Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa
File:                     85637620-9689-35f2-8e85-75b58e890791.roa (raw, json)
Hash identifier:          IAasCtQGDzjJgtZgZpiAWkdPERSN+liDSBDIHe4Quvw=
Subject key identifier:   F1:55:F4:63:47:10:EE:4D:5E:5F:76:D3:B0:36:70:42:05:3C:CC:54
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814610112E3773B42C8D4F20
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:10:11:2e:37:73:b4:2c:8d:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=07a47367-96c8-4ca8-aae3-33c31c95f7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:20:34:c0:93:54:62:69:05:7e:42:d7:d3:
                    46:c0:26:91:d1:ba:97:7c:24:01:d7:d9:59:cd:e9:
                    da:51:4e:3d:3a:02:d4:0f:31:2b:ae:d2:09:6e:c6:
                    e0:d8:ad:00:ff:0c:ec:fe:30:d9:ca:7e:05:36:76:
                    bf:85:51:86:1a:c0:3d:71:16:92:93:bd:c5:37:8f:
                    4b:dd:b5:88:af:dd:0d:f2:24:3a:c4:a8:8a:64:c8:
                    3d:5d:e4:31:ef:34:b4:a8:bd:e2:54:45:07:ac:f1:
                    e8:62:fa:02:10:1b:2a:e7:17:05:dc:0f:87:e8:13:
                    96:18:e9:50:7f:6a:51:47:b5:64:e2:c0:d5:d1:2e:
                    50:ee:96:6c:18:03:87:c1:9c:f5:32:49:04:2d:bf:
                    fa:78:de:40:91:f6:64:3d:b4:1d:ca:9a:9f:43:2b:
                    e7:ee:36:08:a4:e9:3e:c7:5b:5b:0d:ae:67:7c:e3:
                    9e:89:5f:9e:3f:4f:b4:59:c5:20:12:c7:81:c0:e0:
                    be:42:40:00:df:a4:0a:fb:7c:0b:bc:29:f3:94:dc:
                    81:f3:5d:43:d0:24:62:5d:1b:4f:cd:1d:06:6e:0b:
                    9f:dc:71:64:75:1c:3d:3c:8d:8d:17:cd:39:e9:33:
                    bc:27:46:be:b1:57:ed:84:99:90:f8:12:5a:7a:b5:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:55:F4:63:47:10:EE:4D:5E:5F:76:D3:B0:36:70:42:05:3C:CC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:34:88:34:c9:40:84:55:0e:a8:3e:ea:fc:33:18:ae:f6:5c:
         e0:37:a0:1b:3e:65:0e:fc:58:67:dd:52:90:48:2e:d1:36:5e:
         c0:6b:db:e5:32:86:f4:30:bb:04:1c:2b:ad:b4:18:0c:60:eb:
         2f:cd:b0:c2:ed:6e:86:f1:de:34:8c:1e:40:22:4c:1a:29:38:
         94:c6:5f:d2:7d:10:24:36:38:84:b4:fe:8c:02:33:bc:ce:fc:
         87:e8:2c:cf:6a:fd:a9:a4:41:d7:af:e6:e3:c5:d9:90:f6:d0:
         2d:bc:87:ef:67:b7:fb:c8:1f:81:b3:1e:90:b4:46:b5:e8:24:
         3a:54:39:79:eb:6f:70:5a:24:7b:40:86:fe:95:83:2a:89:62:
         c4:f6:5d:fa:2b:0f:c0:c6:2a:08:8e:7b:f0:01:6b:a6:0a:92:
         0c:b1:9f:a0:2c:3d:bd:5d:a7:12:d2:8f:35:16:5e:b0:32:00:
         83:2f:9f:9b:51:af:f7:8d:1e:5a:b2:d3:fd:26:51:ab:b7:b6:
         c5:c8:5f:96:14:e9:db:8b:a3:8e:59:97:4d:2b:c2:c6:67:2c:
         37:5c:dd:8e:51:3e:ea:cb:3e:b9:da:3d:30:20:fc:cc:9f:9f:
         91:44:92:4a:89:d1:7d:04:21:cb:0a:10:30:e6:12:f8:9c:42:
         cb:9e:ce:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:27 2025 by rpki-client