Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa
File:                     f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa (raw, json)
Hash identifier:          x6NeWSevgTTUJZfWCaOaE3CDNFtol3OczR/KHm0UoWs=
Subject key identifier:   15:AE:DC:30:28:11:48:CE:AE:D2:0C:B6:0A:1A:37:F3:63:F2:AF:05
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201E05578253BB9460DCAA0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e0:55:78:25:3b:b9:46:0d:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=f855b4f0-0084-42b7-94d8-3500398f0c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:94:e5:57:72:9a:24:f6:91:f9:da:9b:1f:
                    84:ee:7a:fb:fc:38:ff:43:52:89:dc:92:dd:ef:fa:
                    17:f6:c1:fe:c8:57:9e:42:a7:10:f2:d2:39:87:ba:
                    79:1f:21:c7:26:b5:ec:a2:57:07:b6:12:e2:28:26:
                    6e:6d:8f:8b:6d:2b:6e:24:3c:a8:13:16:f0:26:bc:
                    c6:6a:7a:47:4a:59:22:1c:85:69:ca:f9:60:51:69:
                    86:31:20:7a:5a:99:73:9d:12:53:79:f8:1b:27:89:
                    21:89:a7:38:4c:20:d2:2f:a2:8f:8f:82:da:2f:ef:
                    67:67:88:09:ff:ab:5a:ec:a0:b6:b6:19:a0:7a:c3:
                    bb:f7:1a:fb:c6:9f:12:dd:60:b8:a8:24:ca:6f:bc:
                    87:95:00:36:f4:50:c2:f2:22:e7:c1:6e:0a:22:cb:
                    3c:27:ff:33:da:3b:d2:f5:41:d2:2d:2c:a7:68:c2:
                    c9:be:7d:b7:14:7a:a6:66:1b:78:dd:0e:b2:43:c8:
                    44:2d:6e:74:5f:da:53:dd:16:9e:c7:a0:64:c4:a1:
                    c1:f5:d3:0b:e8:37:50:1d:85:7b:f1:d2:1d:76:e0:
                    65:18:73:4e:b4:c5:42:6e:64:c8:0c:c1:99:1d:89:
                    53:07:49:ad:34:24:1e:d2:db:4c:fb:9e:54:34:10:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:DC:30:28:11:48:CE:AE:D2:0C:B6:0A:1A:37:F3:63:F2:AF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:9f:cd:e2:dd:2c:06:b3:06:af:6f:b4:f1:e6:c8:10:b5:
         51:3f:54:55:08:a5:21:3d:e8:0e:a7:67:b2:5c:71:33:8e:f7:
         2f:26:1e:22:cd:4e:3c:17:6d:ce:25:0a:68:09:9a:ad:a6:7b:
         03:ec:1e:47:04:2c:18:b2:17:21:5f:2c:6d:9d:38:02:29:44:
         e2:11:0a:1b:53:d2:45:92:9f:6c:44:7a:7a:33:53:5d:e6:a5:
         f5:4a:d3:cd:f7:98:a3:6a:6d:74:d8:34:9e:2a:07:fd:43:26:
         aa:6d:c9:40:f8:21:0b:da:da:17:06:50:0e:99:9f:f2:a7:15:
         9b:60:f8:e4:b3:c7:45:7b:da:80:b7:31:94:54:f0:d6:87:8b:
         bf:dd:4b:e7:b1:43:cb:d2:23:bc:46:3a:3a:e0:1e:13:fa:e9:
         c5:1f:aa:3c:bd:b1:78:70:0a:13:90:2a:77:6f:50:d9:a0:e8:
         06:cd:3d:5c:25:19:63:3c:bf:57:c3:14:da:52:55:cc:d7:41:
         69:e3:c9:da:18:db:5c:13:38:b9:7a:d9:34:89:17:50:3a:77:
         d1:1b:98:5a:85:99:cf:fd:63:36:40:9f:8d:8c:3f:b5:ff:c8:
         1e:8b:ab:d5:e6:74:be:80:dc:32:2a:c9:5a:f7:94:e1:54:56:
         6f:66:c7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:48:31 2025 by rpki-client