Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa
File:                     f2bdb302-96fa-38e1-a601-acb09c90541c.roa (raw, json)
Hash identifier:          HN5ZxhlyPil7j26hz/l6Xw5PS+Ht4Cb8mpA4T+E8IwY=
Subject key identifier:   20:7C:2B:57:08:DF:63:10:C9:4F:17:3B:87:3D:3F:EB:B7:B5:76:00
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146128FCB3D24CBA9DAB140
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:12:8f:cb:3d:24:cb:a9:da:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=b1ce4482-cca6-420a-a115-da618ee0c3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:10:f1:de:bb:bb:d3:b7:7f:84:11:4f:e6:
                    b9:0a:d9:b0:e2:f5:d6:ff:74:26:84:f5:85:1a:11:
                    30:53:1a:b1:5c:50:d8:90:ef:28:59:a2:0a:00:db:
                    7c:da:49:2c:ef:a8:9d:08:ab:b0:0c:44:23:55:1d:
                    e8:01:d6:0e:c5:e5:a1:94:34:cd:6e:0f:38:c7:10:
                    23:20:ed:de:86:65:fb:9f:81:ca:03:79:cc:42:61:
                    73:a1:24:f4:0f:a3:d1:f6:b0:e8:2b:86:cd:e8:41:
                    c9:87:d0:24:34:53:58:cd:41:a7:68:7f:ea:65:b4:
                    92:4f:06:9f:35:6a:09:52:33:58:e5:df:57:97:08:
                    48:3d:76:0a:fe:e1:0c:fe:18:c4:47:8e:5b:c2:08:
                    e0:a1:f6:1b:80:c3:95:27:4b:10:33:c6:8b:3e:53:
                    d2:94:37:ad:e7:83:7f:1c:89:d3:2a:16:c1:13:f6:
                    0f:84:de:4c:00:2f:f4:1d:33:a3:7e:2a:05:f0:53:
                    3b:e9:af:20:08:91:44:5b:0a:1d:3d:5c:dd:3b:3a:
                    06:c2:32:37:c6:5e:4e:d3:5b:93:22:4c:9a:09:c3:
                    e2:74:bb:33:c2:80:0a:88:7b:08:d4:e9:00:bc:06:
                    0f:49:2f:97:d8:85:70:34:b0:dd:c6:68:b5:c9:e3:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7C:2B:57:08:DF:63:10:C9:4F:17:3B:87:3D:3F:EB:B7:B5:76:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b2:60:fb:28:2e:4e:47:b0:6c:c5:a5:1c:43:8a:db:8b:d7:
         e4:ec:96:e9:15:b9:ac:d0:bc:03:e7:f6:45:37:61:25:68:e3:
         f2:f2:9a:81:b4:f4:8d:1c:01:d7:bc:fc:fa:94:07:13:34:b4:
         11:40:7b:f0:67:77:b3:53:ba:55:c1:bf:58:9a:83:3c:57:47:
         59:92:b9:e8:57:a3:4b:a6:fc:3e:50:4a:90:2d:6f:2e:9f:54:
         3e:8d:b6:fb:6c:9f:1b:f6:00:21:a9:cc:39:bc:4c:fa:37:87:
         15:fd:a8:c1:56:05:d2:67:05:69:5e:4e:ad:d5:8a:25:17:d4:
         b6:9f:74:33:fc:18:c4:67:23:f8:a5:76:ab:c9:95:c2:3f:a5:
         51:7a:fa:1b:d1:12:49:3b:f6:fa:d9:5e:3d:7e:c2:d9:ab:5d:
         40:c5:98:34:65:fb:1b:cb:d1:15:43:a0:34:c0:73:59:e3:de:
         bc:8c:a5:4a:b4:17:94:9c:d2:b8:e0:e2:a0:20:0c:71:69:57:
         bb:c2:d5:1e:fa:3c:f0:69:7a:7e:39:75:07:23:c4:b7:07:c0:
         a9:1a:bb:ce:68:14:b2:29:25:f6:5c:54:86:3b:44:c5:bc:01:
         9b:e2:0e:9c:54:73:1b:94:73:a8:42:35:23:d0:b6:c1:01:68:
         ff:87:f3:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhKPyz0ky6nasUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
YjFjZTQ0ODItY2NhNi00MjBhLWExMTUtZGE2MThlZTBjM2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssMQ8d67u9O3f4QRT+a5Ctmw4vXW/3QmhPWF
GhEwUxqxXFDYkO8oWaIKANt82kks76idCKuwDEQjVR3oAdYOxeWhlDTNbg84xxAj
IO3ehmX7n4HKA3nMQmFzoST0D6PR9rDoK4bN6EHJh9AkNFNYzUGnaH/qZbSSTwaf
NWoJUjNY5d9XlwhIPXYK/uEM/hjER45bwgjgofYbgMOVJ0sQM8aLPlPSlDet54N/
HInTKhbBE/YPhN5MAC/0HTOjfioF8FM76a8gCJFEWwodPVzdOzoGwjI3xl5O01uT
IkyaCcPidLszwoAKiHsI1OkAvAYPSS+X2IVwNLDdxmi1yePaAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCB8K1cI32MQyU8XO4c9P+u3tXYAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjJiZGIzMDItOTZmYS0z
OGUxLWE2MDEtYWNiMDljOTA1NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKyYPsoLk5HsGzFpRxDituL1+TslukVuazQvAPn9kU3YSVo4/LymoG0
9I0cAde8/PqUBxM0tBFAe/Bnd7NTulXBv1iagzxXR1mSuehXo0um/D5QSpAtby6f
VD6Ntvtsnxv2ACGpzDm8TPo3hxX9qMFWBdJnBWleTq3ViiUX1LafdDP8GMRnI/il
dqvJlcI/pVF6+hvREkk79vrZXj1+wtmrXUDFmDRl+xvL0RVDoDTAc1nj3ryMpUq0
F5Sc0rjg4qAgDHFpV7vC1R76PPBpen45dQcjxLcHwKkau85oFLIpJfZcVIY7RMW8
AZviDpxUcxuUc6hCNSPQtsEBaP+H8+0=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:14 2025 by rpki-client