Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8c00c12-6939-309f-b210-86cf5553babd.roa
File:                     b8c00c12-6939-309f-b210-86cf5553babd.roa (raw, json)
Hash identifier:          U0GXxoHJI/I3TSb0t9QRE6NF9sJwpAIKGtjaE8d70EI=
Subject key identifier:   D0:31:AB:FD:FF:4D:6E:59:E5:FC:E1:48:7F:26:6A:9C:86:45:65:B5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814615F6F5DD745CD25EF200
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8c00c12-6939-309f-b210-86cf5553babd.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:15:f6:f5:dd:74:5c:d2:5e:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=77f5c825-b06d-48db-b6c2-9b2dd1f21f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:97:3c:63:8d:0c:e6:d7:cc:61:3b:58:53:
                    8b:60:74:25:70:82:2d:1a:12:d0:a8:d4:55:73:e1:
                    cd:ee:fb:05:fe:9d:d5:f2:79:89:58:57:8a:13:ee:
                    46:e2:ad:32:98:9d:78:7e:36:8f:1f:0e:92:9f:c8:
                    1f:ee:1d:66:e9:1c:e6:81:cb:ad:ae:75:91:30:d4:
                    b1:c0:74:b7:fb:1a:8e:5b:88:7f:b4:96:4d:2e:cf:
                    20:b6:1d:3f:8e:d7:43:64:35:6b:e4:1a:dd:48:c8:
                    60:8a:24:ea:fd:89:be:50:55:66:8f:56:fd:35:60:
                    c9:df:0f:36:52:2b:d2:b1:c4:68:8f:47:ba:98:c4:
                    e5:f6:db:4a:d9:14:3c:1d:72:0a:9d:27:ab:70:06:
                    d9:cc:44:0c:60:da:ed:8e:25:75:57:84:57:d7:97:
                    b7:74:58:47:e1:70:c9:93:3b:38:15:01:e8:f8:62:
                    f9:df:8f:95:e9:60:9d:54:9e:5f:8e:5a:a5:50:95:
                    1e:e7:e9:a0:83:05:6e:ed:c8:d0:a5:a4:d3:47:d0:
                    6d:c9:a2:42:73:54:78:75:53:df:82:35:5b:7b:25:
                    fe:6c:90:be:37:de:4e:eb:04:cb:89:f0:c6:7c:67:
                    7b:b6:c1:e2:be:60:07:e4:b2:a9:8b:98:5e:c1:de:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:31:AB:FD:FF:4D:6E:59:E5:FC:E1:48:7F:26:6A:9C:86:45:65:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8c00c12-6939-309f-b210-86cf5553babd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:4c:af:f5:12:83:72:65:6d:d0:e2:33:03:fc:8b:ee:63:52:
         2a:f4:73:49:f4:48:d8:b9:75:ec:50:16:ae:81:21:f9:75:51:
         68:d2:1f:75:56:a2:50:aa:f6:ae:de:19:cb:e5:96:13:ef:75:
         22:1b:2e:e1:be:13:d8:37:da:33:65:b7:e5:d9:da:b8:a1:ef:
         53:7d:86:1b:4f:bf:91:08:dd:1c:c7:6f:fa:68:da:b2:fb:2b:
         22:d7:43:ab:d4:12:9e:31:a8:ff:de:f5:81:87:a7:c5:95:fe:
         6a:ea:fb:ff:7f:bf:2a:64:e4:7e:22:0d:f1:d5:1e:b5:46:ab:
         49:da:a1:3a:eb:0f:86:18:5f:44:7f:be:f6:41:2c:7e:b8:21:
         01:af:e8:7d:aa:5d:a2:6d:b8:94:5a:82:37:1f:ba:cf:06:15:
         0f:71:bd:fe:e4:6d:b8:d7:1d:99:24:86:90:49:2e:9c:fc:1b:
         ce:97:ba:c4:1b:0d:78:b8:c4:db:93:86:d1:2e:20:a6:7b:2b:
         51:5d:b2:bc:4c:23:0b:2e:94:24:d4:0a:a2:de:f8:44:39:1f:
         86:ba:57:e6:ee:a7:46:90:c7:23:ce:7d:02:d4:4a:ca:30:a1:
         40:36:d3:e3:6e:31:c2:c9:e8:9c:26:22:64:1c:1c:5c:95:b8:
         12:e4:58:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhX29d10XNJe8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NzdmNWM4MjUtYjA2ZC00OGRiLWI2YzItOWIyZGQxZjIxZjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA+XPGONDObXzGE7WFOLYHQlcIItGhLQqNRV
c+HN7vsF/p3V8nmJWFeKE+5G4q0ymJ14fjaPHw6Sn8gf7h1m6RzmgcutrnWRMNSx
wHS3+xqOW4h/tJZNLs8gth0/jtdDZDVr5BrdSMhgiiTq/Ym+UFVmj1b9NWDJ3w82
UivSscRoj0e6mMTl9ttK2RQ8HXIKnSercAbZzEQMYNrtjiV1V4RX15e3dFhH4XDJ
kzs4FQHo+GL534+V6WCdVJ5fjlqlUJUe5+mggwVu7cjQpaTTR9BtyaJCc1R4dVPf
gjVbeyX+bJC+N95O6wTLifDGfGd7tsHivmAH5LKpi5hewd6ZGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAxq/3/TW5Z5fzhSH8mapyGRWW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjhjMDBjMTItNjkzOS0z
MDlmLWIyMTAtODZjZjU1NTNiYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALdMr/USg3JlbdDiMwP8i+5jUir0c0n0SNi5dexQFq6BIfl1UWjSH3VW
olCq9q7eGcvllhPvdSIbLuG+E9g32jNlt+XZ2rih71N9hhtPv5EI3RzHb/po2rL7
KyLXQ6vUEp4xqP/e9YGHp8WV/mrq+/9/vypk5H4iDfHVHrVGq0naoTrrD4YYX0R/
vvZBLH64IQGv6H2qXaJtuJRagjcfus8GFQ9xvf7kbbjXHZkkhpBJLpz8G86XusQb
DXi4xNuThtEuIKZ7K1FdsrxMIwsulCTUCqLe+EQ5H4a6V+bup0aQxyPOfQLUSsow
oUA20+NuMcLJ6JwmImQcHFyVuBLkWFY=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:09:40 2025 by rpki-client