Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa
File:                     c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa (raw, json)
Hash identifier:          3P/jw/K0TGOEAeDoputvKPWZNxuAW/rRkUJEoCha0OQ=
Subject key identifier:   A3:6A:AF:88:F7:29:42:00:39:87:73:BB:60:E3:5D:31:B3:1B:6F:47
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461391454B574F27B5E3D4
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:13:91:45:4b:57:4f:27:b5:e3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=ae3a9ba6-6f1d-45a2-8a9d-e8fa2b07398c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5a:a0:3d:56:0a:2a:ea:09:89:c4:c8:85:23:
                    ce:85:8c:86:98:31:0a:f5:7b:8d:6e:47:aa:76:52:
                    e1:a5:83:bc:7c:b8:f4:02:2d:17:35:96:29:9e:32:
                    af:ec:96:73:1f:4d:86:3a:29:da:d0:1b:c4:c3:c8:
                    64:44:23:b3:62:d4:c5:54:8a:83:63:53:41:1b:1e:
                    c2:4a:df:2a:8c:1a:94:6f:74:b1:ef:36:08:4b:5b:
                    53:f8:44:ee:9c:2c:e7:0d:18:73:c7:d0:9b:83:64:
                    5c:52:60:c1:50:64:08:97:98:29:8d:33:6a:33:08:
                    39:c4:40:31:cc:cb:e8:41:3b:d3:ce:c2:94:3f:6a:
                    09:09:4b:b4:25:98:8a:13:98:4b:e2:bc:8d:37:4c:
                    90:76:d5:ce:95:2c:bd:58:6c:5c:63:62:9e:9a:f2:
                    c8:73:ab:d2:28:13:3e:63:ce:2e:76:b6:bc:f1:68:
                    71:31:56:51:72:ca:3a:a3:e3:a2:0c:d3:90:a3:07:
                    78:32:35:23:7b:6f:5c:d8:bf:e6:5c:f0:fc:5c:bd:
                    c3:74:78:52:27:3f:0a:83:ad:36:20:ba:af:0c:d4:
                    d0:46:a2:a2:17:ab:30:0a:05:9d:4b:e2:e8:ed:93:
                    f0:b7:73:9b:59:13:5c:ce:cf:81:16:9a:df:65:bc:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6A:AF:88:F7:29:42:00:39:87:73:BB:60:E3:5D:31:B3:1B:6F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:54:bc:bd:54:2b:8a:83:af:73:2f:3b:61:2b:e6:64:f4:80:
         98:1c:dd:a3:05:5e:8d:e4:1e:1e:1a:2a:70:ca:4d:d1:b8:c1:
         b8:db:c8:4a:1d:ae:c5:30:d7:c2:a0:8f:66:20:7f:ea:32:ff:
         5f:6a:af:09:b7:81:be:9d:97:28:16:ca:44:57:d8:85:1e:d0:
         75:92:6e:32:02:65:e7:ae:c1:30:d3:6a:c8:2d:ab:89:25:bc:
         57:89:a7:b3:56:71:e8:15:42:52:67:c7:47:9b:40:ae:2f:f0:
         5c:5c:cc:dd:e1:a0:f8:6c:94:4e:36:b2:60:c0:0c:af:0f:da:
         16:cd:7b:25:20:dd:e1:16:59:67:ad:82:34:21:48:9f:30:aa:
         60:d2:76:e2:e3:4b:30:c5:9f:94:2a:88:ee:bd:26:76:a2:40:
         77:7b:86:79:f7:6e:de:a1:1b:35:81:df:9f:bf:0e:5d:b6:9d:
         81:14:6a:d6:aa:a9:39:97:a1:2f:0e:0a:dd:b7:91:d2:e0:2a:
         9c:4c:c3:31:76:b3:8a:b4:34:a0:39:35:73:e7:a3:8e:b2:f0:
         bd:81:c8:e3:57:d5:dc:05:0d:04:56:1d:91:8d:81:57:c2:a9:
         32:9b:70:0c:73:9e:5e:92:7c:31:4b:08:01:6a:df:aa:9c:fb:
         f0:c2:cd:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhORRUtXTye149QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
YWUzYTliYTYtNmYxZC00NWEyLThhOWQtZThmYTJiMDczOThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFqgPVYKKuoJicTIhSPOhYyGmDEK9XuNbkeq
dlLhpYO8fLj0Ai0XNZYpnjKv7JZzH02GOina0BvEw8hkRCOzYtTFVIqDY1NBGx7C
St8qjBqUb3Sx7zYIS1tT+ETunCznDRhzx9Cbg2RcUmDBUGQIl5gpjTNqMwg5xEAx
zMvoQTvTzsKUP2oJCUu0JZiKE5hL4ryNN0yQdtXOlSy9WGxcY2KemvLIc6vSKBM+
Y84udra88WhxMVZRcso6o+OiDNOQowd4MjUje29c2L/mXPD8XL3DdHhSJz8Kg602
ILqvDNTQRqKiF6swCgWdS+Lo7ZPwt3ObWRNczs+BFprfZbxkiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNqr4j3KUIAOYdzu2DjXTGzG29HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzZlOWY2YzItYWQzZC0z
NGM5LTk2MDktZGJjY2Y3MjdkOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZUvL1UK4qDr3MvO2Er5mT0gJgc3aMFXo3kHh4aKnDKTdG4wbjbyEod
rsUw18Kgj2Ygf+oy/19qrwm3gb6dlygWykRX2IUe0HWSbjICZeeuwTDTasgtq4kl
vFeJp7NWcegVQlJnx0ebQK4v8FxczN3hoPhslE42smDADK8P2hbNeyUg3eEWWWet
gjQhSJ8wqmDSduLjSzDFn5QqiO69JnaiQHd7hnn3bt6hGzWB35+/Dl22nYEUataq
qTmXoS8OCt23kdLgKpxMwzF2s4q0NKA5NXPno46y8L2ByONX1dwFDQRWHZGNgVfC
qTKbcAxznl6SfDFLCAFq36qc+/DCzfY=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:02:29 2025 by rpki-client