Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa
File:                     5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa (raw, json)
Hash identifier:          HQUjcB2hg4roH5TFPr4O8VOLnt92WFhDRWg6VbKvTtY=
Subject key identifier:   84:23:10:EA:A9:6C:F2:21:71:F8:6D:25:3C:38:E4:B5:33:84:A0:24
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620221A1B9E4818A8CABFD00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:21:a1:b9:e4:81:8a:8c:ab:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=2141f7d6-749d-4d03-8d4e-0b5dd8098198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:ed:e4:57:fd:23:53:bc:5f:10:f1:f8:04:
                    3e:ba:a2:9f:98:bd:10:11:75:90:30:06:c1:d9:c8:
                    7d:32:3e:91:a4:4a:7c:ba:7e:61:a2:cc:53:2a:f2:
                    8e:94:3a:94:1a:02:fa:2d:f7:da:08:ab:e8:80:24:
                    cb:b4:80:e7:48:88:fb:61:9e:9b:a4:ca:fa:b2:3c:
                    d8:bf:2c:00:f0:3a:d9:00:59:2c:53:fa:1a:13:b9:
                    fb:f7:6a:48:c6:c8:a4:81:36:7c:39:16:42:63:56:
                    3d:73:af:6d:1e:39:ab:b5:58:04:a4:dc:ab:62:77:
                    74:d2:d1:86:18:26:42:31:f5:fc:92:a9:59:56:3d:
                    53:c1:5b:ce:3b:2b:e4:fb:ae:7c:5c:74:57:fe:53:
                    3a:d7:97:06:99:34:91:1b:30:55:48:af:05:b6:86:
                    4b:6e:77:e4:a2:19:8e:c3:74:73:e5:50:72:9e:6c:
                    86:6c:b8:30:48:24:60:ff:a1:2e:3c:6d:2e:5d:1f:
                    95:8b:fb:cd:c9:e4:81:87:83:3c:d1:61:bc:48:91:
                    84:67:e8:87:b6:dd:bb:9c:67:e4:bb:5d:40:05:20:
                    bf:90:0b:79:73:80:79:71:8a:3c:ea:b7:f7:f4:74:
                    d4:31:e0:80:f9:5c:19:bc:ca:00:b3:29:04:02:9c:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:23:10:EA:A9:6C:F2:21:71:F8:6D:25:3C:38:E4:B5:33:84:A0:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:5e:62:3c:ad:b3:0f:49:f1:55:37:14:f8:62:bc:de:f5:81:
         68:2b:03:c4:4e:b2:b9:80:9d:a2:83:e4:1c:be:ff:2a:d8:f0:
         1a:b6:6b:b8:dd:39:fa:85:d1:50:74:51:1a:3d:46:ec:eb:a0:
         6f:e1:81:8b:71:87:03:05:b6:00:70:31:85:79:f2:14:aa:e9:
         f4:2f:44:3c:48:0a:8d:d4:20:06:a2:49:a5:3d:11:24:cb:32:
         e4:30:a6:7a:02:82:bb:48:15:71:1f:dc:65:e1:81:b7:c6:3b:
         43:11:58:37:e2:36:7c:61:ba:db:94:f6:41:0d:08:a7:d1:4b:
         fc:c4:84:e6:e0:48:5d:68:59:6a:b9:49:40:d6:7b:ec:ef:82:
         f1:bc:0a:2f:87:e3:f1:af:99:19:50:2c:3d:c8:b4:80:7b:81:
         22:2b:dc:9b:fa:57:72:77:72:68:c2:af:40:e7:9d:8e:63:39:
         7a:1e:49:e9:d4:95:8f:d0:7f:7b:0b:d6:c1:86:75:02:4e:96:
         44:b4:97:ac:3a:61:70:73:f4:0c:54:ab:6e:c0:f7:a6:66:ac:
         43:a8:25:2f:f6:a2:17:ce:c8:7a:52:fc:40:d9:71:41:fe:ef:
         90:69:a0:1d:a7:7c:a7:bf:2a:9c:7c:ec:60:dd:db:4a:11:ea:
         b7:a2:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:13 2025 by rpki-client