Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa
File:                     aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa (raw, json)
Hash identifier:          xahlFkn/pkgEPR90pzsE3HCKIUviMmQjS05MsgMRpik=
Subject key identifier:   E1:C7:F5:C9:5D:6D:0B:5A:05:8C:75:9C:24:89:F2:AD:6B:DA:2A:87
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201CC636ADDF0CA8BE05280
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:cc:63:6a:dd:f0:ca:8b:e0:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=26a79965-d924-4264-9b9b-90a1da794b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:24:19:7c:e7:75:80:35:1c:fa:8a:eb:58:3d:
                    07:7c:00:da:68:3a:5d:dc:7e:e9:0a:f0:3c:24:92:
                    17:b3:62:59:b5:16:2d:99:d5:fd:49:80:ba:1f:68:
                    e8:07:e5:49:df:12:fb:22:2f:98:d3:85:48:72:9e:
                    e9:cf:d9:08:df:d3:1a:7a:16:bc:e7:67:dc:3a:a6:
                    bc:01:c9:8b:4b:41:7d:2b:88:5a:a9:ed:b9:77:d0:
                    36:ca:2c:7c:3e:2f:57:05:ce:9a:f7:7a:b3:5a:76:
                    bf:22:2b:6f:34:16:e3:92:6a:d5:67:00:c5:ff:5c:
                    33:bd:13:2f:fe:ef:5e:3d:c0:28:d2:ff:e4:b1:a4:
                    b5:a0:bb:36:b0:51:71:78:3c:70:85:7f:89:dc:6e:
                    77:dd:3e:82:a8:c6:b4:d2:6e:bc:74:60:3b:a2:03:
                    05:fc:2f:1b:22:3b:00:c7:83:f3:57:6f:63:56:c4:
                    49:f5:38:1a:f3:33:e1:83:fe:69:f1:48:e9:cc:70:
                    77:45:b5:2f:9c:92:f4:96:ed:96:a9:31:26:de:60:
                    cc:ff:62:cc:62:b6:16:8e:c6:b9:02:97:7b:07:81:
                    47:64:91:1b:3f:7c:df:d5:cd:04:45:71:d3:ca:52:
                    a7:c1:ca:aa:24:2d:18:05:d9:15:07:92:bc:4e:bc:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:F5:C9:5D:6D:0B:5A:05:8C:75:9C:24:89:F2:AD:6B:DA:2A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:06:d0:71:79:86:9d:90:5b:1e:68:2f:a4:79:5c:c3:c5:03:
         05:9a:be:33:9a:5c:51:f3:58:94:48:e3:1c:b5:65:41:a3:58:
         17:94:03:bf:25:92:8f:af:5b:4a:b0:fb:58:38:c4:34:83:75:
         87:ca:4c:85:2f:5f:1c:ef:9d:88:ad:0f:d7:04:78:ee:9d:2d:
         6a:89:83:43:b6:94:c1:23:ae:ec:70:18:c2:62:da:37:a2:20:
         87:50:23:f5:45:ec:e0:e6:45:bd:b4:57:2a:95:3c:4c:4e:74:
         f2:64:de:08:db:c3:66:6b:fc:f8:e8:9a:59:09:e9:68:23:4b:
         34:5a:91:f3:5f:cf:3c:5e:e1:57:a1:25:a8:9a:4e:0e:86:73:
         74:3c:ea:4d:b9:f8:f1:85:19:3f:6e:23:7a:86:00:ad:bf:39:
         13:a8:c3:71:bd:52:af:86:90:ce:ce:61:9e:fe:eb:59:71:01:
         1d:e1:b3:61:12:00:b9:0d:44:7e:20:00:05:c3:12:17:6f:2e:
         b3:f5:6f:c8:20:20:b0:fa:c3:6e:94:eb:e7:30:21:a2:28:97:
         71:b5:f4:f3:71:e0:b8:1f:49:82:3d:e5:16:29:32:c6:08:d9:
         c6:73:1c:51:fd:26:ab:3a:a3:dc:57:f3:63:c9:10:08:fc:77:
         2e:08:de:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAcxjat3wyovgUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MjZhNzk5NjUtZDkyNC00MjY0LTliOWItOTBhMWRhNzk0YjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yQZfOd1gDUc+orrWD0HfADaaDpd3H7pCvA8
JJIXs2JZtRYtmdX9SYC6H2joB+VJ3xL7Ii+Y04VIcp7pz9kI39Maeha852fcOqa8
AcmLS0F9K4haqe25d9A2yix8Pi9XBc6a93qzWna/IitvNBbjkmrVZwDF/1wzvRMv
/u9ePcAo0v/ksaS1oLs2sFFxeDxwhX+J3G533T6CqMa00m68dGA7ogMF/C8bIjsA
x4PzV29jVsRJ9Tga8zPhg/5p8UjpzHB3RbUvnJL0lu2WqTEm3mDM/2LMYrYWjsa5
Apd7B4FHZJEbP3zf1c0ERXHTylKnwcqqJC0YBdkVB5K8Trwr5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHH9cldbQtaBYx1nCSJ8q1r2iqHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWEzNmQ0ZmEtZGU5YS0z
Njg3LWE2ZDgtNmE1NjQyOGJhNTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgG0HF5hp2QWx5oL6R5XMPFAwWavjOaXFHzWJRI4xy1ZUGjWBeUA78l
ko+vW0qw+1g4xDSDdYfKTIUvXxzvnYitD9cEeO6dLWqJg0O2lMEjruxwGMJi2jei
IIdQI/VF7ODmRb20VyqVPExOdPJk3gjbw2Zr/PjomlkJ6WgjSzRakfNfzzxe4Veh
JaiaTg6Gc3Q86k25+PGFGT9uI3qGAK2/OROow3G9Uq+GkM7OYZ7+61lxAR3hs2ES
ALkNRH4gAAXDEhdvLrP1b8ggILD6w26U6+cwIaIol3G19PNx4LgfSYI95RYpMsYI
2cZzHFH9Jqs6o9xX82PJEAj8dy4I3gM=
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:55:02 2025 by rpki-client