Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0001bc4f-8012-3deb-a933-aef376d72c8f.roa
File:                     0001bc4f-8012-3deb-a933-aef376d72c8f.roa (raw, json)
Hash identifier:          WFnSg4i4TfyiIfaM1IPSLtzPM40v3urG1fFN+xw+hD0=
Subject key identifier:   7A:B6:5A:69:41:00:67:46:BF:C6:68:44:E3:D7:87:5F:2A:14:8F:50
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146197CFE7B143779A59FE0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0001bc4f-8012-3deb-a933-aef376d72c8f.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:19:7c:fe:7b:14:37:79:a5:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=982beb8a-c0a0-4cfd-a2a6-8c9b7794a912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:f7:f2:85:d2:f5:2d:07:92:40:3d:d6:81:
                    58:6b:73:be:db:fb:cc:2b:61:f8:68:df:b3:79:b1:
                    4a:cd:c2:3c:9a:1a:6c:bf:84:e5:c6:c5:ed:7e:57:
                    3f:c9:e5:be:69:a4:11:f2:69:19:13:84:d0:a9:15:
                    2a:d7:b1:81:69:b9:4c:08:e2:f5:b2:81:cc:b2:39:
                    f6:93:1b:cc:9c:3a:92:ad:58:61:53:dd:37:de:52:
                    19:ad:77:c4:7d:a0:b5:c3:27:df:aa:7d:2a:cd:56:
                    d6:7b:b9:39:84:77:e3:ad:3b:34:f7:88:78:e1:b6:
                    9d:24:d9:52:38:f8:31:79:29:95:b3:35:c1:79:89:
                    bc:b5:0e:bd:a3:f1:84:ba:fc:b3:b5:c1:91:72:b6:
                    7e:3e:fb:95:86:6a:dd:ba:d3:49:93:88:50:af:ce:
                    2f:97:ef:20:8a:04:77:75:75:cc:28:89:d6:1c:18:
                    88:84:c9:21:db:32:97:4e:e2:2a:8c:59:38:cb:40:
                    17:f3:db:26:07:62:af:21:f6:12:c9:ab:9d:5b:b2:
                    d6:24:2f:8f:33:2e:13:67:0e:0e:56:df:f5:35:38:
                    ec:d0:6b:52:a6:21:c4:81:67:05:c5:e6:40:0d:d9:
                    c1:bb:2f:cc:2c:35:c4:9b:95:7c:83:db:fd:4c:a5:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B6:5A:69:41:00:67:46:BF:C6:68:44:E3:D7:87:5F:2A:14:8F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0001bc4f-8012-3deb-a933-aef376d72c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:4c:11:27:0a:34:74:de:0d:73:11:7a:aa:2a:f7:dd:8b:a4:
         af:17:e6:d5:66:84:79:75:2c:42:67:70:d2:82:f8:9b:ee:22:
         e1:8d:e6:af:44:9f:dc:31:e5:4d:95:bf:3a:50:aa:39:a3:25:
         48:03:c1:f6:98:d0:d4:67:90:15:74:7d:61:67:4a:1d:10:1c:
         06:09:54:0b:76:6d:1d:cb:25:4b:32:4f:88:de:1e:37:a0:1d:
         6d:14:b6:4a:51:b2:31:cd:27:0a:2f:d6:81:f2:2a:9e:5e:d4:
         47:ed:34:6e:26:ee:97:52:e7:0d:db:6e:99:60:61:00:ba:cf:
         ed:16:bd:59:f0:31:09:8a:cb:de:1c:de:91:6b:1b:d6:20:8e:
         66:1f:de:11:6c:35:0a:f3:f0:46:c0:89:59:53:3d:69:16:4c:
         b1:3e:63:a4:68:d2:4a:7b:59:8c:1f:4f:9a:78:23:75:5c:13:
         8d:a3:78:1d:e2:c7:32:98:8e:bf:16:a8:6b:56:7d:16:51:0b:
         b3:fe:ca:35:e5:e4:a8:37:59:ec:fb:a1:18:7f:9a:b6:5b:be:
         1e:44:bc:ad:38:70:7c:fd:4b:77:5a:6c:44:33:82:97:99:e5:
         e8:3d:86:17:f0:19:27:38:7a:cd:99:49:54:08:fe:02:02:fb:
         81:1a:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:29 2025 by rpki-client