Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa
File:                     f1432ee2-0ae6-32fb-950a-ffa05a901073.roa (raw, json)
Hash identifier:          aJ/70abCoq6SXb+Vz+6XAYjmwyFD8lOvI93Wx9jR9a0=
Subject key identifier:   DB:66:2E:D6:3C:F6:1E:E8:87:BE:F6:56:F7:6D:5E:F1:01:06:0B:77
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620236EEB624D4DE8F141F80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:36:ee:b6:24:d4:de:8f:14:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=70c321fe-143b-41be-a028-fdda7a409ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:61:19:35:48:2a:63:8e:c7:2b:a0:d8:39:
                    b9:15:c2:d8:48:8a:df:1c:83:e1:bc:e0:9c:16:8a:
                    f3:37:c7:07:7d:14:7d:78:8c:f5:9f:f2:ae:a7:9a:
                    f3:bf:4f:40:6b:35:63:a3:8b:93:c3:ab:ae:09:22:
                    69:19:72:4d:73:ff:bf:ef:a0:7c:cb:8f:d3:ff:9c:
                    4f:0c:ed:93:e4:83:79:07:23:53:34:f0:c9:ea:3b:
                    fb:65:54:0a:e3:94:d2:a7:32:3c:b6:92:24:e4:b6:
                    e8:98:36:4c:83:b3:73:e3:c1:fd:18:22:01:d0:a2:
                    09:1f:46:ba:3c:a7:82:58:cf:97:bc:6a:b9:70:be:
                    ac:29:28:9c:80:3a:23:bc:a1:4d:01:e3:1d:73:95:
                    53:c9:30:47:0e:bb:85:12:73:06:61:6c:d1:6b:ea:
                    11:81:c7:eb:c2:20:d6:d8:de:d8:3d:ab:6d:63:04:
                    55:34:0b:07:39:88:c7:8e:94:f7:7c:ca:14:f2:26:
                    6e:f6:9f:da:9e:8f:82:35:2b:f9:0c:7b:09:07:69:
                    ff:6b:d4:d2:0c:b0:cc:92:ac:e0:cb:69:70:33:c8:
                    6d:d2:9d:49:79:1e:2f:b4:59:b6:d4:ff:0f:ef:69:
                    d0:bb:d3:dd:e9:b7:c0:f6:a3:fd:24:56:a7:c4:a8:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:66:2E:D6:3C:F6:1E:E8:87:BE:F6:56:F7:6D:5E:F1:01:06:0B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:22:35:2c:60:d2:5d:30:9d:ab:13:06:89:44:01:a0:05:
         60:34:3c:a3:fa:98:67:83:92:31:38:e5:ac:5d:22:05:93:64:
         ab:1e:dc:d6:9b:1d:bf:39:86:23:57:96:a9:3f:2e:de:ce:27:
         fc:c7:0e:17:4a:13:62:95:f7:9d:a9:2b:6a:0c:8e:8e:a8:ef:
         61:2a:99:27:71:ab:13:6b:e7:93:68:6f:ff:f1:12:e6:6f:7a:
         62:eb:19:14:4c:e2:fe:de:e1:35:56:ba:ae:96:3b:47:62:e6:
         e3:42:07:77:b0:fc:5c:cc:2f:4a:7a:37:38:42:a2:d2:3b:22:
         ea:97:48:29:0c:ef:9e:19:de:69:2d:cf:90:03:67:f0:28:dc:
         20:41:df:c6:8d:c3:40:0f:b3:45:49:73:1d:2c:32:a4:f4:a9:
         82:a6:17:68:65:df:ac:5c:f4:62:09:8f:d3:0e:be:09:06:45:
         01:79:39:86:00:a8:5b:2d:c2:5a:97:b2:dd:0f:91:d2:16:e1:
         26:ef:e8:f5:63:70:76:f5:3c:ef:07:4c:01:f5:f9:d4:13:b9:
         3f:7d:1e:3b:e3:14:3f:31:5f:ad:bd:d5:b1:6d:47:11:78:3b:
         66:72:08:af:13:0c:28:18:62:1b:1c:59:ab:e6:5e:a0:6f:19:
         e1:7b:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:16 2025 by rpki-client