Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/725eb92a-7b7a-3e55-a880-0d4fcb80887a.roa
File:                     725eb92a-7b7a-3e55-a880-0d4fcb80887a.roa (raw, json)
Hash identifier:          i9N93D/I8adye1W756mPgvrVJWT7kj226eWZqPlmig4=
Subject key identifier:   43:8F:7F:53:35:4C:8D:0B:27:10:20:9C:14:EA:37:8F:DF:27:33:F2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814619312212FCA2EBEFCD80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/725eb92a-7b7a-3e55-a880-0d4fcb80887a.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:19:31:22:12:fc:a2:eb:ef:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=4ea0e6a7-f9f2-401f-bca7-b31e8f53bb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:8f:37:53:5e:08:fd:89:f2:da:13:1f:0b:
                    dd:a0:6e:7f:f6:5d:c1:5b:0d:ce:4a:b0:78:60:10:
                    34:db:2e:e3:0c:42:54:71:61:7c:60:be:4a:bd:a0:
                    27:f3:e8:19:0d:b3:f5:1b:9c:18:ec:02:92:a7:2a:
                    c6:a6:ad:55:71:94:25:c5:b5:bb:df:ef:ee:d4:50:
                    3a:4d:62:64:3d:f7:07:86:b2:89:73:e4:84:36:5d:
                    ca:e8:9a:0a:28:62:6f:e4:b3:20:96:0f:33:36:ea:
                    eb:92:76:5c:6f:e5:4e:df:21:23:03:b7:0a:30:28:
                    49:06:af:77:d3:2c:da:5b:47:6c:9a:c2:af:48:79:
                    cf:4b:86:a1:36:c6:35:52:5f:48:6c:20:6e:eb:a1:
                    57:e6:32:a1:d9:cb:fe:fb:08:d5:44:24:bc:e3:cb:
                    58:cd:3e:17:fb:98:df:e5:81:25:94:95:8e:f9:cd:
                    7e:1f:a9:60:05:bc:85:e8:f1:d5:98:73:6e:f4:b7:
                    b4:c0:83:6a:ba:63:ea:5a:65:c8:49:be:0b:54:c5:
                    f7:58:bc:17:3b:e0:ee:af:0b:53:d1:3c:1a:ba:f0:
                    39:a2:eb:e2:f7:7c:b9:78:1e:63:61:bf:eb:c9:38:
                    bd:bc:32:ec:c9:ab:5b:6c:8d:a4:72:e4:51:29:c7:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8F:7F:53:35:4C:8D:0B:27:10:20:9C:14:EA:37:8F:DF:27:33:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/725eb92a-7b7a-3e55-a880-0d4fcb80887a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:c2:c8:2b:4d:82:12:f4:ef:4d:6d:13:f7:5f:92:cf:44:
         01:09:75:62:d3:9b:9d:93:5f:39:5a:fa:0f:5c:87:b7:b7:7a:
         80:55:b3:d2:d1:76:12:a6:8e:93:c3:9a:d1:b0:ed:6d:ad:b6:
         fd:87:d2:d0:4f:3e:0d:64:bc:94:56:ef:6b:22:3d:81:87:11:
         b5:c0:62:8a:fe:e1:c2:af:5a:59:d5:cd:c1:e1:52:01:b9:82:
         a4:48:78:e4:dd:16:43:8c:e6:fb:7e:30:f9:a6:3c:a4:27:29:
         12:89:93:b1:57:11:e7:9a:b1:a8:2c:d5:c8:12:55:3b:4b:4d:
         94:3f:72:ec:13:51:73:38:15:b0:60:4c:76:0a:47:d7:48:49:
         d8:7e:9c:0a:c2:e6:1f:a6:4e:95:e6:88:87:77:ec:67:e9:a0:
         19:44:c5:f9:96:62:83:f1:51:ff:2e:b0:ca:64:58:94:d4:d5:
         8d:45:cc:c3:a5:be:7c:e5:31:16:8a:96:28:af:c0:cc:b7:46:
         93:a1:76:b0:4d:ca:85:a2:24:87:96:13:88:b7:bc:64:c6:f0:
         2e:20:7b:1b:0f:49:0f:6b:bd:4b:86:3c:d2:14:04:3b:f2:1c:
         e9:e0:e3:5b:b8:7b:f4:fb:56:2f:c4:9e:48:d7:05:67:d7:7b:
         42:e1:4f:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhkxIhL8ouvvzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NGVhMGU2YTctZjlmMi00MDFmLWJjYTctYjMxZThmNTNiYjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4uPN1NeCP2J8toTHwvdoG5/9l3BWw3OSrB4
YBA02y7jDEJUcWF8YL5KvaAn8+gZDbP1G5wY7AKSpyrGpq1VcZQlxbW73+/u1FA6
TWJkPfcHhrKJc+SENl3K6JoKKGJv5LMglg8zNurrknZcb+VO3yEjA7cKMChJBq93
0yzaW0dsmsKvSHnPS4ahNsY1Ul9IbCBu66FX5jKh2cv++wjVRCS848tYzT4X+5jf
5YEllJWO+c1+H6lgBbyF6PHVmHNu9Le0wINqumPqWmXISb4LVMX3WLwXO+DurwtT
0TwauvA5ouvi93y5eB5jYb/ryTi9vDLsyatbbI2kcuRRKcd1kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOPf1M1TI0LJxAgnBTqN4/fJzPyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzI1ZWI5MmEtN2I3YS0z
ZTU1LWE4ODAtMGQ0ZmNiODA4ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMNwsgrTYIS9O9NbRP3X5LPRAEJdWLTm52TXzla+g9ch7e3eoBVs9LR
dhKmjpPDmtGw7W2ttv2H0tBPPg1kvJRW72siPYGHEbXAYor+4cKvWlnVzcHhUgG5
gqRIeOTdFkOM5vt+MPmmPKQnKRKJk7FXEeeasags1cgSVTtLTZQ/cuwTUXM4FbBg
THYKR9dISdh+nArC5h+mTpXmiId37GfpoBlExfmWYoPxUf8usMpkWJTU1Y1FzMOl
vnzlMRaKliivwMy3RpOhdrBNyoWiJIeWE4i3vGTG8C4gexsPSQ9rvUuGPNIUBDvy
HOng41u4e/T7Vi/EnkjXBWfXe0LhTzk=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:04 2025 by rpki-client