Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa
File:                     7540b130-6fba-38b7-8963-c3b1a53f826e.roa (raw, json)
Hash identifier:          4jLPRzKlwmDH43E7eq05BnbzmHSdU01tdKUtqJHRJZs=
Subject key identifier:   8E:A1:80:E8:05:EB:47:EF:9B:AA:B0:0B:38:00:17:CB:74:D2:7E:06
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81460B4BDC68EA342B641A00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:0b:4b:dc:68:ea:34:2b:64:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=a24000b6-19bd-4669-8041-6119b1eef696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:92:29:df:96:d7:4a:b2:0f:cd:3e:6e:58:
                    ca:91:07:44:48:34:46:55:50:4b:73:30:ce:29:e4:
                    31:9c:50:c9:40:41:4e:f0:84:82:47:20:c1:ee:ad:
                    fa:4c:87:a9:ac:89:48:8d:6b:1a:1a:88:b5:ea:b6:
                    00:d3:8b:23:f2:d9:2d:1b:b5:85:bf:d6:fe:3f:97:
                    d1:0c:c6:69:2b:47:9e:56:c0:bd:5b:ce:9c:6d:c5:
                    53:e6:c1:1b:af:03:ef:2e:9b:d4:2b:4e:53:3e:cd:
                    ae:9e:9e:1b:07:2a:89:01:08:5f:36:d3:fe:f3:dd:
                    95:0b:40:6d:08:06:3f:32:07:03:15:cb:03:98:c5:
                    ee:9b:e0:93:1d:9c:99:75:32:8b:95:7c:c4:4c:a4:
                    91:83:ad:b2:dc:b7:9f:1e:d7:a2:67:2d:4c:9a:f9:
                    cb:e7:f2:61:58:44:76:29:71:4e:45:f6:b1:dc:66:
                    29:cb:8c:b3:52:ef:28:82:12:e2:fc:99:b8:f5:6c:
                    3e:72:88:5d:bf:88:6f:53:ba:d9:ba:c2:c3:50:08:
                    b5:10:74:8b:82:2c:71:29:37:b2:24:c5:1e:64:34:
                    cf:9c:c3:e2:c5:49:d9:46:04:0c:91:41:eb:3d:c5:
                    fe:1b:b2:aa:da:72:ec:2d:c7:79:b4:ae:34:f9:7f:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A1:80:E8:05:EB:47:EF:9B:AA:B0:0B:38:00:17:CB:74:D2:7E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:37:31:e7:f6:e4:5e:cb:a0:03:d5:57:b8:9b:4c:2c:5b:6d:
         b2:4a:ea:25:e5:13:dc:97:fb:fb:24:8f:98:a2:11:ed:e6:a6:
         aa:93:5e:d5:1b:f2:d9:76:a5:b9:cd:97:81:4b:f9:cd:14:1d:
         b3:60:41:22:83:18:3e:a5:f0:63:d9:69:b3:c6:31:d5:60:8f:
         8a:ab:48:1c:2c:34:7e:21:35:7b:df:ad:47:2d:d1:e8:d4:4d:
         23:58:ba:8a:ec:55:8f:22:b9:ae:d1:2f:c0:65:4d:20:4b:c5:
         1c:54:6c:c3:bd:65:31:a6:4f:33:a3:34:44:97:78:49:7f:a9:
         1f:91:1f:d1:43:54:d0:e3:21:eb:09:37:98:a8:6f:61:3b:3d:
         b5:7c:43:b7:bb:8d:c9:38:fb:e9:79:b0:09:1f:c6:39:4b:3e:
         09:06:37:24:f2:18:9f:71:92:4c:a5:5c:28:01:60:8e:0d:33:
         2d:ea:6a:e4:f6:11:d5:d4:68:6c:68:2b:a7:c6:14:1d:10:55:
         71:7c:29:2e:ca:a9:1d:a9:25:fa:0c:e9:89:e5:09:f9:5a:25:
         d3:6c:47:12:42:07:04:83:73:9f:b6:45:65:cf:a5:25:a9:2d:
         0d:09:04:4e:86:da:4d:26:c8:db:fd:ad:06:0c:2c:2b:e3:ec:
         65:a1:d8:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgtL3GjqNCtkGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
YTI0MDAwYjYtMTliZC00NjY5LTgwNDEtNjExOWIxZWVmNjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7GSKd+W10qyD80+bljKkQdESDRGVVBLczDO
KeQxnFDJQEFO8ISCRyDB7q36TIeprIlIjWsaGoi16rYA04sj8tktG7WFv9b+P5fR
DMZpK0eeVsC9W86cbcVT5sEbrwPvLpvUK05TPs2unp4bByqJAQhfNtP+892VC0Bt
CAY/MgcDFcsDmMXum+CTHZyZdTKLlXzETKSRg62y3LefHteiZy1MmvnL5/JhWER2
KXFORfax3GYpy4yzUu8oghLi/Jm49Ww+cohdv4hvU7rZusLDUAi1EHSLgixxKTey
JMUeZDTPnMPixUnZRgQMkUHrPcX+G7Kq2nLsLcd5tK40+X9jfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6hgOgF60fvm6qwCzgAF8t00n4GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzU0MGIxMzAtNmZiYS0z
OGI3LTg5NjMtYzNiMWE1M2Y4MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFI3Mef25F7LoAPVV7ibTCxbbbJK6iXlE9yX+/skj5iiEe3mpqqTXtUb
8tl2pbnNl4FL+c0UHbNgQSKDGD6l8GPZabPGMdVgj4qrSBwsNH4hNXvfrUct0ejU
TSNYuorsVY8iua7RL8BlTSBLxRxUbMO9ZTGmTzOjNESXeEl/qR+RH9FDVNDjIesJ
N5iob2E7PbV8Q7e7jck4++l5sAkfxjlLPgkGNyTyGJ9xkkylXCgBYI4NMy3qauT2
EdXUaGxoK6fGFB0QVXF8KS7KqR2pJfoM6YnlCflaJdNsRxJCBwSDc5+2RWXPpSWp
LQ0JBE6G2k0myNv9rQYMLCvj7GWh2IU=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:11 2025 by rpki-client