Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e05edfd-71fe-3b77-9c54-08030d08a120.roa
File:                     6e05edfd-71fe-3b77-9c54-08030d08a120.roa (raw, json)
Hash identifier:          9vYUHEb29+hsu9usz5ANIzwDvyAyIzB/cyJxPw4clvE=
Subject key identifier:   EC:4D:FE:09:01:A8:44:52:04:B9:40:F2:A1:96:3A:1A:4A:04:B5:27
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201FEEB94A7B9BD73480D40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e05edfd-71fe-3b77-9c54-08030d08a120.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:fe:eb:94:a7:b9:bd:73:48:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=7521d0bf-6bc5-43b4-be45-f431d9acc4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:de:97:4e:97:d4:ea:ae:43:4c:30:19:74:
                    c1:a5:ea:24:82:81:49:b8:88:0c:af:02:ae:8f:f5:
                    97:13:e1:80:66:50:cc:cd:86:e0:c1:cd:ea:ab:ff:
                    eb:b8:1d:86:94:19:95:e6:0e:3f:33:25:c1:59:30:
                    81:19:7c:7a:c3:8f:c4:7b:6d:3c:6f:ad:94:71:e3:
                    56:b5:f2:2f:f5:97:27:b0:bf:88:05:ad:26:e3:75:
                    10:b3:a2:24:e9:07:35:9d:f9:5a:d1:ae:99:fc:ec:
                    76:e5:fa:ff:fe:1f:32:eb:85:04:58:ee:25:2e:d3:
                    9a:cd:c5:63:01:f3:43:ae:4a:ac:aa:9c:86:98:ff:
                    87:2e:0e:23:f7:c3:ac:f6:c1:fe:3b:1b:09:65:4e:
                    66:66:b6:d1:57:c5:65:c8:ca:23:3a:f0:52:ec:7a:
                    e3:fe:d4:06:78:2e:25:65:4f:5d:c8:77:f6:9b:7f:
                    2b:b4:84:9b:2c:f5:aa:10:4d:9f:7b:30:ca:bd:37:
                    ac:99:e6:32:af:3b:6a:3f:fe:86:7f:ad:d4:23:a7:
                    d9:f5:97:b9:87:1d:5e:3b:f0:bc:04:3e:f4:7e:8f:
                    30:a5:b4:8f:2d:2d:4d:ad:d1:5d:f4:b8:c4:81:33:
                    68:b4:3a:8f:dc:cf:dc:d2:e9:d6:fb:86:20:02:38:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4D:FE:09:01:A8:44:52:04:B9:40:F2:A1:96:3A:1A:4A:04:B5:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e05edfd-71fe-3b77-9c54-08030d08a120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:fa:4b:81:64:d7:9b:8f:ea:0c:39:20:59:81:03:45:d6:7c:
         5f:7d:01:d8:fd:99:fa:63:08:e1:ea:db:10:c6:2a:c4:91:36:
         af:47:7c:71:63:52:92:24:0c:77:e5:11:c6:6b:27:a5:18:86:
         b5:9b:1b:3c:b1:d7:e5:2a:08:a5:5e:ed:80:3d:66:e7:05:b1:
         e1:8e:19:99:14:86:11:c8:ff:37:2f:e1:9e:fc:0a:bb:91:e8:
         01:20:67:e1:ef:45:31:91:f6:86:54:bc:09:6b:98:eb:a2:75:
         1f:5e:38:d5:e7:84:4a:97:c0:6f:9b:91:52:9b:36:c2:d2:11:
         32:77:d8:c3:b3:e0:ae:68:bc:01:a8:38:1e:c3:73:57:12:c0:
         80:19:9f:e8:47:2a:6d:58:1d:c0:7d:a2:3d:61:52:39:1e:66:
         e2:5a:66:2e:6e:a6:25:35:26:8c:bc:07:26:d1:de:c9:00:25:
         9e:2d:46:88:61:e4:df:61:b6:4d:b1:40:a7:3d:27:16:a0:26:
         3d:a5:e9:22:b0:f7:39:6c:35:28:5d:92:ba:01:96:35:ca:db:
         cf:46:24:b0:ce:15:c0:7b:12:94:77:72:bc:12:fc:db:01:7e:
         ce:23:98:17:70:7d:fb:4b:d9:6d:8c:7c:3c:89:34:bc:0c:10:
         6f:68:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:19:53 2025 by rpki-client