Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73dc356f-dcaa-3b77-84bc-e888d9cb613f.roa
File:                     73dc356f-dcaa-3b77-84bc-e888d9cb613f.roa (raw, json)
Hash identifier:          oJb8S74NcIkwwEDbAUjqgh/Tce522ihnuigCgp86mQQ=
Subject key identifier:   02:20:33:25:17:4F:D5:D0:8F:A2:3D:37:9D:4E:E2:96:80:D5:C7:F2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201D2267A32BDC94F132EC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73dc356f-dcaa-3b77-84bc-e888d9cb613f.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:d2:26:7a:32:bd:c9:4f:13:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=b01ebed6-343f-4c0a-a504-294895f6b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:79:99:40:aa:c8:1b:2c:1a:09:75:6c:45:
                    40:f9:87:79:37:07:18:94:de:ac:b2:95:76:45:7f:
                    94:7a:c3:af:66:74:07:fd:90:e0:cf:e3:b4:3c:1b:
                    28:22:46:1a:5a:69:fb:86:da:11:59:43:30:ae:e1:
                    de:fd:48:78:62:86:f6:53:a9:9d:4a:10:5b:fc:f9:
                    be:67:76:27:71:05:fe:13:52:3c:ba:a4:1a:24:ab:
                    95:d3:30:85:78:f3:37:77:79:f3:f2:86:f3:56:0c:
                    53:fb:6c:f7:ac:b9:12:2f:80:08:e8:26:4b:06:60:
                    7b:4d:35:cc:d8:d3:f4:a5:e0:72:5f:17:41:9f:95:
                    ba:fa:39:2f:6d:6d:24:ed:95:b9:dd:32:09:fe:dc:
                    c6:23:05:0a:a3:71:e9:a6:85:d2:e3:54:9c:08:6c:
                    4f:76:0f:84:f7:bd:a0:43:48:d7:9e:eb:0f:0a:ab:
                    6d:44:29:35:79:96:ad:e5:85:7b:08:36:cb:da:3a:
                    23:2a:7e:40:18:bc:1c:72:f4:a1:80:12:98:b2:11:
                    0e:c0:34:84:e4:cf:24:d1:07:2b:36:e9:cb:fc:88:
                    31:b7:dd:56:83:e8:56:92:6c:9e:d1:db:13:f5:69:
                    26:66:71:47:96:d9:e9:63:66:63:d3:d2:a3:4d:a7:
                    4c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:20:33:25:17:4F:D5:D0:8F:A2:3D:37:9D:4E:E2:96:80:D5:C7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73dc356f-dcaa-3b77-84bc-e888d9cb613f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9f:90:44:52:bd:99:a5:80:7c:c3:03:f3:4b:a0:49:3c:2c:
         ae:f7:a4:49:26:4d:0b:13:0a:c6:bc:65:08:e8:2d:4f:d0:af:
         05:28:76:b7:55:e5:e8:00:7a:4b:6a:7b:a0:8c:9e:f9:59:c6:
         5b:0a:9f:0a:b7:75:96:e8:b7:62:d6:09:b4:b3:c2:32:0d:56:
         b7:b6:48:42:dd:33:74:ab:5d:64:3d:76:22:b6:9d:96:72:c6:
         3e:4a:35:63:66:ed:a3:7b:42:c4:69:e9:9f:d6:1d:12:b8:30:
         11:1a:26:1d:fc:90:6d:73:a2:1c:16:1e:87:3d:82:e8:e5:a2:
         2f:55:f8:76:9f:a2:ab:27:40:a4:a9:12:cc:99:a6:54:02:78:
         15:da:18:65:d7:db:e1:cf:a1:51:c3:9c:96:44:ac:6d:aa:b0:
         24:a5:29:73:3f:de:93:e2:4b:d3:41:3d:8e:9f:c5:d9:72:e4:
         d0:88:77:d5:86:63:2b:59:22:62:bc:18:9a:74:82:e6:86:d3:
         93:a7:18:df:bd:97:35:05:01:9b:af:bd:9d:3e:14:fa:80:90:
         eb:7a:79:e2:66:aa:d7:c3:8e:80:b6:6d:21:f9:ae:71:35:a1:
         64:0b:b6:ad:f9:a6:8d:34:ca:3a:d7:80:50:61:58:45:a0:33:
         07:01:a9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:49 2025 by rpki-client