Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/004eb75c-22d1-3228-8fc4-8912bf30cd72.roa
File:                     004eb75c-22d1-3228-8fc4-8912bf30cd72.roa (raw, json)
Hash identifier:          dCWU0VDo+SfIkKFaJIoN1yO5Gdrjn9I7lfdGRUvTz8M=
Subject key identifier:   24:AE:DD:3B:8A:DF:7E:E4:1F:2B:22:69:26:5A:14:29:DB:9B:87:C9
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81460D9B4D571504399FA180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/004eb75c-22d1-3228-8fc4-8912bf30cd72.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:0d:9b:4d:57:15:04:39:9f:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=2e67f2db-5c22-4b83-a7a7-ac4bfca1c524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:77:16:08:1e:3e:f3:fc:af:ff:15:3c:0e:c1:
                    79:53:a9:a1:90:19:02:fd:65:ac:95:93:90:8a:6c:
                    ee:30:79:39:64:0d:cb:16:23:80:56:49:3f:a0:dd:
                    90:29:b3:da:c4:e4:a4:40:72:48:af:25:14:b3:ef:
                    fe:22:3a:dd:1f:c7:69:82:af:53:79:93:69:aa:f1:
                    48:b2:f9:9e:9e:7d:ff:c0:28:2b:82:ae:9c:80:f1:
                    5a:14:96:36:17:29:a0:23:4a:4b:c1:62:c4:5b:d9:
                    04:2d:00:c0:04:7e:0d:df:f8:c2:33:d7:3d:65:72:
                    1a:09:76:79:1e:38:d3:c9:61:f9:ed:e4:6d:f3:35:
                    be:13:ef:e7:b6:7d:50:e7:97:a3:15:83:ad:73:c8:
                    ab:1f:f4:c9:0d:34:b7:cb:6b:05:cf:e9:c8:7b:c4:
                    21:d2:47:c1:5b:94:ba:e0:ba:d7:b4:0a:86:d5:52:
                    c5:13:78:49:ce:2f:2c:ab:6e:31:ce:8c:74:e6:df:
                    e1:73:52:ce:ce:bd:81:29:0d:50:c4:c3:9a:c9:b3:
                    b3:a1:86:f8:4c:dc:f9:fc:56:aa:38:ec:e5:37:51:
                    a7:8c:b8:d4:cf:f1:6f:03:61:49:3b:1a:d0:8d:fe:
                    35:42:60:31:b0:08:bb:f4:09:0a:4b:08:98:50:01:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AE:DD:3B:8A:DF:7E:E4:1F:2B:22:69:26:5A:14:29:DB:9B:87:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/004eb75c-22d1-3228-8fc4-8912bf30cd72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:39:19:ef:a4:99:c3:26:03:1f:1b:d7:b8:51:e1:e2:8d:3f:
         91:4d:64:e6:0b:6e:8d:f8:bf:a2:86:93:8e:d4:59:af:89:3c:
         01:ba:c9:79:9d:f2:ad:98:72:ad:b6:01:03:c2:31:f5:93:9d:
         e3:b7:a9:99:34:7e:13:6b:6f:ca:ff:4f:14:27:7f:a3:db:fe:
         97:85:12:10:71:84:1d:5e:3f:1e:e1:18:b1:29:64:9f:f6:98:
         f1:7f:c8:49:21:5a:78:85:5b:58:48:8e:db:fc:5a:90:f4:9e:
         bf:65:06:2a:37:3f:d4:a0:69:b0:28:33:2c:80:2e:64:57:3b:
         18:29:61:1f:d1:7e:3a:9a:03:29:74:96:90:5d:89:9e:9d:92:
         eb:9e:66:ab:a5:c1:56:56:48:76:54:90:06:b2:f9:6b:a7:a1:
         d3:52:bc:1d:d6:2e:e9:cd:b8:59:81:7c:60:34:14:c8:7d:96:
         18:d3:1f:b4:8f:54:56:80:3a:bc:ba:53:71:1a:dc:0a:94:91:
         90:69:82:86:80:bf:04:30:3d:a2:3e:62:c1:dd:c2:b6:9d:9f:
         8d:c5:f9:f8:d6:8f:6c:f1:c2:f2:79:0f:35:f1:e1:be:ab:a4:
         fa:31:57:c5:4f:78:e4:66:5c:cd:1b:14:eb:dc:51:eb:a8:c0:
         9c:7d:b5:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRg2bTVcVBDmfoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
MmU2N2YyZGItNWMyMi00YjgzLWE3YTctYWM0YmZjYTFjNTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3cWCB4+8/yv/xU8DsF5U6mhkBkC/WWslZOQ
imzuMHk5ZA3LFiOAVkk/oN2QKbPaxOSkQHJIryUUs+/+IjrdH8dpgq9TeZNpqvFI
svmenn3/wCgrgq6cgPFaFJY2FymgI0pLwWLEW9kELQDABH4N3/jCM9c9ZXIaCXZ5
HjjTyWH57eRt8zW+E+/ntn1Q55ejFYOtc8irH/TJDTS3y2sFz+nIe8Qh0kfBW5S6
4LrXtAqG1VLFE3hJzi8sq24xzox05t/hc1LOzr2BKQ1QxMOaybOzoYb4TNz5/Faq
OOzlN1GnjLjUz/FvA2FJOxrQjf41QmAxsAi79AkKSwiYUAHdoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSu3TuK337kHysiaSZaFCnbm4fJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDA0ZWI3NWMtMjJkMS0z
MjI4LThmYzQtODkxMmJmMzBjZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK45Ge+kmcMmAx8b17hR4eKNP5FNZOYLbo34v6KGk47UWa+JPAG6yXmd
8q2Ycq22AQPCMfWTneO3qZk0fhNrb8r/TxQnf6Pb/peFEhBxhB1ePx7hGLEpZJ/2
mPF/yEkhWniFW1hIjtv8WpD0nr9lBio3P9SgabAoMyyALmRXOxgpYR/RfjqaAyl0
lpBdiZ6dkuueZqulwVZWSHZUkAay+WunodNSvB3WLunNuFmBfGA0FMh9lhjTH7SP
VFaAOry6U3Ea3AqUkZBpgoaAvwQwPaI+YsHdwradn43F+fjWj2zxwvJ5DzXx4b6r
pPoxV8VPeORmXM0bFOvcUeuowJx9tR8=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:25 2025 by rpki-client