Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c7d02ad-9ffd-31b4-aee0-fac26bff27e9.roa
File:                     4c7d02ad-9ffd-31b4-aee0-fac26bff27e9.roa (raw, json)
Hash identifier:          niuIy6/B5RP0pkq893jSP7q8ctZBQT625czYWd/C/4o=
Subject key identifier:   64:38:01:FE:29:E5:74:B6:7A:82:FB:1C:B5:F9:B4:4F:35:41:97:90
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B63674C5F0B8E85B270049750
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c7d02ad-9ffd-31b4-aee0-fac26bff27e9.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        65.22.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4c:5f:0b:8e:85:b2:70:04:97:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=75b33883-a088-4ea6-95da-f6c38ef9dc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:ee:8c:1d:43:03:09:44:42:02:15:16:28:
                    a9:fa:d6:5d:f7:73:01:13:0d:39:7f:46:66:32:59:
                    54:88:40:ef:9a:df:6d:11:43:cf:70:4d:f2:8e:3d:
                    c4:02:2a:84:06:64:f2:53:ff:e2:d7:7a:46:f8:1e:
                    37:8e:d1:bb:79:c2:16:df:58:54:4e:06:d5:84:d5:
                    43:f9:56:a7:c8:8b:88:d1:33:38:6a:d3:a6:c9:77:
                    8a:78:fd:de:1e:35:cb:b7:df:e4:70:7a:9d:84:b1:
                    54:be:16:b6:a1:b7:c5:c5:0b:7e:be:3d:5f:06:9d:
                    b5:1b:f8:f1:57:fd:b4:3e:63:75:70:e1:32:d6:d9:
                    b3:f3:ab:08:a8:1e:3d:6a:8a:bc:6d:34:fe:2f:ad:
                    9e:06:db:a8:1f:c1:66:7c:26:4f:0a:ca:60:db:bd:
                    62:22:e8:50:6a:e7:c7:bf:29:dd:df:d6:da:dc:05:
                    f8:42:0a:40:b6:9b:d7:e9:d0:4f:f8:f4:56:66:57:
                    6b:09:34:67:f9:dd:60:47:af:d5:06:ff:09:09:e5:
                    2e:38:03:e5:3c:b2:e3:42:64:06:55:6b:12:f2:f1:
                    be:92:fc:41:33:0e:fb:6f:cf:da:4b:18:f0:c6:33:
                    28:9b:8b:4e:f2:8a:39:da:00:5a:53:86:94:3c:f9:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:38:01:FE:29:E5:74:B6:7A:82:FB:1C:B5:F9:B4:4F:35:41:97:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c7d02ad-9ffd-31b4-aee0-fac26bff27e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:31:cb:05:53:22:4b:f6:a7:6e:a5:5c:3a:16:77:a2:4b:ad:
         ab:c2:1d:5b:ba:75:f3:ad:9f:7b:22:aa:2d:fe:be:88:39:38:
         77:28:80:45:ee:e3:c2:1e:18:ff:d3:4b:cc:a0:05:3d:10:f8:
         c9:31:f8:79:6c:b4:23:96:29:77:35:d3:47:16:00:d0:8b:3a:
         96:2e:82:c5:89:9a:7f:3b:0d:4f:e8:09:7f:5b:5f:a5:c9:66:
         3e:c4:d7:23:87:3f:f5:70:7c:e2:0d:bc:bd:9f:85:bf:94:8b:
         76:84:6d:21:02:29:d1:5d:e9:82:fe:da:80:f0:d1:39:84:fb:
         62:ba:f7:05:6a:25:be:c0:fb:b8:35:aa:66:b2:f7:63:33:a5:
         97:7b:f1:8f:10:cc:61:f9:45:a6:a0:1f:38:ed:50:f5:71:f0:
         31:76:af:3b:51:0e:df:66:4b:19:f3:4a:87:b0:cc:e2:31:5f:
         bb:9d:64:51:be:4f:76:90:50:9b:81:a0:02:d7:70:83:d7:c2:
         a8:07:33:96:e3:e7:93:c3:9d:af:b3:68:8e:f4:95:1c:b0:ac:
         e5:15:2d:94:a1:e2:f2:c4:a3:fb:0d:43:23:5f:75:9d:28:74:
         a3:0f:ff:4c:22:b1:f2:66:3c:29:be:43:0b:a1:2c:9e:ad:d3:
         fd:6c:a6:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0xfC46FsnAEl1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
NzViMzM4ODMtYTA4OC00ZWE2LTk1ZGEtZjZjMzhlZjlkYzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQbujB1DAwlEQgIVFiip+tZd93MBEw05f0Zm
MllUiEDvmt9tEUPPcE3yjj3EAiqEBmTyU//i13pG+B43jtG7ecIW31hUTgbVhNVD
+VanyIuI0TM4atOmyXeKeP3eHjXLt9/kcHqdhLFUvha2obfFxQt+vj1fBp21G/jx
V/20PmN1cOEy1tmz86sIqB49aoq8bTT+L62eBtuoH8FmfCZPCspg271iIuhQaufH
vynd39ba3AX4QgpAtpvX6dBP+PRWZldrCTRn+d1gR6/VBv8JCeUuOAPlPLLjQmQG
VWsS8vG+kvxBMw77b8/aSxjwxjMom4tO8oo52gBaU4aUPPlE5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQ4Af4p5XS2eoL7HLX5tE81QZeQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGM3ZDAyYWQtOWZmZC0z
MWI0LWFlZTAtZmFjMjZiZmYyN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALQxywVTIkv2p26lXDoWd6JLravCHVu6dfOtn3siqi3+vog5OHcogEXu
48IeGP/TS8ygBT0Q+Mkx+HlstCOWKXc100cWANCLOpYugsWJmn87DU/oCX9bX6XJ
Zj7E1yOHP/VwfOINvL2fhb+Ui3aEbSECKdFd6YL+2oDw0TmE+2K69wVqJb7A+7g1
qmay92MzpZd78Y8QzGH5RaagHzjtUPVx8DF2rztRDt9mSxnzSoewzOIxX7udZFG+
T3aQUJuBoALXcIPXwqgHM5bj55PDna+zaI70lRywrOUVLZSh4vLEo/sNQyNfdZ0o
dKMP/0wisfJmPCm+QwuhLJ6t0/1spqM=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:13 2025 by rpki-client