Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1ef6d63-d46d-313e-bbff-c0172857827b.roa
File:                     b1ef6d63-d46d-313e-bbff-c0172857827b.roa (raw, json)
Hash identifier:          0D5YXuo7BB2oHOuwCNUUF0ND4RHiJBd5nKAcD5kAEH4=
Subject key identifier:   3D:BC:A6:D1:76:99:01:3C:B8:16:63:4E:92:21:1E:D9:96:B9:B1:0C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620206D002F1B5D8680A0A80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1ef6d63-d46d-313e-bbff-c0172857827b.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:06:d0:02:f1:b5:d8:68:0a:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=6f8b1354-a0f4-4af6-80ef-22870622985f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:94:a5:49:a1:00:28:32:53:02:d1:3b:30:
                    15:1b:11:65:2e:74:48:c7:66:2d:05:ba:6c:d4:d3:
                    0b:1b:3d:aa:57:85:47:7f:c8:43:90:de:47:84:b2:
                    8c:0e:d2:91:59:db:f7:2f:df:f6:5c:2b:61:2c:77:
                    d7:7b:b5:bc:f5:7e:22:d2:1a:67:40:f0:5b:54:ad:
                    ef:ce:3c:b4:d8:94:d7:9c:65:10:ec:dd:86:7f:11:
                    71:57:e2:87:db:21:89:a8:a5:a0:2d:1f:4c:48:ca:
                    1d:b0:9d:a9:08:46:23:c2:85:87:1a:d7:0d:0f:19:
                    66:54:1e:b6:28:17:ee:e7:70:a6:83:64:7b:9e:0b:
                    c5:7c:95:11:1a:11:b8:2d:75:67:a1:48:99:68:e3:
                    cb:3b:70:00:0c:85:12:41:5e:c6:70:87:37:c2:aa:
                    8d:76:4c:35:f3:39:1e:3d:9f:b3:ed:50:0b:4f:e8:
                    f9:b1:d1:fb:a8:f4:35:c4:70:32:ea:ca:f4:73:05:
                    6f:84:b4:28:c0:ad:bd:a5:2e:15:2d:c4:20:fe:72:
                    f5:b8:65:33:16:5d:38:f2:aa:3a:40:6f:30:a4:aa:
                    f9:5a:cb:c6:4e:73:69:93:0f:7a:46:09:a2:00:91:
                    c3:4f:51:ec:8a:10:0f:8e:e0:96:bd:af:66:d0:b6:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BC:A6:D1:76:99:01:3C:B8:16:63:4E:92:21:1E:D9:96:B9:B1:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1ef6d63-d46d-313e-bbff-c0172857827b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:0d:d2:0a:da:c0:98:71:e4:51:55:b0:9c:14:be:77:aa:60:
         cd:e9:5b:84:36:7e:81:34:3c:bb:67:d5:69:4f:ed:47:e0:95:
         03:7a:39:d7:eb:1f:22:e3:53:3c:ce:be:29:10:7e:b1:20:98:
         a2:c7:ef:1f:ce:f2:7f:69:a2:fa:85:a1:82:c6:9e:90:72:4b:
         56:86:76:e9:13:13:04:44:0d:f1:ee:8e:f4:d7:f3:65:c0:b0:
         c1:c4:cb:62:c0:a5:d0:68:ef:b9:97:85:a6:24:22:55:ed:47:
         33:db:aa:03:0e:d3:d7:5d:e7:30:db:c3:22:ab:a5:c9:e3:04:
         d0:e6:f6:8b:40:63:5c:37:72:bc:5c:fd:e5:eb:0d:f1:fe:0c:
         7c:ac:bc:c3:a5:49:e6:f7:23:bb:c7:52:44:0e:af:68:7e:36:
         9d:be:a9:c6:d6:f3:33:bf:c7:17:ae:78:27:14:b1:06:02:88:
         b6:81:a2:9f:ac:2d:80:c4:b7:68:7f:9b:37:db:dd:9f:92:36:
         d4:02:c6:02:68:bf:5a:38:33:83:1e:69:90:ff:b0:65:ba:30:
         bb:1b:af:f4:8c:e3:57:e4:ed:93:2f:19:12:7b:04:29:6b:44:
         e5:78:9d:7e:24:c6:19:de:74:11:b5:d0:34:00:6f:4b:fc:7a:
         50:08:2b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:12 2025 by rpki-client