Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/09207ce9-918b-370d-8925-a834e1bfa5fe.roa
File:                     09207ce9-918b-370d-8925-a834e1bfa5fe.roa (raw, json)
Hash identifier:          7YRSovEPrFLfLPDPqnKPXKCOUeMKLbxxzXhw/rLmQMo=
Subject key identifier:   0B:4B:58:37:0A:C2:FC:96:5A:73:E5:DC:FF:95:FC:1C:ED:EB:D7:FC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B636738903F0F2340614F3780
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/09207ce9-918b-370d-8925-a834e1bfa5fe.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        65.22.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:38:90:3f:0f:23:40:61:4f:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=0ea85048-7b7f-4745-b7b6-ff26d6648e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:50:a7:a3:fe:73:4f:d4:3e:3f:28:03:b3:
                    73:c4:61:8c:31:fd:c4:db:0b:ed:6a:fa:16:75:b8:
                    c4:67:09:57:56:c7:6c:10:68:4e:cc:24:d4:10:eb:
                    4c:48:27:4a:90:a6:f8:8a:ad:1f:39:05:a4:32:d8:
                    72:d4:e0:7d:d8:56:e1:c7:aa:94:ae:bd:23:40:7f:
                    59:18:47:aa:80:5a:94:98:6b:d8:cc:1d:48:f3:c9:
                    d9:47:8e:6e:d0:2d:7f:7f:e0:d6:68:71:25:b1:2a:
                    70:5b:28:1d:ce:6b:6f:3b:0c:41:56:7e:6e:9e:99:
                    7d:70:32:e1:0d:c7:b2:cc:e2:95:a7:a2:7f:7c:20:
                    3a:7b:fd:30:f8:1e:2f:b2:00:41:0e:52:68:45:c5:
                    3d:94:73:47:e8:60:d8:f9:6a:2d:3f:42:e5:85:62:
                    5a:9c:4e:03:03:4b:8a:c2:04:a1:03:22:87:19:4a:
                    65:74:e5:d7:dd:56:c6:86:25:9c:28:13:fa:db:6e:
                    3c:13:d8:bd:5f:6e:80:2a:be:68:ec:54:c0:16:c2:
                    45:5d:f0:6e:be:78:27:a7:18:45:f3:fa:5a:38:0c:
                    95:48:75:d9:15:2c:3f:26:27:04:89:26:c3:50:a4:
                    5c:27:ea:92:54:94:0a:b3:c7:12:82:c2:2c:43:cc:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:58:37:0A:C2:FC:96:5A:73:E5:DC:FF:95:FC:1C:ED:EB:D7:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/09207ce9-918b-370d-8925-a834e1bfa5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e9:22:c5:fd:fe:21:bf:ed:d2:2c:9b:3d:22:38:1b:47:6a:
         55:ea:8f:d6:1d:f1:35:29:b0:df:df:d6:d7:66:4e:e4:9f:e0:
         25:c6:dd:69:f8:84:a9:51:ae:a0:41:e6:31:7e:98:0f:2e:8b:
         d5:4d:53:55:0f:cc:86:22:be:be:83:0f:69:7b:7a:a1:32:53:
         ee:12:2a:3b:de:51:a9:79:7a:91:79:4f:31:dd:16:28:db:2c:
         28:01:5f:7b:e6:60:9d:7e:2a:c8:12:06:33:7d:8f:a9:08:b8:
         80:13:8c:79:7d:57:58:10:ee:6c:90:8d:d8:4b:00:3f:0c:ce:
         55:b8:37:9b:99:35:26:3f:f5:b0:9c:eb:06:02:19:ed:3a:7b:
         90:cd:a5:8e:47:14:36:8d:88:ec:3e:aa:34:0c:0d:37:4c:df:
         6e:26:5c:f0:ce:ce:a9:13:bd:77:be:ca:2b:79:af:ea:0b:c6:
         82:a8:20:ec:fa:88:1d:e7:d9:96:10:e8:4d:68:00:c6:2e:4f:
         20:05:b2:a7:36:0d:da:d7:8b:7a:e1:ae:7e:8b:ba:7d:a7:65:
         86:4f:7d:d7:28:69:66:96:bd:7f:e3:1c:17:8c:88:31:f3:f5:
         7e:81:55:29:31:54:74:37:d8:51:c1:34:c5:17:4c:8d:9d:d7:
         0d:1a:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:21:53 2025 by rpki-client