07:dc:05:c3:e8:4f:7e:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=4fb95bcb-6660-4f32-a97b-bf00a37006e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0d:32:56:71:dc:6d:d8:3c:d8:5e:cc:bf:b0:
                    36:7a:81:80:31:34:7e:df:f8:b4:cf:14:ee:5f:fe:
                    f6:42:45:2c:e6:68:97:26:74:e5:51:a5:78:07:cf:
                    92:4f:cc:2a:54:48:fc:b4:42:06:77:65:a0:0c:b9:
                    47:2d:b0:64:59:f9:2a:af:dc:d8:cc:92:a5:e7:fb:
                    90:79:91:4e:37:15:f8:55:b2:01:ab:fa:a4:bb:f6:
                    09:07:33:83:10:95:11:40:c0:9a:6e:4d:32:48:1c:
                    ab:01:74:34:25:38:9f:2b:9b:b5:a1:82:99:d0:c6:
                    77:7f:8a:c0:7b:87:8f:cd:26:ba:6f:08:b8:c6:3c:
                    8e:d3:f6:9a:3f:2b:3e:50:7e:3f:81:41:10:e2:67:
                    2f:13:05:ef:32:56:d5:e1:a5:ed:2f:b6:bd:9f:0c:
                    aa:ae:a1:3d:9a:70:48:68:2d:c8:9d:2d:91:93:75:
                    15:9a:1f:fd:11:b8:68:4c:94:cf:36:f8:f3:54:58:
                    42:68:1d:15:61:d9:10:98:7a:be:c1:84:73:5b:60:
                    a2:6f:ac:8e:a3:6c:58:9d:47:95:15:55:00:c3:95:
                    46:3b:ad:82:b0:5f:5e:79:b6:ae:cc:d1:3c:e0:75:
                    ce:05:b6:43:1a:30:dc:36:7c:e5:2d:c1:1b:cb:29:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:98:89:3B:5F:6E:9E:C4:77:10:68:10:C6:BC:7E:1E:C4:24:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fa:af:b5:e8:40:49:8c:26:96:5c:59:0c:8e:8c:88:39:6a:
         e3:92:55:b8:d5:24:e9:d4:31:79:46:ad:66:8f:ba:16:44:7c:
         bf:c6:00:c3:b7:41:51:01:6d:3b:cc:a5:b3:01:0d:89:92:f0:
         ea:1f:60:4b:00:82:b3:d2:97:fa:84:26:a4:43:0f:ac:1c:50:
         93:b1:13:b8:9f:f9:77:fb:f3:8d:99:1a:43:cd:ae:e7:ba:6f:
         20:84:e8:0d:55:23:09:bb:5c:05:27:64:b5:4b:72:f2:47:7b:
         8c:67:7b:32:59:f1:63:82:91:b0:c0:e0:4b:e5:02:6f:af:a2:
         01:57:0a:27:0a:9d:86:a2:7a:b5:83:2f:da:16:53:25:23:e2:
         ea:21:c9:f0:d5:ae:8b:ac:ed:a8:e0:bf:bd:51:c8:df:fa:9d:
         30:5d:59:e2:90:b0:84:36:66:21:cc:6c:2d:96:2a:92:12:c7:
         e8:92:50:21:0f:ae:8e:a6:67:fd:45:91:f7:fb:7a:1a:df:1e:
         8c:ad:7e:f7:ea:fd:23:89:a4:03:31:df:20:b5:81:31:5b:ba:
         57:51:16:7f:6a:91:f7:b7:a6:9e:63:72:4b:f0:af:61:d8:94:
         c8:e8:99:99:b2:e3:fb:d7:76:74:5b:87:ff:a9:d7:a2:87:ff:
         7c:76:1c:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfoH3AXD6E9+NyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NGZiOTViY2ItNjY2MC00ZjMyLWE5N2ItYmYwMGEzNzAwNmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg0yVnHcbdg82F7Mv7A2eoGAMTR+3/i0zxTu
X/72QkUs5miXJnTlUaV4B8+ST8wqVEj8tEIGd2WgDLlHLbBkWfkqr9zYzJKl5/uQ
eZFONxX4VbIBq/qku/YJBzODEJURQMCabk0ySByrAXQ0JTifK5u1oYKZ0MZ3f4rA
e4ePzSa6bwi4xjyO0/aaPys+UH4/gUEQ4mcvEwXvMlbV4aXtL7a9nwyqrqE9mnBI
aC3InS2Rk3UVmh/9EbhoTJTPNvjzVFhCaB0VYdkQmHq+wYRzW2Cib6yOo2xYnUeV
FVUAw5VGO62CsF9eebauzNE84HXOBbZDGjDcNnzlLcEbyykeNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEV1mIk7X26exHcQaBDGvH4exCRDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzc4NWIzNzEtZTgwMi0z
ODAxLWJkODEtZGYwNTZiNmUyM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJD6r7XoQEmMJpZcWQyOjIg5auOSVbjVJOnUMXlGrWaPuhZEfL/GAMO3
QVEBbTvMpbMBDYmS8OofYEsAgrPSl/qEJqRDD6wcUJOxE7if+Xf7842ZGkPNrue6
byCE6A1VIwm7XAUnZLVLcvJHe4xnezJZ8WOCkbDA4EvlAm+vogFXCicKnYaierWD
L9oWUyUj4uohyfDVrous7ajgv71RyN/6nTBdWeKQsIQ2ZiHMbC2WKpISx+iSUCEP
ro6mZ/1Fkff7ehrfHoytfvfq/SOJpAMx3yC1gTFbuldRFn9qkfe3pp5jckvwr2HY
lMjomZmy4/vXdnRbh/+p16KH/3x2HBY=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:27 2025 by rpki-client