Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa
File:                     7b10ad56-19b4-3d60-97da-19aa34d4c863.roa (raw, json)
Hash identifier:          UZeSOV+39UPNYM98ioEcA+fsshOE98PpEe0WnnyD/tI=
Subject key identifier:   5B:34:BD:9D:2F:1C:9A:B2:BF:9B:19:06:C7:FB:31:86:89:83:1E:D5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6202153F7E10A02D12EC55C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:15:3f:7e:10:a0:2d:12:ec:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=7693e503-495d-415b-9999-1f3022e2bc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:8c:47:f1:2f:ed:18:b0:69:fb:75:e0:e3:
                    b9:5f:6b:97:a7:71:a6:f9:1b:34:02:8c:c7:3c:ae:
                    b7:e7:11:4a:d5:8b:ba:e2:e9:e6:08:9c:93:93:cf:
                    82:35:e1:b0:04:0f:f6:4e:d3:4e:d1:c6:26:4e:40:
                    e6:c0:f4:e0:55:b5:3e:ed:3d:1d:10:ca:a7:f0:95:
                    c0:81:0e:11:80:07:b0:61:e0:d4:82:16:07:54:16:
                    33:48:82:86:5c:65:56:a4:ee:b0:91:4d:9d:e7:dc:
                    5b:dd:14:4f:61:8f:30:f4:6a:29:61:86:6e:38:10:
                    ea:4f:30:67:88:f2:7c:67:ba:f0:15:ab:79:37:eb:
                    b7:7e:3e:36:8f:1e:fc:59:d8:a4:0d:c0:26:b8:6d:
                    df:70:73:cd:4b:d7:1c:52:74:c1:3e:12:3d:af:b7:
                    8a:fc:ef:22:d1:0f:33:38:5f:15:3e:0a:f3:c5:c1:
                    e5:bd:56:a1:1e:bc:ee:fa:0d:03:31:61:9f:e7:9d:
                    c9:33:e0:2b:38:f6:08:fd:a4:58:8d:e1:d1:a8:9f:
                    6b:5a:bb:21:01:1e:41:b8:b5:31:2f:68:35:fd:35:
                    a6:e6:f4:d3:b8:99:c3:bd:a5:aa:11:99:ed:47:90:
                    f0:41:e8:8e:60:64:c0:dd:9b:0b:27:4d:10:91:67:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:34:BD:9D:2F:1C:9A:B2:BF:9B:19:06:C7:FB:31:86:89:83:1E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:be:40:6a:f2:4a:5b:b9:60:ee:97:81:a8:a4:ce:71:e5:9b:
         fd:ca:40:b3:58:91:c7:51:4a:f7:8d:d5:7d:0e:b7:88:70:fa:
         b6:f6:40:a6:4c:a4:91:ff:74:2e:07:46:7d:5e:28:ef:db:8f:
         93:d1:5e:38:17:8d:cf:e8:af:03:15:28:06:0f:9c:6d:33:ce:
         77:f8:8a:fb:6f:5d:52:87:39:25:18:36:64:37:d6:65:38:f7:
         42:df:8c:d0:40:e5:6e:39:9b:9d:7e:8c:ac:89:b5:27:8e:40:
         cf:a5:5d:6d:fb:e9:f0:fd:f4:c2:15:06:a5:fb:62:ec:30:1a:
         1b:e2:8f:5b:88:b7:50:1d:c7:dc:cb:fd:d5:2c:b5:dc:53:25:
         c3:39:a5:2c:36:4f:f4:0e:f5:dc:bc:9a:3e:68:a4:5b:f4:66:
         99:a0:bb:dd:72:42:ab:72:ca:bd:05:9c:4e:ee:ac:2d:25:5e:
         2c:fb:35:36:ae:cb:6a:52:0e:20:04:dd:15:66:ce:c3:82:e5:
         56:d6:c2:86:65:44:98:7e:63:46:eb:3d:16:35:9d:d7:31:74:
         0e:9a:97:cb:33:a9:57:3d:b0:04:df:b3:5d:62:4d:b8:79:56:
         3b:7b:8f:d7:e3:67:6d:c7:ae:ac:b7:05:5c:c8:41:1c:0a:cf:
         10:bb:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:16:35 2025 by rpki-client