Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65cd12ed-93b1-31ca-9d56-0eadeff0deda.roa
File:                     65cd12ed-93b1-31ca-9d56-0eadeff0deda.roa (raw, json)
Hash identifier:          OGqleHuePEMZf18njqT6/agotz18emuiX992xR6yaxY=
Subject key identifier:   C1:0A:E9:54:A6:3C:E6:7E:A7:55:3C:20:E7:E4:BA:15:4D:93:DA:D8
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814611D6F496F02723339F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65cd12ed-93b1-31ca-9d56-0eadeff0deda.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:11:d6:f4:96:f0:27:23:33:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=09d5e094-c14c-4d4b-8b06-6bc15255ab21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:b9:ad:6e:ea:8d:95:1e:ec:1e:bb:e6:9e:
                    49:e4:6e:fc:45:63:8f:76:25:5a:cf:73:ac:0e:5a:
                    01:8e:6e:9e:4c:b3:52:d0:82:25:94:e2:8d:2d:9e:
                    42:0d:e4:49:c1:e1:ee:6e:33:e0:81:6b:00:fc:46:
                    ae:88:26:fd:d9:cb:c4:32:0b:c3:9a:bf:e2:b6:6a:
                    38:6b:73:b5:00:3c:64:51:2c:e7:24:b2:dd:00:28:
                    06:6e:8a:d3:bb:ea:1b:12:0d:d7:6a:87:79:8d:e2:
                    6d:f9:96:89:6c:aa:eb:0d:73:db:1a:9f:40:30:36:
                    83:ee:de:ea:d6:bd:7b:a4:68:f5:6c:19:a8:fc:1a:
                    e9:97:f1:77:2b:91:cc:7c:20:4a:6c:8c:9f:e0:96:
                    f6:04:f9:3a:92:0f:8a:c5:76:f0:80:da:93:c2:27:
                    b5:4a:8b:24:55:e9:88:cb:ed:0a:a3:3c:01:42:92:
                    56:24:70:04:90:0e:16:1a:de:f6:a5:dd:f6:3d:70:
                    9d:4f:13:9e:f5:06:ec:54:dd:d0:29:ac:54:84:0d:
                    fb:45:df:d4:bb:c6:81:61:7d:f3:0c:95:dc:c0:21:
                    aa:05:2d:34:6b:08:ff:fe:09:5c:f6:0a:fb:55:2b:
                    b6:b4:39:a9:4e:31:ca:37:f7:72:91:f7:ef:41:1c:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0A:E9:54:A6:3C:E6:7E:A7:55:3C:20:E7:E4:BA:15:4D:93:DA:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65cd12ed-93b1-31ca-9d56-0eadeff0deda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:23:ec:0f:13:ee:f9:14:6c:c0:01:7a:01:0b:d6:db:d1:dc:
         fc:66:41:0e:f5:22:3a:82:06:d4:37:9b:70:2c:7f:0b:79:05:
         3d:1e:98:3e:dc:fc:81:81:9b:e8:be:3b:ba:68:6c:f6:83:f2:
         8f:b9:70:8d:78:86:b9:3a:e6:31:b8:4b:4a:21:d1:62:4a:25:
         01:92:77:ac:30:36:31:e6:71:28:31:02:c7:e6:c1:13:43:0e:
         a8:a4:9f:57:13:d6:e9:3e:ff:8a:f0:e8:a0:9f:62:8a:f8:27:
         1c:fb:89:b5:0e:fa:12:58:83:4f:41:d2:00:7a:75:50:83:76:
         15:52:76:a1:91:f3:6d:08:f9:1d:0e:35:95:b3:4a:35:00:ac:
         9d:63:70:af:62:0c:99:16:ab:59:45:8c:c2:94:4f:06:1c:5b:
         33:0e:00:26:da:cc:5a:f3:0e:79:85:de:d4:55:0b:54:2b:3c:
         e9:0d:31:54:eb:58:d3:86:37:fd:5c:d7:72:2d:49:ce:9b:e5:
         48:ce:1c:c5:1c:39:07:e7:a6:77:5d:cb:f2:a6:a3:66:55:0f:
         5b:00:c4:d2:fb:fe:4a:07:c1:74:ed:d0:58:e0:bc:5d:f0:7e:
         1e:35:d2:5f:99:32:27:8c:1c:57:f6:0b:02:b3:74:30:ba:16:
         d4:43:9c:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhHW9JbwJyMznwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
MDlkNWUwOTQtYzE0Yy00ZDRiLThiMDYtNmJjMTUyNTVhYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBu5rW7qjZUe7B675p5J5G78RWOPdiVaz3Os
DloBjm6eTLNS0IIllOKNLZ5CDeRJweHubjPggWsA/EauiCb92cvEMgvDmr/itmo4
a3O1ADxkUSznJLLdACgGborTu+obEg3Xaod5jeJt+ZaJbKrrDXPbGp9AMDaD7t7q
1r17pGj1bBmo/Brpl/F3K5HMfCBKbIyf4Jb2BPk6kg+KxXbwgNqTwie1SoskVemI
y+0KozwBQpJWJHAEkA4WGt72pd32PXCdTxOe9QbsVN3QKaxUhA37Rd/Uu8aBYX3z
DJXcwCGqBS00awj//glc9gr7VSu2tDmpTjHKN/dykffvQRwPywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEK6VSmPOZ+p1U8IOfkuhVNk9rYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjVjZDEyZWQtOTNiMS0z
MWNhLTlkNTYtMGVhZGVmZjBkZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYj7A8T7vkUbMABegEL1tvR3PxmQQ71IjqCBtQ3m3Asfwt5BT0emD7c
/IGBm+i+O7pobPaD8o+5cI14hrk65jG4S0oh0WJKJQGSd6wwNjHmcSgxAsfmwRND
Dqikn1cT1uk+/4rw6KCfYor4Jxz7ibUO+hJYg09B0gB6dVCDdhVSdqGR820I+R0O
NZWzSjUArJ1jcK9iDJkWq1lFjMKUTwYcWzMOACbazFrzDnmF3tRVC1QrPOkNMVTr
WNOGN/1c13ItSc6b5UjOHMUcOQfnpnddy/Kmo2ZVD1sAxNL7/koHwXTt0FjgvF3w
fh410l+ZMieMHFf2CwKzdDC6FtRDnOw=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:24:09 2025 by rpki-client