Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa
File:                     7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa (raw, json)
Hash identifier:          g3c0BTmwRB1HH5cEK1quFQ5ONV9GAEVCwGqxQ1lrEQ4=
Subject key identifier:   D3:E8:68:22:57:1F:23:4D:0D:00:16:C8:92:60:AF:B3:50:C0:D8:E4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814615D0FEF83B7C454CD260
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:15:d0:fe:f8:3b:7c:45:4c:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=17537824-850f-4c3b-95b5-ba22986a5a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:18:a3:a0:da:0f:d8:9d:53:e2:1d:69:90:
                    74:12:a0:df:e6:b5:37:44:c3:76:9f:0d:f4:6b:73:
                    ac:1d:d0:18:cc:51:0e:5b:ac:dc:3d:f2:8f:2a:b4:
                    c0:ae:3a:4d:a2:a7:fd:d7:fe:12:da:1a:e8:e1:29:
                    37:c8:ff:cd:55:c5:ac:a5:c1:0d:84:4a:ae:7d:27:
                    fd:ac:6d:c4:d9:d8:77:be:90:8d:c6:80:26:60:64:
                    5b:cc:45:87:82:6e:f2:1f:ed:2f:cc:16:d8:8c:6c:
                    cf:ac:b4:9b:47:30:43:08:54:bd:41:0c:95:aa:48:
                    82:c4:a6:88:9e:76:c4:53:bf:5c:16:ac:37:ce:c9:
                    a7:18:24:d8:0b:dc:e4:8c:6b:14:06:01:8d:fa:3e:
                    8e:b7:26:cd:c9:97:ed:a0:ac:e2:ed:69:d5:4a:d3:
                    a4:91:1d:30:99:42:be:cb:48:f0:55:6a:a1:e8:3c:
                    c9:4d:8e:5f:f2:c7:1b:18:27:0e:3e:36:a4:80:89:
                    ee:06:37:3a:ed:32:c1:d9:79:72:a0:ca:bf:5d:50:
                    f6:92:ca:45:ec:bc:b9:cd:0b:48:8e:13:38:3a:e7:
                    4b:54:6c:b4:b5:83:56:68:b8:a0:ea:5a:7d:dc:05:
                    ab:af:07:37:b8:ce:c8:d8:61:8e:8b:85:b6:da:32:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E8:68:22:57:1F:23:4D:0D:00:16:C8:92:60:AF:B3:50:C0:D8:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d0:2a:82:a9:3c:9b:97:02:a2:ef:0e:eb:b2:e0:39:2e:24:
         bf:88:eb:9f:61:bc:6f:e4:df:3c:91:e7:96:4d:ac:6f:19:37:
         48:a5:4b:e1:b3:61:cf:93:aa:fd:bf:56:da:e6:5d:07:af:af:
         17:7b:8a:1a:15:96:d7:55:c1:e9:37:9e:33:4e:89:76:88:1b:
         1a:5a:b9:4b:11:04:99:05:9a:0f:c8:70:6e:55:68:79:03:7d:
         e9:48:72:20:8a:2d:f1:62:f3:77:58:ec:14:94:f0:bf:ae:8c:
         78:97:10:58:df:2e:8b:5f:42:c9:0c:3d:60:f4:81:41:69:b3:
         c9:2e:2c:60:51:b0:73:64:6b:3a:0a:7c:f0:ac:3e:8e:e0:cf:
         da:f0:24:83:8a:95:a8:f0:6d:c7:fc:bd:6f:93:aa:98:cc:02:
         f3:a1:a5:c5:7a:59:4f:7d:06:d1:bc:da:c9:61:1c:07:82:b9:
         88:97:7e:ec:88:37:cf:80:3e:43:82:20:38:ca:ba:14:0a:ea:
         d1:a8:9c:80:ba:91:11:37:1a:9d:f2:c8:d7:e1:e0:56:f9:25:
         7a:93:d7:6a:04:db:cc:64:29:f1:b9:13:11:4a:45:2c:f5:a8:
         01:db:1d:35:b2:3b:df:e7:e8:69:00:74:f5:2c:2a:98:93:22:
         3a:f2:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:26 2025 by rpki-client