Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa
File:                     c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa (raw, json)
Hash identifier:          PluHaTsKXmftbWNPlyyMX6zZLcQ2zkgU6hBZw0atWY8=
Subject key identifier:   7F:BE:A3:67:94:F1:62:BD:1E:15:D9:78:0B:4C:F6:20:54:15:88:DB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62022B0D8BDCA07D211C7080
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:2b:0d:8b:dc:a0:7d:21:1c:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=8e4eaa02-5abe-4310-add3-4efaa5c8881a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:e6:9a:ab:95:61:9d:58:0d:65:76:fd:a7:
                    98:65:0c:91:41:1c:bd:75:a6:65:de:70:e1:29:01:
                    89:e1:2f:56:30:ed:d6:f3:fc:2e:80:65:24:95:68:
                    72:55:92:5f:1a:14:fe:2f:dc:ab:28:6c:c0:c1:17:
                    56:de:4b:f2:da:b8:03:4f:ff:7d:d3:c1:15:a4:7f:
                    2d:0b:5c:5b:db:dc:e5:4c:c5:7f:35:a5:aa:d5:ef:
                    2a:1f:18:fe:80:eb:70:43:d5:11:cd:ae:cd:a0:75:
                    aa:05:ae:be:00:ca:b4:11:ff:9f:92:de:c8:f0:5c:
                    89:39:22:9e:d1:5c:de:73:84:c2:e9:e2:d6:be:fa:
                    e6:f7:24:9d:16:cc:05:a8:f7:d5:89:07:30:90:92:
                    65:e3:af:87:9c:b1:6b:73:3d:55:3b:b2:eb:dd:83:
                    95:5b:7c:41:9d:bd:52:15:6b:58:df:c9:66:de:54:
                    6b:75:74:2c:87:ea:9e:ab:93:95:e4:0a:b0:be:f3:
                    0b:c7:ce:6d:21:de:df:ec:10:0b:9b:5e:ee:56:c6:
                    fc:92:65:71:26:5a:ce:a7:7e:bf:bb:c1:93:a0:cc:
                    87:d4:67:6e:e7:78:26:27:55:c2:39:53:9b:fe:23:
                    68:d0:43:e2:2d:32:ff:80:2a:26:38:ca:fe:2e:24:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:A3:67:94:F1:62:BD:1E:15:D9:78:0B:4C:F6:20:54:15:88:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:3e:61:1d:22:c1:e8:d8:28:77:a5:3d:b2:10:c9:61:11:
         26:a9:66:1b:de:9e:4b:55:af:97:25:78:cd:f6:78:57:8c:8a:
         eb:18:88:8a:8a:bd:e1:75:fb:42:b0:29:a1:58:2a:55:a1:4c:
         fd:45:80:0a:73:46:fe:96:23:71:f4:54:67:09:3a:ea:6b:24:
         7c:92:67:bb:90:d7:c0:ca:ca:d7:e0:1b:34:ce:da:6e:23:28:
         b0:10:d3:6e:d3:cd:0b:4c:29:02:ff:0b:d3:10:e4:9f:6d:8e:
         15:a8:4c:9d:f7:08:6c:57:45:c9:88:47:2d:85:dc:a5:fe:aa:
         1a:99:93:f1:64:0e:73:80:35:88:a5:1e:5a:88:f7:36:3a:35:
         50:ec:c5:56:22:38:92:53:f3:31:d6:39:81:78:29:4a:51:03:
         75:d5:ce:3d:7c:8e:dd:10:91:40:b4:34:dc:bf:23:0c:2a:6e:
         d9:14:8e:92:c9:a2:82:f6:cd:fc:b8:fa:60:09:a1:3d:fa:94:
         de:2c:eb:b4:88:8d:9f:b0:e9:33:d7:64:8e:f5:b2:bb:46:c7:
         8d:aa:59:46:cb:fa:a0:9c:a9:06:35:32:1d:f5:04:29:a3:2b:
         00:f5:81:ef:03:38:e9:b0:17:80:02:4e:ef:1d:bb:60:33:29:
         3b:ce:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:47:39 2025 by rpki-client