Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa
File:                     0127bea2-01a8-3f87-a54f-6a97edd38e82.roa (raw, json)
Hash identifier:          4k8IuSLVWmlWc4yUmyiBHcF6HGlbg1Wqn9xRm6JKLvM=
Subject key identifier:   CF:AA:76:48:4F:DC:AC:3D:10:77:22:69:C3:2D:BC:91:5F:82:F7:2E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620232964CF42E9E37C06340
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:32:96:4c:f4:2e:9e:37:c0:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=8b184d8f-3c38-4e41-ae67-7707c97e2269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:c2:3d:b5:f4:18:04:4e:cc:84:91:bc:bf:
                    20:4d:16:e7:a7:db:8b:cf:39:80:75:49:2c:72:01:
                    16:77:d4:72:e0:17:60:df:44:00:a6:07:7f:e7:4e:
                    4f:4d:e6:ad:c1:1b:2d:ef:1d:69:d7:45:af:3c:b1:
                    16:02:a7:58:7e:da:99:0e:fb:19:03:57:cd:42:ba:
                    06:da:f7:1b:59:7a:57:24:47:4e:8c:58:11:8b:ba:
                    02:ae:0a:a6:58:f4:66:fd:46:19:5c:8f:84:4e:ec:
                    c2:2a:40:80:1e:60:24:d7:26:41:35:53:cc:9e:73:
                    c8:ad:52:9b:b8:aa:e4:5b:5d:3e:de:59:3f:71:80:
                    31:da:c1:2b:96:a8:6d:ed:0f:88:9a:9b:da:0e:13:
                    19:a1:21:18:e9:04:b7:15:d3:3a:95:0b:47:0b:ef:
                    f6:87:f9:4b:83:50:10:88:bc:ec:56:68:17:bf:c2:
                    61:b1:b8:c0:6f:98:58:b7:9c:9a:9d:89:01:fc:51:
                    32:05:f3:3d:68:81:1c:02:b0:66:0f:56:c5:7f:a5:
                    49:43:28:50:52:26:a3:5b:71:8c:8c:bd:9f:eb:ce:
                    91:9c:4b:f0:c0:b6:a7:18:cd:74:c4:8c:2c:71:a1:
                    92:ea:e1:14:95:9d:e6:13:2b:6a:2b:bd:86:be:26:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AA:76:48:4F:DC:AC:3D:10:77:22:69:C3:2D:BC:91:5F:82:F7:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0127bea2-01a8-3f87-a54f-6a97edd38e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:48:9f:69:a0:24:72:2d:95:c8:37:de:21:11:18:0d:53:
         c1:b1:7f:f6:cd:90:a8:13:a1:34:2a:46:9b:74:79:5a:5a:74:
         55:a8:5e:17:05:a8:1b:c9:58:02:6d:60:72:fe:c8:a2:fc:1c:
         e0:9c:a5:b6:f3:ec:91:74:00:c5:a8:81:ff:c7:87:84:30:9c:
         aa:cc:1d:76:46:e2:bb:de:4a:ab:f9:d1:93:52:6e:cd:84:d7:
         d4:f0:7e:bf:51:8a:b9:77:5f:dc:ee:9e:9a:5d:fd:47:a3:cc:
         b9:9e:ca:58:40:6a:a5:e6:40:2c:54:07:8c:87:a3:6c:22:a1:
         7c:c5:03:1d:77:cc:81:6a:f6:52:8e:70:74:ea:04:0a:44:15:
         5d:55:83:67:b0:e1:61:82:8e:05:f5:20:94:66:2e:a4:cb:58:
         96:7d:75:23:b5:3a:2d:f1:6e:2c:4e:f0:21:a4:ac:36:51:61:
         ff:13:1f:94:61:d8:15:c2:23:25:95:6c:8e:14:2a:4a:7b:07:
         b8:0f:00:65:63:8e:e6:ff:4c:22:65:1d:e2:10:8d:ef:d2:2f:
         20:a3:b2:22:d6:17:67:9d:29:0f:f6:2d:92:7a:3b:1d:ce:78:
         17:9e:15:a5:0f:ce:44:6a:d0:64:0c:19:83:e1:c8:7a:92:ce:
         b6:c2:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:48:36 2025 by rpki-client