Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa
File:                     1bea22db-543c-392b-894a-1a3fd5009750.roa (raw, json)
Hash identifier:          FtL7crN2ZvsnMPJzyrJ6p2ROJ+zGSJmkEJqAHHCVjH0=
Subject key identifier:   0F:C1:38:3F:30:5F:B1:C5:B6:2A:99:2A:CC:E2:33:70:71:27:65:CA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62021944F60A7E0AF239BA00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:19:44:f6:0a:7e:0a:f2:39:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=34b6070e-114e-46f3-9546-48715aeafe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:d9:37:a5:ee:e6:c9:e2:de:9b:91:58:bc:
                    b0:06:f8:54:de:d9:14:c0:39:98:98:58:49:82:c8:
                    fd:e7:e5:13:2d:e0:8a:b1:bc:36:2a:fc:d2:17:3d:
                    7c:4b:3e:c7:db:66:39:94:6a:4e:d9:6c:5f:8e:97:
                    cf:1e:f7:0c:02:eb:95:8a:77:7a:67:1f:51:9e:7d:
                    70:d9:89:ff:96:65:da:27:22:82:20:e2:58:e9:6e:
                    d2:71:71:a8:fb:93:b0:32:84:7e:50:9d:27:5c:36:
                    ea:64:62:b1:a7:42:19:1f:bf:e6:2b:ff:9a:39:a6:
                    3f:25:b1:df:34:b8:3a:9f:40:dd:57:9e:b8:bb:c6:
                    61:8c:56:81:66:b3:71:f7:e2:94:d8:ba:00:eb:72:
                    44:8a:f0:98:f3:a2:ba:69:38:da:7c:e8:71:80:17:
                    21:5a:8d:16:c9:ae:ba:44:90:d5:6a:82:56:3e:9e:
                    63:72:47:61:89:7c:69:fe:a7:79:82:36:b7:75:27:
                    a7:fa:04:aa:54:81:fe:ba:9a:aa:a8:88:f4:ee:ca:
                    27:07:2f:1b:0f:ad:d5:19:2a:1e:49:b2:22:02:b7:
                    9e:80:28:0c:4a:17:ec:80:21:f6:f9:cd:c3:f2:fd:
                    c9:e9:97:93:c6:c7:1e:0a:3b:f7:fc:4e:5c:ff:fe:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C1:38:3F:30:5F:B1:C5:B6:2A:99:2A:CC:E2:33:70:71:27:65:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:84:38:f6:aa:b0:dd:87:b3:03:b4:68:33:2f:0b:c7:fd:a1:
         d6:b8:65:cb:e1:68:bb:d0:7d:2d:ed:56:fb:c7:3e:e3:43:a8:
         36:45:95:8f:da:06:22:05:fa:c9:47:28:73:eb:31:fc:be:73:
         60:f0:eb:8a:d4:b2:3d:23:e9:0c:71:98:17:3d:73:9a:6c:da:
         3b:a3:69:97:d3:54:f3:f7:0b:01:9e:de:9d:14:5f:ed:26:b9:
         07:7f:e7:53:65:b4:46:aa:9a:5c:fa:8a:d8:16:a7:24:7a:b1:
         c0:7c:e8:d1:03:6d:76:d7:c3:61:cb:4f:d0:dd:c2:33:b2:2a:
         18:f5:74:50:99:d0:b2:4d:f5:45:fe:ad:f9:8c:97:4e:de:b7:
         94:93:c6:5c:99:b6:a9:bb:ce:12:d0:a5:29:9c:10:67:9b:de:
         68:c2:3c:ae:c3:23:05:99:7f:e9:fe:b2:33:30:53:a5:e3:07:
         a4:e3:e9:be:37:60:12:cf:6a:ae:21:92:29:0c:7b:56:51:14:
         25:19:f8:ec:6e:7f:bf:72:be:fa:c9:f4:b0:b4:81:58:98:c4:
         7f:e7:18:a1:7d:ce:3f:37:85:43:64:96:b1:60:9e:e2:4e:d0:
         12:af:03:6c:10:b7:b3:49:31:7b:92:fd:26:dc:18:cc:b7:fb:
         59:8f:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:47:34 2025 by rpki-client