Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa
File:                     0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa (raw, json)
Hash identifier:          asc++IMuhnu56LMNq3BA+xy11mvdkP8xh42oTq0zwCo=
Subject key identifier:   23:A2:7D:E1:A6:7C:8A:DE:DD:7D:72:3A:8B:08:15:6D:27:32:6E:47
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814612FA102769608E571600
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:12:fa:10:27:69:60:8e:57:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=8d00bfcf-b096-4f9e-a196-69483d6cad45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:12:48:61:6c:de:04:9f:27:32:75:80:63:
                    d2:ed:ac:77:08:43:f1:f8:5c:5e:11:58:56:d5:b7:
                    b7:6a:00:06:48:ce:bc:16:85:c0:21:82:6a:07:05:
                    02:60:d8:48:35:97:b2:1a:7f:8b:da:c3:7f:e0:8e:
                    2e:9b:f3:78:4f:bd:61:e4:ff:0e:4d:6b:17:55:94:
                    7c:6f:01:80:f5:c4:4f:a1:42:0c:04:9e:f8:5b:78:
                    d4:bb:e3:45:72:3a:d0:d6:34:20:c7:42:5e:2a:fc:
                    e1:b7:b9:ee:39:19:08:2e:79:05:c9:7e:b1:ed:de:
                    80:78:b6:78:9e:0e:f1:93:3b:db:2b:b5:db:ae:56:
                    e5:30:d0:19:dc:0e:9f:2a:43:30:5c:0a:eb:1e:7d:
                    1a:02:07:71:d2:28:79:0d:ac:25:3b:9c:1f:a4:d6:
                    a5:24:25:6e:40:2e:2e:02:81:24:76:01:15:ef:61:
                    1e:c0:82:e2:86:08:c4:d5:e6:38:60:42:4b:5b:bd:
                    c4:a2:69:f6:c9:f7:90:2c:9d:f7:93:87:18:3b:ed:
                    7f:63:9d:e7:c3:55:09:6e:08:2c:d9:19:4e:45:10:
                    a3:24:cc:64:0a:d9:14:3a:e9:5a:92:03:39:0d:d8:
                    a1:e2:1a:d0:25:3e:9e:95:ea:0f:00:10:49:78:f5:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:7D:E1:A6:7C:8A:DE:DD:7D:72:3A:8B:08:15:6D:27:32:6E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:29:80:b5:a0:39:25:bd:bb:29:30:a5:00:15:ce:e9:f4:25:
         48:b9:0a:00:84:d9:ca:a2:27:f2:14:2a:2b:5e:57:8e:be:f7:
         30:c2:d6:ad:bc:ec:d8:f5:8e:23:5e:2a:f9:13:21:5e:37:53:
         d7:e4:54:ca:42:d5:66:44:f4:97:24:f6:58:c8:1b:f2:f2:0f:
         e3:c5:32:b2:a5:de:6d:9e:cb:3e:a9:1b:c5:37:79:c7:f9:34:
         dd:a3:91:4a:1c:fe:74:41:92:aa:6e:b0:80:34:0b:75:98:ab:
         dd:96:ef:06:85:97:ca:33:84:b4:38:96:1e:a3:2c:c7:e1:03:
         ef:3b:57:f5:d8:7d:a7:ba:a9:50:29:1a:f9:80:05:48:96:1e:
         94:3d:71:40:85:74:12:c9:df:f7:da:60:1a:4e:06:4c:b8:11:
         c7:4f:77:b8:6b:1e:94:3a:4c:7c:79:34:ce:74:20:6b:00:59:
         a2:19:90:2c:79:25:55:02:67:77:09:84:41:86:e7:3d:97:1a:
         d1:b5:23:9b:ed:85:a0:f9:9f:0d:76:75:1f:d7:17:7a:ee:1e:
         69:44:2c:1a:cd:86:a4:e9:5c:a3:f0:cc:ab:e0:1d:dc:25:40:
         37:0b:36:81:1e:ba:b3:f9:df:13:94:37:de:93:d8:e5:70:65:
         55:71:02:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhL6ECdpYI5XFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
OGQwMGJmY2YtYjA5Ni00ZjllLWExOTYtNjk0ODNkNmNhZDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc4SSGFs3gSfJzJ1gGPS7ax3CEPx+FxeEVhW
1be3agAGSM68FoXAIYJqBwUCYNhINZeyGn+L2sN/4I4um/N4T71h5P8OTWsXVZR8
bwGA9cRPoUIMBJ74W3jUu+NFcjrQ1jQgx0JeKvzht7nuORkILnkFyX6x7d6AeLZ4
ng7xkzvbK7XbrlblMNAZ3A6fKkMwXArrHn0aAgdx0ih5DawlO5wfpNalJCVuQC4u
AoEkdgEV72EewILihgjE1eY4YEJLW73Eomn2yfeQLJ33k4cYO+1/Y53nw1UJbggs
2RlORRCjJMxkCtkUOulakgM5Ddih4hrQJT6eleoPABBJePV4zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOifeGmfIre3X1yOosIFW0nMm5HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDAxNzc5NmUtMmRjYi0z
ZjgzLWFkZTUtNTMzMGNmOWJiYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0pgLWgOSW9uykwpQAVzun0JUi5CgCE2cqiJ/IUKiteV46+9zDC1q28
7Nj1jiNeKvkTIV43U9fkVMpC1WZE9Jck9ljIG/LyD+PFMrKl3m2eyz6pG8U3ecf5
NN2jkUoc/nRBkqpusIA0C3WYq92W7waFl8ozhLQ4lh6jLMfhA+87V/XYfae6qVAp
GvmABUiWHpQ9cUCFdBLJ3/faYBpOBky4EcdPd7hrHpQ6THx5NM50IGsAWaIZkCx5
JVUCZ3cJhEGG5z2XGtG1I5vthaD5nw12dR/XF3ruHmlELBrNhqTpXKPwzKvgHdwl
QDcLNoEeurP53xOUN96T2OVwZVVxAog=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:07 2025 by rpki-client