Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07111d37-3fa5-34a0-b9f2-833b07f2b94d.roa
File:                     07111d37-3fa5-34a0-b9f2-833b07f2b94d.roa (raw, json)
Hash identifier:          /n7401Zkh7mn+xPCEPOyK6QUowivPpIDltT/qu1xKpk=
Subject key identifier:   BE:AF:22:B8:5C:0D:C6:3A:9A:C0:C7:FA:FA:AA:22:B6:67:14:70:13
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81460A34234F64EB48DCC500
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07111d37-3fa5-34a0-b9f2-833b07f2b94d.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:0a:34:23:4f:64:eb:48:dc:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=5c158e0c-ab8a-4871-a2bd-f57d3707e1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:4b:6f:96:a0:e6:6d:93:51:7e:fb:31:a5:
                    f8:28:e0:7f:ac:ab:cf:cb:90:50:a4:57:98:e8:95:
                    65:7a:dd:d5:80:61:70:3e:51:00:69:e5:19:ca:0d:
                    04:b9:80:a1:57:9d:8c:67:3a:b1:c8:00:8c:c7:e7:
                    8c:df:84:4a:e6:86:dc:a2:a5:a8:6b:8d:80:4a:4b:
                    99:7f:c2:08:cf:47:0f:0f:ad:6e:21:98:ef:97:4b:
                    c7:9d:a0:34:4d:d2:60:42:0e:b4:cc:d1:39:ec:8b:
                    ea:64:d5:eb:7f:97:a4:59:46:70:cd:7a:cb:10:06:
                    13:9b:7e:dc:1a:85:71:3f:dd:43:0a:f5:af:31:e0:
                    8e:68:17:a1:dd:f4:2f:29:63:ca:bf:4a:fc:bb:c0:
                    fd:54:11:14:65:7a:99:ee:da:96:c7:5a:e3:31:c9:
                    df:64:5a:c3:28:69:52:3d:8e:98:e1:be:fc:5c:ae:
                    e8:0b:ee:ef:26:91:03:32:32:77:91:0c:ed:86:97:
                    53:87:71:51:18:1c:af:f2:1c:da:b9:04:b4:ce:a6:
                    c1:5a:cc:5b:25:35:21:12:23:a6:7f:3c:2c:cc:70:
                    01:32:ee:94:0a:db:e6:8c:f1:cc:60:3e:ec:ea:70:
                    68:b6:f2:5f:ff:68:33:90:55:70:69:59:d3:03:f2:
                    b7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:22:B8:5C:0D:C6:3A:9A:C0:C7:FA:FA:AA:22:B6:67:14:70:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07111d37-3fa5-34a0-b9f2-833b07f2b94d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:41:6e:14:13:b0:47:bb:72:75:21:1f:1a:59:e8:d4:3c:
         59:b5:65:2c:f2:d9:69:44:aa:11:61:62:1c:37:28:dd:71:d3:
         f5:db:f9:f1:f5:36:1d:98:2d:44:06:b3:3c:74:94:ce:bd:9b:
         20:96:0c:bf:35:24:63:2c:c7:18:c3:84:77:9a:7a:65:8f:eb:
         0b:d0:33:d6:35:e2:2f:11:a2:b1:23:23:3d:0d:8e:83:9e:39:
         9d:1a:76:73:1e:4b:8c:b6:71:55:5e:fe:8a:38:ef:f2:53:17:
         3d:2d:91:ab:2f:bb:6a:11:f2:50:0b:bb:44:35:6d:cc:db:4c:
         68:be:e7:59:9b:ec:61:0e:69:49:af:07:e9:f3:e6:85:04:38:
         a2:97:74:d7:b4:08:5e:71:d1:3f:9b:44:70:62:09:ff:e3:5e:
         ed:b9:4c:75:43:ec:24:53:39:74:85:ac:87:90:fe:13:d6:68:
         21:13:74:04:87:99:8a:34:b4:37:1b:3d:62:cc:81:23:c4:00:
         c6:a0:7d:f9:4d:58:3d:23:98:c4:18:40:47:cc:b0:d7:31:6b:
         ba:bc:bf:42:58:f6:58:eb:be:76:fb:92:f0:8c:c7:d8:44:af:
         6f:04:f2:26:64:13:7a:00:0e:2a:de:10:f3:01:bb:54:23:2d:
         4c:ed:93:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgo0I09k60jcxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NWMxNThlMGMtYWI4YS00ODcxLWEyYmQtZjU3ZDM3MDdlMWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrlLb5ag5m2TUX77MaX4KOB/rKvPy5BQpFeY
6JVlet3VgGFwPlEAaeUZyg0EuYChV52MZzqxyACMx+eM34RK5obcoqWoa42ASkuZ
f8IIz0cPD61uIZjvl0vHnaA0TdJgQg60zNE57IvqZNXrf5ekWUZwzXrLEAYTm37c
GoVxP91DCvWvMeCOaBeh3fQvKWPKv0r8u8D9VBEUZXqZ7tqWx1rjMcnfZFrDKGlS
PY6Y4b78XK7oC+7vJpEDMjJ3kQzthpdTh3FRGByv8hzauQS0zqbBWsxbJTUhEiOm
fzwszHABMu6UCtvmjPHMYD7s6nBotvJf/2gzkFVwaVnTA/K3twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6vIrhcDcY6msDH+vqqIrZnFHATMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDcxMTFkMzctM2ZhNS0z
NGEwLWI5ZjItODMzYjA3ZjJiOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJg9QW4UE7BHu3J1IR8aWejUPFm1ZSzy2WlEqhFhYhw3KN1x0/Xb+fH1
Nh2YLUQGszx0lM69myCWDL81JGMsxxjDhHeaemWP6wvQM9Y14i8RorEjIz0NjoOe
OZ0adnMeS4y2cVVe/oo47/JTFz0tkasvu2oR8lALu0Q1bczbTGi+51mb7GEOaUmv
B+nz5oUEOKKXdNe0CF5x0T+bRHBiCf/jXu25THVD7CRTOXSFrIeQ/hPWaCETdASH
mYo0tDcbPWLMgSPEAMagfflNWD0jmMQYQEfMsNcxa7q8v0JY9ljrvnb7kvCMx9hE
r28E8iZkE3oADireEPMBu1QjLUztkw4=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:08:18 2025 by rpki-client