Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa
File:                     aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa (raw, json)
Hash identifier:          ZIp13BwzzWlo/V+gcUHb6DOi8tYhFcmABoss5pqWXgE=
Subject key identifier:   A2:2A:64:FB:4C:86:BF:88:68:CF:D4:97:F9:71:BA:07:32:CE:FF:93
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146091CF63A09B72CF29400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:09:1c:f6:3a:09:b7:2c:f2:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=46dd59e4-0060-4254-a50c-f25499c8235f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:28:dd:a3:7a:3c:e2:94:86:1d:dc:bf:78:
                    91:73:49:f2:c5:4f:d5:07:fc:e9:53:f3:1b:90:2b:
                    2e:81:73:f5:1c:2e:be:5a:e3:6c:ba:6f:17:96:f2:
                    e9:14:44:c1:68:39:9f:61:d7:b7:cd:f6:9d:bf:65:
                    2b:62:90:24:5a:0a:8d:f0:a3:a7:53:8e:f1:97:9e:
                    0d:e2:c0:cf:5a:ef:e8:bb:08:17:e6:bf:ba:35:d4:
                    57:93:2f:76:8a:19:71:c0:f8:aa:d6:d5:b1:54:d9:
                    6a:d9:5b:79:7b:ba:b2:75:ca:74:e0:a8:e8:0f:71:
                    2f:12:19:84:e7:3c:f7:bf:7c:5c:0e:d3:14:78:dc:
                    49:e3:67:ba:a8:c8:fe:15:be:4e:a9:7c:c1:ee:6c:
                    22:59:2b:be:86:15:45:db:d1:6f:9d:76:15:aa:4c:
                    ad:d5:24:5a:1b:97:99:88:5e:78:6d:a7:d0:2f:c5:
                    9b:43:d0:ad:62:21:96:8b:36:3b:f4:16:84:31:9f:
                    c0:7c:34:71:b8:bd:da:d5:30:8a:f6:0e:8a:d6:4a:
                    ce:b4:21:48:4b:37:3c:26:ea:33:de:8c:9f:b5:7a:
                    82:21:40:ff:92:44:f8:ac:9a:d1:4d:f3:a7:e5:8e:
                    d8:b3:d4:14:80:f1:d4:5a:bc:d0:a6:92:da:a9:0b:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2A:64:FB:4C:86:BF:88:68:CF:D4:97:F9:71:BA:07:32:CE:FF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:05:4e:37:4e:92:65:68:53:d4:46:0e:2b:d1:68:41:1d:
         cf:e3:38:ed:3d:f6:55:5f:9c:0e:8b:97:71:f7:07:98:af:c3:
         54:d3:60:2b:91:e5:81:ca:cd:56:02:8c:d9:52:93:8f:01:59:
         11:3f:b7:79:90:58:56:0a:f5:2d:32:63:31:86:97:fe:cc:21:
         e3:c8:ec:f8:7c:48:89:7e:53:52:65:82:a3:14:fd:ff:09:c6:
         63:68:43:a0:3d:88:e1:da:fd:f1:17:c2:a8:61:0b:41:15:f2:
         b0:1c:af:dc:d1:d3:6f:ba:93:c7:25:10:91:c6:72:17:8e:73:
         49:80:9c:a0:fc:73:d0:f5:0b:cb:91:45:43:ea:22:ca:0c:29:
         20:f8:c7:02:75:15:fa:75:92:e5:29:31:68:57:40:48:0a:46:
         89:ad:c0:dd:74:56:e0:5f:92:89:60:3b:dd:73:08:33:60:c3:
         8c:53:3f:a9:17:8a:1b:b9:44:77:1b:72:65:96:a1:48:73:e1:
         01:ad:b8:07:75:8e:c7:c4:55:b1:17:35:4f:67:72:e2:e3:ce:
         94:f2:a7:ed:f6:b2:99:15:63:04:4a:3e:30:37:7b:21:47:0b:
         9d:0d:fd:26:fb:11:9d:4e:06:1b:6e:59:f1:38:f9:46:8d:82:
         ae:f9:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:40 2025 by rpki-client