Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60ab77bc-05c0-38a4-b37f-a1b1d47e8885.roa
File:                     60ab77bc-05c0-38a4-b37f-a1b1d47e8885.roa (raw, json)
Hash identifier:          zjD6COV0FcfT1XnxsgXNYkwmc6DmtXe+RoqHbXYhg28=
Subject key identifier:   1E:B9:BE:77:6D:A2:6B:76:DF:8A:AD:D0:EA:5C:43:EC:E7:BB:09:35
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A82AB3BD23A50F0ED793B3B40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60ab77bc-05c0-38a4-b37f-a1b1d47e8885.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     207266
IP address blocks:        65.22.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:3b:d2:3a:50:f0:ed:79:3b:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=5e35b1e0-6781-4e44-9425-cd463f4a7174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:45:93:07:dd:04:63:af:07:dc:58:57:eb:
                    85:cf:89:20:cb:c4:d6:22:2f:d4:a3:61:b5:62:53:
                    2f:97:f1:de:29:55:81:c4:d2:21:07:01:fb:b1:04:
                    82:f9:09:b5:95:e3:ac:93:ce:46:9b:1b:f7:c6:02:
                    ca:31:ef:f4:ce:4d:f7:c1:6a:b5:f9:93:9c:53:d7:
                    df:87:41:52:ae:9a:80:de:73:c7:52:4b:37:b5:3b:
                    4f:1e:c9:71:b0:3e:65:bc:e5:12:e1:28:f8:b9:fb:
                    ab:9d:9a:e9:85:51:6f:e2:35:35:64:d2:36:5d:59:
                    ef:8c:e2:fb:16:81:68:6a:d6:d8:32:2a:c0:1d:1a:
                    5b:67:a1:4b:47:b0:9f:38:c9:16:69:3f:e1:ba:2c:
                    89:43:40:66:ba:e2:7b:f9:bc:49:a2:85:92:2d:6f:
                    14:55:1d:a6:b4:ad:04:c2:7d:d1:82:b3:c6:6a:a4:
                    a3:1d:00:72:70:bb:d5:da:e0:36:78:ca:96:9d:9c:
                    2c:60:05:73:3e:33:bf:f5:5d:5b:ca:88:25:64:bd:
                    be:da:88:a4:f8:bb:a6:be:ff:db:f3:a5:9c:45:15:
                    01:0a:43:d8:6d:9b:1b:78:a3:aa:6f:37:30:85:eb:
                    89:a7:a7:fc:cc:b9:91:6a:8c:77:4f:2e:56:36:c9:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B9:BE:77:6D:A2:6B:76:DF:8A:AD:D0:EA:5C:43:EC:E7:BB:09:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60ab77bc-05c0-38a4-b37f-a1b1d47e8885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e1:52:9f:d3:81:df:7e:53:8a:00:bf:af:74:a8:05:41:42:
         fb:8a:a7:c9:4c:fd:a4:4e:ff:f9:5a:8e:69:61:6d:60:2b:a4:
         f5:3a:bb:88:0d:ac:e6:b1:5f:f0:f4:71:3f:66:a2:1f:b1:01:
         21:48:71:23:ef:e3:3c:82:a4:60:58:8f:28:66:78:c8:60:35:
         2f:1d:6e:ee:82:11:72:dc:d4:cd:7b:7c:f1:0d:ed:7f:74:29:
         db:a0:82:56:a6:15:cb:90:fc:37:e8:e1:e8:e3:77:a7:8f:41:
         fd:a6:f2:6c:f0:c1:e0:ef:bf:c3:22:4d:09:a1:df:c3:2e:1c:
         44:19:6d:19:0e:0e:3c:d4:ab:8a:a3:87:50:3b:9d:bf:24:8e:
         07:47:ea:0b:ee:4b:31:c6:70:d6:04:4b:a9:2d:e5:ae:9e:2f:
         7c:42:05:ed:ed:a7:ee:bb:a1:f2:32:23:87:88:98:64:4e:f9:
         9f:12:ff:de:8c:5b:37:0c:73:16:79:c2:e4:5b:ec:d6:c6:6e:
         4c:12:f0:c3:66:4e:c0:2a:a1:98:11:c8:71:07:11:60:0a:14:
         0e:3d:7c:1f:7c:d7:dd:78:c7:41:59:07:9b:95:e9:a7:b1:52:
         d9:8f:92:22:4d:c1:e6:47:8d:f9:8f:74:7a:5a:bc:bc:3a:68:
         91:4d:d2:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCqzvSOlDw7Xk7O0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk
NWUzNWIxZTAtNjc4MS00ZTQ0LTk0MjUtY2Q0NjNmNGE3MTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhVFkwfdBGOvB9xYV+uFz4kgy8TWIi/Uo2G1
YlMvl/HeKVWBxNIhBwH7sQSC+Qm1leOsk85Gmxv3xgLKMe/0zk33wWq1+ZOcU9ff
h0FSrpqA3nPHUks3tTtPHslxsD5lvOUS4Sj4ufurnZrphVFv4jU1ZNI2XVnvjOL7
FoFoatbYMirAHRpbZ6FLR7CfOMkWaT/huiyJQ0BmuuJ7+bxJooWSLW8UVR2mtK0E
wn3RgrPGaqSjHQBycLvV2uA2eMqWnZwsYAVzPjO/9V1byoglZL2+2oik+Lumvv/b
86WcRRUBCkPYbZsbeKOqbzcwheuJp6f8zLmRaox3Ty5WNsk4wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB65vndtomt234qt0OpcQ+znuwk1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjBhYjc3YmMtMDVjMC0z
OGE0LWIzN2YtYTFiMWQ0N2U4ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALzhUp/Tgd9+U4oAv690qAVBQvuKp8lM/aRO//lajmlhbWArpPU6u4gN
rOaxX/D0cT9moh+xASFIcSPv4zyCpGBYjyhmeMhgNS8dbu6CEXLc1M17fPEN7X90
KdugglamFcuQ/Dfo4ejjd6ePQf2m8mzwweDvv8MiTQmh38MuHEQZbRkODjzUq4qj
h1A7nb8kjgdH6gvuSzHGcNYES6kt5a6eL3xCBe3tp+67ofIyI4eImGRO+Z8S/96M
WzcMcxZ5wuRb7NbGbkwS8MNmTsAqoZgRyHEHEWAKFA49fB981914x0FZB5uV6aex
UtmPkiJNweZHjfmPdHpavLw6aJFN0qQ=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:57 2025 by rpki-client