Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53c8bb09-258f-32ba-bd29-d616ef1872d8.roa
File:                     53c8bb09-258f-32ba-bd29-d616ef1872d8.roa (raw, json)
Hash identifier:          19+M5CL3pxs4OYZcNSpOOwzyEHsFi9AT29ahh+SR4ec=
Subject key identifier:   0D:1E:B1:CC:3F:D4:10:37:03:34:A5:B1:2D:09:41:97:8E:74:27:0E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201E43F4321509A5F94DAE8
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53c8bb09-258f-32ba-bd29-d616ef1872d8.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e4:3f:43:21:50:9a:5f:94:da:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=24adc2fe-23fa-4231-80f4-5deb64587939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:e0:18:90:82:b3:76:ba:61:8d:35:60:42:
                    b6:a4:6c:8e:14:41:7a:38:18:de:25:4d:80:29:6f:
                    3d:d6:5b:ef:a0:00:c9:c1:94:b1:43:1b:e1:31:a8:
                    23:13:f4:11:6e:b0:4f:57:99:0e:23:c6:3c:48:08:
                    d6:07:99:6f:88:59:f2:28:c5:d3:d4:91:27:b3:39:
                    da:ae:2c:d1:6a:38:a6:3a:2d:12:d8:ef:45:8b:7c:
                    ca:c3:31:d5:bf:41:a4:9b:61:60:21:f7:f3:ad:5b:
                    09:32:8f:c1:6e:81:94:26:92:14:b8:96:9f:ca:13:
                    70:53:5b:0a:c7:2f:2d:c7:fc:db:a5:45:d1:03:52:
                    4a:5a:20:89:32:f2:b0:6c:9e:e3:08:43:ab:09:20:
                    a9:2f:e1:29:f9:9b:9c:74:44:8b:89:d5:1d:98:a7:
                    ac:69:51:23:78:ea:87:89:81:2d:6b:ae:bd:f1:44:
                    9f:2d:ad:f2:51:ae:0e:23:22:a8:ec:0c:42:4a:a4:
                    ed:62:31:51:87:e0:0c:37:29:19:ec:2f:bf:9d:0f:
                    88:2f:39:da:de:57:e3:a1:74:25:d4:a1:a3:0c:63:
                    b8:f8:0a:d8:a8:9d:92:6d:d4:cb:27:8b:65:14:07:
                    6d:b1:8c:d6:72:ba:24:2e:99:ca:ef:76:4d:1a:3f:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1E:B1:CC:3F:D4:10:37:03:34:A5:B1:2D:09:41:97:8E:74:27:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53c8bb09-258f-32ba-bd29-d616ef1872d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:8b:05:ad:a5:b7:63:31:81:52:4e:db:93:e7:bc:e7:a4:a2:
         06:6f:09:54:7e:97:aa:09:a0:b2:88:f0:fd:04:28:38:53:9b:
         d1:87:dd:74:ad:c3:90:07:96:e4:50:87:67:79:5d:a1:6c:66:
         c2:1d:31:be:39:aa:f1:60:88:b1:95:2b:ef:7b:3a:10:02:9a:
         fd:f9:aa:b4:22:b3:d7:d2:7a:7d:f3:c7:d4:f1:0c:71:ca:a0:
         59:f9:2d:56:d4:06:26:d0:b1:4d:b4:0e:f3:7c:78:1e:04:f0:
         38:05:44:22:91:99:b0:9a:1e:4c:de:80:f9:33:cc:2e:f7:2c:
         14:bb:84:85:c4:42:49:48:0a:74:f0:9b:77:5d:ca:ea:ae:96:
         bf:d8:62:3d:46:11:2a:22:33:42:38:0a:13:e7:7b:2d:fc:f4:
         5d:03:82:8a:1f:ae:3f:76:9d:50:ac:43:d7:f8:83:ea:1b:bb:
         74:9f:49:d2:6b:8c:32:59:ca:bc:2f:5a:83:79:94:e0:46:41:
         6e:17:c1:a4:cd:bf:0f:31:de:59:15:b3:df:d4:ad:c0:85:94:
         2b:b1:59:aa:37:68:8a:85:20:5a:d2:b2:32:d2:34:28:f3:95:
         e9:f2:25:e4:16:66:90:c1:71:55:11:6d:e2:50:d6:ec:9f:0d:
         61:80:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:10 2025 by rpki-client