Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1afcfc5-26ba-3179-8d46-a29c487d4536.roa
File:                     e1afcfc5-26ba-3179-8d46-a29c487d4536.roa (raw, json)
Hash identifier:          YHMGa3DeG0IuG5SvRD0+sJzJPSK4Upe3gxEWzU+m/UU=
Subject key identifier:   44:BE:EF:76:DC:10:01:AD:D6:85:B1:F1:30:35:7B:EE:3B:C5:97:C6
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81460C7AE60D490F17985A80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1afcfc5-26ba-3179-8d46-a29c487d4536.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:0c:7a:e6:0d:49:0f:17:98:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=4f5b81e3-0ced-4792-9406-e9d29b8c8131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:50:f6:98:b0:66:da:1b:b8:34:e7:59:fd:
                    59:e7:51:a6:a8:aa:32:5c:71:7d:bb:e9:cd:54:80:
                    82:0e:9b:d2:19:40:f1:32:a2:f5:94:66:60:c5:c2:
                    16:29:a4:8d:f6:39:5b:6d:62:b4:e3:1c:e6:c8:df:
                    2f:38:85:d8:55:ae:a1:42:38:38:0b:97:1a:32:a2:
                    f3:7a:e4:a7:14:8e:33:8b:7e:7d:49:8a:cf:ab:0f:
                    ea:e7:fa:19:ff:e5:90:cb:1b:d7:15:53:97:38:c6:
                    3b:01:ca:5f:d3:93:9b:17:c3:31:69:c0:04:d0:f9:
                    d3:fb:a1:83:5e:0f:37:8b:67:5e:49:17:86:de:5d:
                    fa:9e:73:93:e5:9e:6d:6e:da:05:08:65:7e:6c:07:
                    dd:26:5a:4a:f1:4c:e4:6d:74:e2:90:8f:46:c2:65:
                    7e:e0:24:9f:82:ef:65:38:02:f8:ff:5f:12:76:46:
                    df:ea:f4:5d:4b:b6:ff:70:2c:2f:6e:c8:f0:86:ba:
                    34:af:ce:b2:34:28:4f:a1:6a:cf:59:9e:45:a9:42:
                    87:75:0e:fa:11:6a:56:3b:96:90:d5:d0:45:7f:58:
                    96:cd:df:56:8f:07:05:34:ed:35:70:b7:19:e8:77:
                    d2:07:81:7a:f0:eb:4c:b7:0d:5f:de:b9:03:6f:7d:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BE:EF:76:DC:10:01:AD:D6:85:B1:F1:30:35:7B:EE:3B:C5:97:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1afcfc5-26ba-3179-8d46-a29c487d4536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:00:b6:66:6b:75:eb:56:e2:2a:3a:bb:02:62:d7:02:2e:61:
         c6:79:23:f4:28:41:18:7f:6d:02:fa:ba:a6:98:c8:51:bc:bf:
         43:b3:07:7d:4f:bc:cf:e5:47:d9:34:6f:8c:c7:b8:0c:7b:60:
         a9:d2:e9:da:39:e0:14:18:51:84:ec:f3:0b:3c:de:ca:94:90:
         3b:82:df:a7:f0:7f:07:81:2b:01:1f:8d:e5:50:50:73:16:25:
         b6:21:6f:b5:93:c6:fd:38:1e:cd:c3:96:5f:24:da:05:c6:59:
         7c:dc:27:16:ff:02:36:3d:35:c2:c0:ef:88:f2:fb:67:3b:09:
         93:05:6b:a6:83:1d:56:32:05:cc:27:8e:9c:2c:e1:67:5e:69:
         53:65:a4:27:87:58:d5:dc:f1:90:4e:27:d2:c3:c5:7b:8e:82:
         1e:34:91:4f:9b:8e:7a:27:3f:e0:9f:b5:ac:52:3f:ed:c8:07:
         40:36:5c:ec:dc:d7:39:ea:f7:96:93:1d:fa:a0:e8:b1:87:06:
         56:ca:c3:ab:69:89:66:12:4c:85:4f:2d:0c:33:0a:41:f9:32:
         06:0d:ea:d7:d5:a3:87:8c:5f:aa:40:8e:a3:12:0a:0c:4b:b8:
         37:20:63:e1:b0:d0:ee:07:ae:ab:73:b8:12:cd:24:b0:9f:4d:
         e0:71:31:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgx65g1JDxeYWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NGY1YjgxZTMtMGNlZC00NzkyLTk0MDYtZTlkMjliOGM4MTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHZQ9piwZtobuDTnWf1Z51GmqKoyXHF9u+nN
VICCDpvSGUDxMqL1lGZgxcIWKaSN9jlbbWK04xzmyN8vOIXYVa6hQjg4C5caMqLz
euSnFI4zi359SYrPqw/q5/oZ/+WQyxvXFVOXOMY7Acpf05ObF8MxacAE0PnT+6GD
Xg83i2deSReG3l36nnOT5Z5tbtoFCGV+bAfdJlpK8UzkbXTikI9GwmV+4CSfgu9l
OAL4/18Sdkbf6vRdS7b/cCwvbsjwhro0r86yNChPoWrPWZ5FqUKHdQ76EWpWO5aQ
1dBFf1iWzd9WjwcFNO01cLcZ6HfSB4F68OtMtw1f3rkDb32n7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFES+73bcEAGt1oWx8TA1e+47xZfGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTFhZmNmYzUtMjZiYS0z
MTc5LThkNDYtYTI5YzQ4N2Q0NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkAtmZrdetW4io6uwJi1wIuYcZ5I/QoQRh/bQL6uqaYyFG8v0OzB31P
vM/lR9k0b4zHuAx7YKnS6do54BQYUYTs8ws83sqUkDuC36fwfweBKwEfjeVQUHMW
JbYhb7WTxv04Hs3Dll8k2gXGWXzcJxb/AjY9NcLA74jy+2c7CZMFa6aDHVYyBcwn
jpws4WdeaVNlpCeHWNXc8ZBOJ9LDxXuOgh40kU+bjnonP+CftaxSP+3IB0A2XOzc
1znq95aTHfqg6LGHBlbKw6tpiWYSTIVPLQwzCkH5MgYN6tfVo4eMX6pAjqMSCgxL
uDcgY+Gw0O4HrqtzuBLNJLCfTeBxMY8=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:06 2025 by rpki-client