Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa
File:                     10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa (raw, json)
Hash identifier:          IuGkyTq98ROyS00ebMbe7yDBqgNo5UhJFqxd765M1D4=
Subject key identifier:   F9:EC:CA:41:8D:B2:03:53:94:8D:F9:10:B6:D5:1C:7E:74:50:D2:7C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146118C1B55D736A9C3FDB0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:11:8c:1b:55:d7:36:a9:c3:fd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=3fdc1ff2-23fb-42c3-92fa-4b0e886c084f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:99:06:9d:01:ed:18:1d:fd:0f:48:9e:ba:
                    f2:37:0b:c8:ed:e1:0a:a4:b9:e0:c7:23:28:9f:1b:
                    fc:45:2a:6f:6b:72:6d:36:78:9e:70:7e:62:ab:b1:
                    a9:44:66:24:b3:d1:88:d4:35:f4:cf:54:e1:82:2a:
                    50:47:e2:cc:b7:ca:4b:b1:e6:5e:9b:67:6d:56:5e:
                    07:82:0a:64:0d:55:a4:88:25:f4:c6:73:35:12:57:
                    05:8d:42:88:8e:b4:d4:61:dc:f8:d4:66:10:0b:31:
                    92:f3:d6:8f:2d:01:f2:d7:5d:80:53:87:16:51:4d:
                    79:d9:74:35:a9:49:02:48:59:42:01:ff:e8:ad:31:
                    58:32:4c:bc:c7:5a:1b:29:3c:11:40:ac:73:4c:16:
                    4d:61:62:1a:f0:68:50:0f:3e:14:54:75:00:e4:fc:
                    77:b2:d9:e9:c8:6b:48:9c:8a:14:bf:15:07:e4:c5:
                    ce:bf:3f:62:60:a2:46:9e:05:05:d7:6e:99:e1:5b:
                    01:d4:46:3a:c8:7c:37:80:03:39:2a:fa:73:1a:52:
                    33:ff:7e:6f:b5:06:52:88:65:17:44:5c:d3:c9:ca:
                    a0:33:16:27:c8:e9:06:e4:47:66:ef:60:79:29:d1:
                    41:12:b0:d1:c5:84:c7:c5:d2:73:44:12:fd:af:f8:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EC:CA:41:8D:B2:03:53:94:8D:F9:10:B6:D5:1C:7E:74:50:D2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:16:9f:0f:e3:0a:79:81:96:23:7f:29:84:5a:6b:59:6b:
         3c:79:02:b4:e9:15:d7:4c:cc:c2:ed:12:01:fb:30:20:ab:ae:
         b5:49:38:ed:ba:de:ca:f4:66:9d:7c:9c:85:bd:58:ff:10:d4:
         d8:35:d5:e5:ed:51:28:d8:aa:bb:fe:2a:e8:dc:03:df:8a:c9:
         6c:fe:f7:8a:7c:65:7e:9d:8e:37:38:b9:aa:6d:4a:2f:85:2b:
         a6:16:86:81:b9:c9:d4:e3:e4:96:c4:4f:16:e6:ec:26:67:f4:
         5a:15:56:fb:98:04:60:37:16:09:10:c3:d3:7a:ec:88:40:ad:
         26:c5:bc:45:2c:85:dd:8a:49:25:8b:8b:4d:4d:25:3e:df:e9:
         27:4f:57:86:cf:e1:6f:f2:a9:64:7b:0a:e3:86:4e:80:5a:c7:
         9b:3a:bc:2c:75:f1:19:43:5a:f2:2b:86:0f:5a:24:dc:49:b1:
         e9:10:45:18:43:8c:c9:c4:c0:37:9e:f1:ea:2c:fc:0f:c8:fb:
         7d:d9:12:bc:3f:0b:4e:ea:f7:a1:6a:aa:49:07:43:a1:93:42:
         c7:19:0f:88:0d:4a:43:cd:c1:cf:fa:d9:7b:be:c0:3e:86:b1:
         d5:a8:ac:b8:15:c9:22:54:c6:1e:4b:cc:96:59:36:71:11:af:
         64:ec:bc:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhGMG1XXNqnD/bAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
M2ZkYzFmZjItMjNmYi00MmMzLTkyZmEtNGIwZTg4NmMwODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql+ZBp0B7Rgd/Q9InrryNwvI7eEKpLngxyMo
nxv8RSpva3JtNniecH5iq7GpRGYks9GI1DX0z1ThgipQR+LMt8pLseZem2dtVl4H
ggpkDVWkiCX0xnM1ElcFjUKIjrTUYdz41GYQCzGS89aPLQHy112AU4cWUU152XQ1
qUkCSFlCAf/orTFYMky8x1obKTwRQKxzTBZNYWIa8GhQDz4UVHUA5Px3stnpyGtI
nIoUvxUH5MXOvz9iYKJGngUF126Z4VsB1EY6yHw3gAM5KvpzGlIz/35vtQZSiGUX
RFzTycqgMxYnyOkG5Edm72B5KdFBErDRxYTHxdJzRBL9r/huQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnsykGNsgNTlI35ELbVHH50UNJ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTBlMWEyYTgtZWM1ZC0z
YmRmLTliMmQtYWIxOGJkMDk4ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtMFp8P4wp5gZYjfymEWmtZazx5ArTpFddMzMLtEgH7MCCrrrVJOO26
3sr0Zp18nIW9WP8Q1Ng11eXtUSjYqrv+KujcA9+KyWz+94p8ZX6djjc4uaptSi+F
K6YWhoG5ydTj5JbETxbm7CZn9FoVVvuYBGA3FgkQw9N67IhArSbFvEUshd2KSSWL
i01NJT7f6SdPV4bP4W/yqWR7CuOGToBax5s6vCx18RlDWvIrhg9aJNxJsekQRRhD
jMnEwDee8eos/A/I+33ZErw/C07q96FqqkkHQ6GTQscZD4gNSkPNwc/62Xu+wD6G
sdWorLgVySJUxh5LzJZZNnERr2TsvCg=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:11 2025 by rpki-client