Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa
File:                     bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa (raw, json)
Hash identifier:          dg3TLPX7NVXobgb9XH/aebffJ3tgp5DlG5qPtbTUQiU=
Subject key identifier:   AD:31:A0:EC:02:96:1E:16:66:1A:0B:5A:8C:61:0A:4A:4B:1F:FF:80
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146146B38EC6B9594AEB300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:14:6b:38:ec:6b:95:94:ae:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=3108a764-8348-44b7-8349-ca48b57fdadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:38:5f:83:02:cb:74:ce:be:6b:45:b6:9e:
                    48:4c:c6:83:b0:bc:78:68:bd:7e:74:80:e6:3b:63:
                    cb:d8:bb:2e:59:de:76:ef:c3:65:96:d1:ae:bf:c8:
                    9b:59:ea:ac:72:68:44:10:b9:f3:3b:df:0f:59:83:
                    6a:b5:ce:f5:9c:ba:b3:98:18:db:e0:7f:b3:c3:5c:
                    13:87:14:e5:40:b1:85:a3:ca:ef:a5:cf:47:ba:7b:
                    dc:3e:dc:93:b3:de:31:3c:fd:d7:44:48:f6:b2:1e:
                    bf:a2:a4:b4:22:54:bd:7f:2d:9c:b7:cf:f7:25:0c:
                    d3:88:34:4d:dd:9a:07:43:07:48:01:6c:fe:3f:71:
                    ec:01:d9:c0:fc:5a:b9:2c:24:f7:be:74:a4:b0:38:
                    12:50:29:a3:c6:27:ae:2d:8e:6c:5a:8d:13:ae:0b:
                    bc:24:3f:88:75:d9:d2:8d:e7:08:e0:00:30:c6:58:
                    8a:02:7a:b4:15:63:ad:51:f0:27:0d:28:a6:a7:a9:
                    d3:f9:e1:ad:05:c2:fc:a5:72:ff:08:5d:e9:9c:9f:
                    cf:ec:5a:1c:d4:ea:8d:fa:06:ed:54:28:d3:61:4e:
                    12:75:8c:41:cf:48:db:31:0f:25:06:bc:c0:07:62:
                    4b:88:5b:16:fb:42:e1:2a:8c:c4:44:04:b4:ef:4d:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:31:A0:EC:02:96:1E:16:66:1A:0B:5A:8C:61:0A:4A:4B:1F:FF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e6:57:47:3b:9f:05:38:68:4b:7e:32:b0:a8:bf:27:10:6b:
         30:63:06:0d:67:22:6b:ed:93:55:b6:d2:98:03:b5:16:36:84:
         99:e0:f5:58:bc:45:53:a2:a3:1b:2a:1f:8e:06:bd:0f:f1:89:
         66:54:0d:cc:5d:40:60:4a:0a:0a:0e:b3:11:20:e9:fc:43:7a:
         f9:73:30:17:f2:99:99:d2:5d:ff:ec:61:c9:4b:72:54:91:44:
         fc:08:aa:71:e0:b9:88:df:56:ed:15:91:34:63:03:12:44:5a:
         71:e8:f8:9c:aa:fe:27:aa:84:00:90:2c:e9:31:ab:1f:5b:e0:
         ac:d8:23:e6:90:fa:08:d4:60:7a:02:e6:01:a1:c7:11:ce:ca:
         65:64:b3:cb:d4:c4:89:67:2e:c5:93:ec:72:36:0b:18:0f:6d:
         5c:66:7a:98:14:87:e1:93:2e:b4:d1:99:f6:36:73:4d:c3:8a:
         7c:c3:1a:5d:c0:70:41:4b:71:67:44:ae:c9:ec:0c:f4:b9:22:
         31:72:34:37:66:0b:c9:5b:e6:c2:b7:de:b0:5d:bb:bb:09:a6:
         22:b5:b1:f3:9d:5f:7b:90:8a:95:da:a4:1c:98:a3:e0:7c:e6:
         29:64:ff:e1:e1:56:af:d2:2d:4c:ef:6d:37:34:23:72:e2:ba:
         1b:b9:49:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhRrOOxrlZSuswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
MzEwOGE3NjQtODM0OC00NGI3LTgzNDktY2E0OGI1N2ZkYWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhw4X4MCy3TOvmtFtp5ITMaDsLx4aL1+dIDm
O2PL2LsuWd5278NlltGuv8ibWeqscmhEELnzO98PWYNqtc71nLqzmBjb4H+zw1wT
hxTlQLGFo8rvpc9HunvcPtyTs94xPP3XREj2sh6/oqS0IlS9fy2ct8/3JQzTiDRN
3ZoHQwdIAWz+P3HsAdnA/Fq5LCT3vnSksDgSUCmjxieuLY5sWo0Trgu8JD+IddnS
jecI4AAwxliKAnq0FWOtUfAnDSimp6nT+eGtBcL8pXL/CF3pnJ/P7Foc1OqN+gbt
VCjTYU4SdYxBz0jbMQ8lBrzAB2JLiFsW+0LhKozERAS07038ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0xoOwClh4WZhoLWoxhCkpLH/+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmVjOTBiYjktZWE5OS0z
ZmE2LWIzMzAtNGIzNjZhYTBhMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRabMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjmV0c7nwU4aEt+MrCovycQazBjBg1nImvtk1W20pgDtRY2hJng9Vi8
RVOioxsqH44GvQ/xiWZUDcxdQGBKCgoOsxEg6fxDevlzMBfymZnSXf/sYclLclSR
RPwIqnHguYjfVu0VkTRjAxJEWnHo+Jyq/ieqhACQLOkxqx9b4KzYI+aQ+gjUYHoC
5gGhxxHOymVks8vUxIlnLsWT7HI2CxgPbVxmepgUh+GTLrTRmfY2c03DinzDGl3A
cEFLcWdErsnsDPS5IjFyNDdmC8lb5sK33rBdu7sJpiK1sfOdX3uQipXapByYo+B8
5ilk/+HhVq/SLUzvbTc0I3Liuhu5SYw=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:18 2025 by rpki-client