Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa
File:                     f97c1542-281c-386c-aa21-e33460f6654b.roa (raw, json)
Hash identifier:          2064IDIviuDbNfDX75MxrNKZvvYhFOLGxDBP0k99lW0=
Subject key identifier:   C7:CB:25:46:7C:77:96:12:6F:E3:DC:24:06:4E:86:B7:68:CE:1C:6B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6202383620945E0F30B99A40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:38:36:20:94:5e:0f:30:b9:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=02f16cec-fb69-425a-81d7-c6ff71407769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:22:07:74:9a:97:ca:e0:77:40:8d:69:0e:
                    86:17:c1:85:d8:b2:49:29:43:cf:cd:4f:b7:0e:0a:
                    fc:6e:7c:82:f2:e9:c8:d3:79:c4:a3:aa:bf:e8:88:
                    93:f5:ce:a8:59:aa:80:19:f8:61:7a:f3:08:91:ce:
                    d6:fa:d5:be:1a:92:54:fe:7d:06:30:d3:8a:1c:ac:
                    29:60:dc:42:f5:99:36:ab:36:2a:24:3f:0e:f5:8c:
                    c3:e3:c5:8c:96:06:ff:d1:62:a1:ed:55:ab:55:ba:
                    c7:eb:cf:cb:fe:f8:a3:a6:a1:ac:c8:d1:16:79:7f:
                    12:43:64:6a:83:4a:4b:87:67:76:83:ff:47:4b:a1:
                    0d:b3:a0:42:79:dc:8c:40:5e:da:54:de:2f:ed:98:
                    bd:3e:50:21:58:7a:d1:af:56:3e:1c:e1:37:8d:0e:
                    bc:5d:db:3b:a0:1e:d7:3c:bb:b2:a7:e2:40:55:6a:
                    ba:6e:0d:68:ce:8f:8e:18:11:bb:12:ae:8d:28:9b:
                    a4:1b:fc:00:10:09:95:33:0e:40:50:13:9f:f3:57:
                    50:29:fe:eb:b0:64:9b:bc:58:3d:f9:25:b5:0f:14:
                    b3:ef:a4:5f:d0:b7:ea:4a:32:51:bb:7b:79:11:8d:
                    8f:29:82:c6:75:6f:14:a2:92:35:e3:60:96:a3:f0:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CB:25:46:7C:77:96:12:6F:E3:DC:24:06:4E:86:B7:68:CE:1C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:5f:9d:67:a4:cb:aa:92:fc:eb:3f:15:47:16:73:18:ff:c7:
         54:ab:fb:63:d0:5e:98:e3:2c:51:bf:71:1d:9b:4b:b2:ed:bf:
         dc:9d:e1:52:96:4b:11:fa:3a:71:fc:b4:55:96:82:76:08:6b:
         8c:a3:b3:d7:b7:e4:98:ba:16:9f:70:6f:ff:1f:19:de:b8:50:
         83:99:bb:70:3d:ce:04:49:ff:dd:17:47:6c:d8:de:07:f3:69:
         8d:85:7b:0a:7b:ca:75:0d:c8:9d:53:28:10:55:cd:12:52:fc:
         7f:1b:af:35:11:2a:e6:34:2c:2c:39:21:9d:6a:4c:b1:3d:05:
         89:5c:10:49:e0:da:f0:a3:26:d4:91:ce:ef:81:37:53:ef:42:
         d6:36:ed:a4:ac:11:13:52:a6:34:38:5d:38:97:0b:96:1a:53:
         f6:f1:36:b1:30:49:68:30:22:c7:17:61:f1:50:26:9d:18:fb:
         04:b9:9f:40:b8:8a:b3:11:61:de:76:04:b3:13:66:6b:76:eb:
         89:de:e5:7f:c0:ea:d7:3e:60:8e:ac:d2:f6:31:9e:72:5d:5e:
         4b:3c:54:14:a1:0e:fc:76:61:67:4c:2e:65:aa:3c:63:ce:2d:
         7c:1b:07:4d:8f:cf:bb:d5:04:e1:88:9b:71:99:01:f4:0e:18:
         b4:fe:e6:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjg2IJReDzC5mkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MDJmMTZjZWMtZmI2OS00MjVhLTgxZDctYzZmZjcxNDA3NzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMMiB3Sal8rgd0CNaQ6GF8GF2LJJKUPPzU+3
Dgr8bnyC8unI03nEo6q/6IiT9c6oWaqAGfhhevMIkc7W+tW+GpJU/n0GMNOKHKwp
YNxC9Zk2qzYqJD8O9YzD48WMlgb/0WKh7VWrVbrH68/L/vijpqGsyNEWeX8SQ2Rq
g0pLh2d2g/9HS6ENs6BCedyMQF7aVN4v7Zi9PlAhWHrRr1Y+HOE3jQ68Xds7oB7X
PLuyp+JAVWq6bg1ozo+OGBG7Eq6NKJukG/wAEAmVMw5AUBOf81dQKf7rsGSbvFg9
+SW1DxSz76Rf0LfqSjJRu3t5EY2PKYLGdW8UopI142CWo/DWUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfLJUZ8d5YSb+PcJAZOhrdozhxrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjk3YzE1NDItMjgxYy0z
ODZjLWFhMjEtZTMzNDYwZjY2NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJfnWeky6qS/Os/FUcWcxj/x1Sr+2PQXpjjLFG/cR2bS7Ltv9yd4VKW
SxH6OnH8tFWWgnYIa4yjs9e35Ji6Fp9wb/8fGd64UIOZu3A9zgRJ/90XR2zY3gfz
aY2Fewp7ynUNyJ1TKBBVzRJS/H8brzURKuY0LCw5IZ1qTLE9BYlcEEng2vCjJtSR
zu+BN1PvQtY27aSsERNSpjQ4XTiXC5YaU/bxNrEwSWgwIscXYfFQJp0Y+wS5n0C4
irMRYd52BLMTZmt264ne5X/A6tc+YI6s0vYxnnJdXks8VBShDvx2YWdMLmWqPGPO
LXwbB02Pz7vVBOGIm3GZAfQOGLT+5vc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:16:35 2025 by rpki-client