Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c81f92a-6586-3bd4-b015-3106413e66cc.roa
File:                     1c81f92a-6586-3bd4-b015-3106413e66cc.roa (raw, json)
Hash identifier:          Lbkgi+He0N6kV7t9Wlhz2xw11acfV/Hmt2wVpeY1dAU=
Subject key identifier:   0C:4F:CB:0F:51:C5:D5:39:6D:55:8B:B1:0E:2F:4C:B8:50:06:D5:C7
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6202323AAE09FE8B3A340E10
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c81f92a-6586-3bd4-b015-3106413e66cc.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:32:3a:ae:09:fe:8b:3a:34:0e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=7e4e630d-5a1d-4c00-ae79-411108aff584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:45:3d:2f:85:03:29:65:67:c6:85:59:03:
                    a8:a4:38:93:61:bf:a7:c8:92:4c:f5:58:60:c7:f8:
                    64:a6:be:f2:57:ef:61:90:cd:a6:ef:49:2b:52:0d:
                    f4:5b:f5:65:cc:0c:ff:20:d3:ba:ac:22:4f:ff:ba:
                    46:bc:57:49:bb:af:80:59:af:db:37:5d:c7:7b:04:
                    ff:8a:40:80:24:d1:31:62:34:9e:a3:47:5d:50:4a:
                    0a:4d:a2:0b:b7:b6:a0:4f:70:0f:02:a0:4e:23:33:
                    58:0b:40:b7:3f:3c:a0:86:0c:e9:6e:31:75:ec:2c:
                    6f:26:3c:91:9a:de:24:65:51:1f:d6:5e:87:4e:3e:
                    dd:cd:e4:80:1a:40:64:da:66:42:68:42:8c:d2:20:
                    f7:82:83:7c:7d:a1:34:70:da:6b:b8:07:d8:68:7f:
                    b4:2c:ae:f1:14:10:a9:ef:bb:94:12:a2:09:f1:34:
                    89:b9:fc:a2:32:78:7b:46:de:07:ff:bb:ae:d1:2c:
                    f4:c5:80:41:33:33:cc:c9:56:62:8f:a3:20:d4:3c:
                    c8:b3:67:76:1a:72:29:5d:5d:1e:0d:77:c9:24:9f:
                    22:2b:59:9c:05:75:c6:c3:ea:08:f7:f9:0a:50:8a:
                    d3:a7:26:6e:9a:c9:47:d1:cc:43:d5:2e:c0:9c:48:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:CB:0F:51:C5:D5:39:6D:55:8B:B1:0E:2F:4C:B8:50:06:D5:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c81f92a-6586-3bd4-b015-3106413e66cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:d1:f4:c9:3b:55:c7:95:42:22:77:26:23:68:54:59:02:
         2b:55:5f:2b:72:a4:ee:98:23:5d:cf:9b:c8:31:a6:4e:47:fd:
         7a:ce:06:5e:6a:bc:ff:bf:50:66:a6:fa:0f:80:05:59:93:04:
         2e:4c:c1:d3:aa:37:fa:20:14:44:b7:76:b6:7c:c1:c3:78:59:
         32:af:a9:69:60:6f:96:d2:9f:05:7a:da:e4:36:63:7e:f3:dd:
         8a:0a:05:8e:26:bc:c6:96:48:54:49:e0:91:ce:ec:ab:8e:6e:
         64:3a:d2:19:0f:71:c1:dd:75:9c:4b:18:13:8b:a7:03:b8:4c:
         f9:e7:8e:4d:e0:17:bd:56:7b:6b:cf:ec:a7:f4:fd:8c:b2:a0:
         1a:e6:70:5c:8b:f8:14:27:a5:dc:dc:d8:f3:93:f3:8b:20:98:
         c1:47:2b:c5:92:33:3c:16:94:d0:ce:a7:c9:35:25:21:45:93:
         15:f5:46:0a:e9:ce:f0:07:44:d1:f8:a3:be:a2:ad:1c:e1:86:
         8b:1c:96:d2:e4:d6:41:14:e0:e6:2d:ba:9b:bd:df:e6:4a:2a:
         e9:83:dc:f0:c7:b2:c6:97:98:e7:11:be:05:77:2a:1f:43:76:
         b5:03:e2:1c:5f:78:2f:36:6b:9a:0e:9f:fb:f1:68:38:42:54:
         ce:c4:79:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjI6rgn+izo0DhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
N2U0ZTYzMGQtNWExZC00YzAwLWFlNzktNDExMTA4YWZmNTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj5FPS+FAyllZ8aFWQOopDiTYb+nyJJM9Vhg
x/hkpr7yV+9hkM2m70krUg30W/VlzAz/INO6rCJP/7pGvFdJu6+AWa/bN13HewT/
ikCAJNExYjSeo0ddUEoKTaILt7agT3APAqBOIzNYC0C3PzyghgzpbjF17CxvJjyR
mt4kZVEf1l6HTj7dzeSAGkBk2mZCaEKM0iD3goN8faE0cNpruAfYaH+0LK7xFBCp
77uUEqIJ8TSJufyiMnh7Rt4H/7uu0Sz0xYBBMzPMyVZij6Mg1DzIs2d2GnIpXV0e
DXfJJJ8iK1mcBXXGw+oI9/kKUIrTpyZumslH0cxD1S7AnEhbHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxPyw9RxdU5bVWLsQ4vTLhQBtXHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWM4MWY5MmEtNjU4Ni0z
YmQ0LWIwMTUtMzEwNjQxM2U2NmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVK0fTJO1XHlUIidyYjaFRZAitVXytypO6YI13Pm8gxpk5H/XrOBl5q
vP+/UGam+g+ABVmTBC5MwdOqN/ogFES3drZ8wcN4WTKvqWlgb5bSnwV62uQ2Y37z
3YoKBY4mvMaWSFRJ4JHO7KuObmQ60hkPccHddZxLGBOLpwO4TPnnjk3gF71We2vP
7Kf0/YyyoBrmcFyL+BQnpdzc2POT84sgmMFHK8WSMzwWlNDOp8k1JSFFkxX1Rgrp
zvAHRNH4o76irRzhhoscltLk1kEU4OYtupu93+ZKKumD3PDHssaXmOcRvgV3Kh9D
drUD4hxfeC82a5oOn/vxaDhCVM7Eea4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:17:30 2025 by rpki-client