Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0001bc4f-8012-3deb-a933-aef376d72c8f.roa
File:                     0001bc4f-8012-3deb-a933-aef376d72c8f.roa (raw, json)
Hash identifier:          ZIRRQOOqI0hZf1vWH5Il44XvM3HWQyYfs5rh3EiRxbU=
Subject key identifier:   55:D9:95:61:8B:B3:50:85:D2:E2:7A:65:A9:4C:12:EB:FA:4A:68:C3
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62023BB9FF2E164D5B53CACE
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0001bc4f-8012-3deb-a933-aef376d72c8f.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:3b:b9:ff:2e:16:4d:5b:53:ca:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=f665b6b1-8cc2-4e00-9e7e-804a91bb84bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3a:d8:52:01:1f:cb:31:6e:c6:c1:59:32:47:
                    7f:36:0d:d3:7c:60:51:b3:aa:e4:2c:99:5d:0d:a0:
                    88:38:15:8f:69:30:d0:d4:79:bf:f7:87:8c:6c:cf:
                    85:b4:ca:62:0c:b2:bd:18:60:f2:24:a8:4a:4d:ee:
                    f2:03:c6:92:f8:56:c6:13:ca:f4:4c:22:15:63:90:
                    b6:3d:cf:af:9e:79:16:11:e2:b8:99:d5:57:27:34:
                    e4:d5:f4:27:47:16:76:2a:69:e2:d4:2b:6b:4b:e0:
                    4e:b4:a7:3e:f7:22:b0:bf:4d:30:60:f8:ad:9e:21:
                    87:94:90:29:bb:3e:94:11:ba:0d:29:2a:c2:0c:b8:
                    63:3a:b4:4c:5a:74:4c:7f:08:a4:47:9b:7d:de:62:
                    3b:f3:1a:7d:75:c2:71:43:d4:9b:32:c1:2e:6a:60:
                    57:ae:57:e0:b0:dd:08:ac:b8:9e:8d:e9:4f:14:81:
                    aa:d0:f0:35:ce:3a:6e:32:cf:1d:14:2e:e8:35:f0:
                    47:a0:33:5d:ac:4e:c8:0e:85:64:10:ac:62:c7:01:
                    cc:6a:8d:3b:31:1a:ec:15:46:c4:a9:fe:ec:e3:68:
                    92:47:b1:fd:c9:82:c9:cb:90:d9:24:c3:2f:bf:01:
                    46:98:3a:a8:9a:a3:04:51:1c:cd:a8:68:20:96:47:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:95:61:8B:B3:50:85:D2:E2:7A:65:A9:4C:12:EB:FA:4A:68:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0001bc4f-8012-3deb-a933-aef376d72c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:6e:f5:d3:4a:92:ac:a8:c0:b2:a3:18:2a:05:cf:d8:06:
         e8:56:47:fa:f5:ee:f1:b8:c7:f7:64:d1:d3:3e:c8:14:03:6a:
         c5:f1:8f:13:dc:3e:db:b6:bb:b2:72:82:52:19:8d:e2:ba:a4:
         59:4d:f5:e0:89:26:ef:82:c7:f8:c9:e0:e6:3e:0d:3c:b2:7d:
         37:cb:cc:43:aa:1d:b0:c7:40:9c:ed:bd:0d:46:32:2e:59:80:
         55:e0:5c:10:89:16:53:d5:87:9e:22:a6:22:a9:4a:32:e9:7f:
         ed:53:df:b1:18:8c:bd:47:e2:ec:ed:80:52:97:9f:1f:e6:94:
         27:e1:af:28:f2:50:a2:33:3f:75:4a:22:23:36:80:5e:48:4b:
         34:1d:5c:aa:26:8f:8d:84:46:91:9a:97:c9:25:84:2f:da:86:
         11:40:eb:c4:76:16:75:11:fa:f0:f8:aa:d7:c3:26:e8:de:8b:
         5e:5c:5f:88:64:81:4d:87:81:c1:c7:2a:d5:74:ef:b3:0a:40:
         06:b5:5e:d2:13:88:83:03:93:66:77:7d:6a:e8:c6:c9:5f:b6:
         fb:da:80:6b:0e:1a:f5:e4:46:aa:f5:79:09:d5:f8:52:3a:c1:
         c1:1f:86:fe:a5:79:82:da:b3:53:80:36:2a:0e:ee:14:4f:90:
         81:87:5e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:15:59 2025 by rpki-client