Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa
File:                     5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa (raw, json)
Hash identifier:          LBouNdsDA4HRRyL3Tj4n7s7A/ylt0HCeDjWQXYpl15M=
Subject key identifier:   D1:CF:76:2C:4E:34:9C:1E:98:2D:10:FC:C1:3E:45:7F:AF:D4:DD:18
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814613DECA91AB0037BD20B4
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:13:de:ca:91:ab:00:37:bd:20:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=4f8cd133-1ee0-44b2-af7e-ff9afde6a4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:88:8c:7a:5f:37:84:b1:ad:25:e9:92:99:
                    7c:4a:93:04:c2:ca:c4:e2:1c:2d:12:65:a3:27:fc:
                    c1:e8:4f:6a:06:45:60:e3:30:50:df:3a:2b:a3:9a:
                    29:d8:c4:39:62:d5:ab:58:e3:4b:16:52:51:b9:66:
                    c2:81:e8:f2:ea:0f:77:5f:61:1d:a8:f0:f9:d8:f8:
                    54:2c:f4:cc:f0:15:a8:6c:04:f0:f6:5d:e2:b1:16:
                    97:d6:dd:c2:30:13:ee:58:34:f9:52:57:24:bf:03:
                    26:79:d4:4d:47:05:fb:35:ee:5f:07:dc:8f:17:c6:
                    72:79:f5:b4:1e:6c:59:73:b0:20:e1:6d:f4:0f:d0:
                    02:6a:f6:4e:c8:f3:53:9b:de:18:fe:a5:34:cf:75:
                    a7:31:76:dd:66:d8:55:68:c9:6b:31:03:2d:8b:ab:
                    d9:e3:c0:37:cd:6a:91:2b:b7:ee:42:b6:ce:44:22:
                    61:ad:e8:88:2b:e5:df:eb:c4:cc:06:cb:f4:c0:a6:
                    af:7d:75:11:ff:4d:86:3c:7f:04:07:47:fb:b5:3b:
                    1f:9f:6b:5a:39:13:82:b7:a4:03:c0:bb:5f:42:b1:
                    37:cc:95:a5:d4:79:0e:99:09:62:3c:be:a3:27:1f:
                    dc:c5:2e:08:38:36:21:df:42:5a:06:13:f6:76:92:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CF:76:2C:4E:34:9C:1E:98:2D:10:FC:C1:3E:45:7F:AF:D4:DD:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:82:d0:ce:f7:32:5c:3e:32:c4:7c:bf:e5:fe:ad:60:21:
         50:2a:6a:81:7b:58:11:ab:25:78:1a:aa:de:36:e1:f5:c9:ac:
         c4:f8:79:31:57:2d:cd:5c:48:b8:17:02:bb:9a:22:58:78:ff:
         99:d6:e7:21:99:ef:91:92:4c:0f:c2:29:89:35:43:8a:88:4b:
         78:22:68:69:d1:f0:95:dd:68:da:0f:71:9a:0a:53:80:20:2a:
         fe:98:22:99:80:73:04:55:41:cb:83:25:e9:87:ca:43:94:b9:
         17:7e:61:db:f0:4b:92:86:68:45:c5:6f:51:1d:00:e7:44:16:
         46:27:10:cc:15:af:5f:9e:f8:80:ba:91:e3:4a:fb:86:82:e9:
         45:27:84:89:06:18:62:2e:d3:4b:bc:69:6b:2c:b3:70:0a:a0:
         f8:2f:bb:c7:54:8e:2e:8e:65:00:53:6a:2a:f2:45:7f:dd:74:
         08:81:20:d5:73:cf:a0:05:33:03:d9:68:df:37:38:c7:90:e1:
         ff:c2:28:c4:b4:80:91:2f:3f:a3:00:16:df:c4:15:21:36:84:
         ce:ae:65:b5:2f:e9:96:c2:60:4b:66:37:42:c7:db:0d:a1:0c:
         d6:d4:81:95:73:8a:8a:6e:85:48:b3:32:0a:68:00:f3:e0:7c:
         3e:f0:06:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhPeypGrADe9ILQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NGY4Y2QxMzMtMWVlMC00NGIyLWFmN2UtZmY5YWZkZTZhNGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu2IjHpfN4SxrSXpkpl8SpMEwsrE4hwtEmWj
J/zB6E9qBkVg4zBQ3zoro5op2MQ5YtWrWONLFlJRuWbCgejy6g93X2EdqPD52PhU
LPTM8BWobATw9l3isRaX1t3CMBPuWDT5UlckvwMmedRNRwX7Ne5fB9yPF8ZyefW0
HmxZc7Ag4W30D9ACavZOyPNTm94Y/qU0z3WnMXbdZthVaMlrMQMti6vZ48A3zWqR
K7fuQrbORCJhreiIK+Xf68TMBsv0wKavfXUR/02GPH8EB0f7tTsfn2taOROCt6QD
wLtfQrE3zJWl1HkOmQliPL6jJx/cxS4IODYh30JaBhP2dpIM9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHPdixONJwemC0Q/ME+RX+v1N0YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWYxNmUwYzUtMTE1ZC0z
NDY3LTgwNzEtY2NkNmZkNjBlNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPKgtDO9zJcPjLEfL/l/q1gIVAqaoF7WBGrJXgaqt424fXJrMT4eTFX
Lc1cSLgXAruaIlh4/5nW5yGZ75GSTA/CKYk1Q4qIS3giaGnR8JXdaNoPcZoKU4Ag
Kv6YIpmAcwRVQcuDJemHykOUuRd+YdvwS5KGaEXFb1EdAOdEFkYnEMwVr1+e+IC6
keNK+4aC6UUnhIkGGGIu00u8aWsss3AKoPgvu8dUji6OZQBTairyRX/ddAiBINVz
z6AFMwPZaN83OMeQ4f/CKMS0gJEvP6MAFt/EFSE2hM6uZbUv6ZbCYEtmN0LH2w2h
DNbUgZVziopuhUizMgpoAPPgfD7wBgo=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:04:37 2025 by rpki-client