Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2264f9cc-2732-3467-b9e3-0076e696c750.roa
File:                     2264f9cc-2732-3467-b9e3-0076e696c750.roa (raw, json)
Hash identifier:          cmHXv4EwwKMZhr1dFs94G3xdibV1sqkiWx3/AQfw1J0=
Subject key identifier:   81:A6:76:94:CE:8D:EA:C6:1C:9D:27:0C:AA:EC:29:0A:48:AE:88:40
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6202036C1489527B69B46680
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2264f9cc-2732-3467-b9e3-0076e696c750.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:03:6c:14:89:52:7b:69:b4:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=9f3cb915-d9b6-4b28-a3b8-3409a6e23459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:e9:c5:aa:d5:35:a4:35:31:c1:73:2f:36:
                    c9:21:7e:8a:8f:a7:e7:1d:55:c4:fb:94:b6:2a:ee:
                    88:36:00:67:b8:d6:67:8a:91:bb:70:a9:86:b8:b8:
                    19:01:1c:31:e6:81:9a:08:bd:ab:08:28:ac:cc:82:
                    c3:d1:d2:cf:1b:6f:ba:da:f2:be:9f:50:a9:a4:f0:
                    52:cf:4c:4e:74:85:8a:10:34:80:18:b3:2e:c5:96:
                    ae:dd:ff:cc:ed:a0:6a:52:0d:d5:30:43:1c:ee:d5:
                    e0:39:33:3b:62:18:4e:65:9f:2b:8c:37:49:b8:cb:
                    21:58:8a:b8:d3:c7:84:87:4e:04:a6:13:d3:2f:66:
                    2c:ca:b8:9f:cb:b1:15:c2:9e:91:61:8b:6e:3d:d0:
                    29:4e:2b:aa:33:a5:b2:b8:cc:9a:85:de:4f:2d:ff:
                    ff:fe:a9:da:45:3f:0c:76:c6:03:86:4e:ff:ed:cb:
                    39:59:f5:36:e4:eb:be:14:75:5c:92:36:ef:e8:4a:
                    dd:38:2d:44:25:46:d3:99:5f:30:1d:24:df:08:00:
                    a6:2c:2e:6b:83:25:b9:96:95:3b:dc:5d:52:1a:08:
                    ca:a2:d1:7a:60:5c:01:ff:53:ca:be:f9:76:ef:c8:
                    81:6a:76:39:94:61:ac:fe:5a:08:a5:7c:e5:38:0e:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A6:76:94:CE:8D:EA:C6:1C:9D:27:0C:AA:EC:29:0A:48:AE:88:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2264f9cc-2732-3467-b9e3-0076e696c750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8e:a2:6e:d9:8d:ab:5c:9c:ed:ef:d8:5a:71:e2:43:bb:a2:
         24:3f:dd:ca:19:f9:71:01:d1:77:fe:dd:3a:fd:63:75:85:47:
         17:de:cd:d5:68:0e:7a:25:35:6e:b9:03:dd:80:ff:95:9d:df:
         76:19:6c:00:5b:3b:93:65:46:b0:ad:41:79:5e:93:93:de:04:
         50:3f:e2:dd:34:ec:ca:14:e6:2f:5c:85:62:b2:bf:c2:c3:a0:
         58:2e:80:dd:cd:f4:f3:d9:66:7d:31:56:38:a6:f1:e9:db:75:
         c3:cb:dc:c6:32:c8:d6:1e:2e:0f:55:5b:29:d7:29:a7:c9:70:
         b0:f7:ea:65:d6:60:e8:33:e7:f8:4e:78:4d:f7:40:73:b2:18:
         fe:10:33:35:a0:62:c3:4b:8c:46:f5:7e:6a:e5:c6:c3:13:9e:
         72:4d:18:d1:8f:3e:9f:d7:6b:1b:10:a9:b2:5f:78:97:50:15:
         f9:8d:d2:e0:a9:cc:72:3c:32:a9:50:74:10:2a:52:a9:9d:75:
         23:a0:73:cc:31:d4:f6:df:ea:e1:de:5c:35:d0:82:9c:de:f7:
         de:8d:2f:85:ec:c2:f9:2c:de:a4:92:45:34:c7:d5:13:b4:8b:
         d8:65:0b:81:78:36:33:ac:2c:00:27:a0:ad:8f:df:42:03:6e:
         7c:b9:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:03:22 2025 by rpki-client