Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7296abb4-87a3-3ef4-bd3d-c16608e35a4c.roa
File:                     7296abb4-87a3-3ef4-bd3d-c16608e35a4c.roa (raw, json)
Hash identifier:          slhAtXu7KCYPhE8rdA5saaO5w0NNtCfvmdzCMMRV4Ww=
Subject key identifier:   EC:CE:26:5B:33:8E:34:2B:10:CF:3E:21:BD:E6:C3:EF:59:FB:EF:F5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62021D07B9151E7934B93380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7296abb4-87a3-3ef4-bd3d-c16608e35a4c.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1d:07:b9:15:1e:79:34:b9:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=03035d5b-c9a5-4b96-af5a-9cde84b864df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:b3:6d:a6:f2:cb:9c:81:29:f2:7c:9a:df:
                    ee:23:2e:8c:ad:40:52:2a:c9:f9:14:b9:91:fe:ce:
                    ea:26:43:7f:87:17:ae:03:f7:c3:62:5f:9c:d5:4c:
                    6e:23:68:90:34:95:36:e4:9f:b0:6a:e8:17:ea:43:
                    85:39:b7:66:e9:53:1f:de:bb:4c:07:c6:f0:7c:0e:
                    be:72:12:6c:67:74:aa:93:76:8e:05:31:f6:10:7a:
                    b2:fa:e0:01:58:dd:db:28:e8:73:b7:36:71:01:ab:
                    1b:99:ef:ed:92:5e:7b:ef:b4:4f:c3:08:f7:bb:ba:
                    ba:0a:d9:12:16:15:61:36:26:ee:7d:0b:5e:32:7f:
                    2f:7d:2e:3a:63:e5:a6:e3:76:93:b8:ca:b9:9c:4a:
                    3c:47:85:00:21:86:f9:a3:8f:49:c4:58:45:36:1b:
                    a8:4d:72:4d:d1:a6:20:90:af:90:6a:84:06:a5:50:
                    d5:b2:34:11:48:88:cb:1f:dc:de:c8:a7:dd:97:6c:
                    a1:44:f8:6c:80:15:14:33:53:c2:13:fc:c2:ce:a4:
                    59:39:cf:da:b0:6a:13:f8:c0:48:ac:a3:e6:d2:f2:
                    92:ff:67:99:ef:15:c8:4f:ad:5d:c4:6d:d0:2e:9b:
                    31:48:ae:b1:12:08:12:4f:df:53:1a:d2:86:56:44:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:26:5B:33:8E:34:2B:10:CF:3E:21:BD:E6:C3:EF:59:FB:EF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7296abb4-87a3-3ef4-bd3d-c16608e35a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:82:58:01:35:59:e2:3a:d0:ac:8e:f4:d5:88:64:40:ac:cd:
         86:31:a1:37:21:38:04:11:66:f0:1a:8b:9d:c1:58:00:bd:8e:
         9e:2c:6d:58:7a:01:75:53:48:eb:9f:c9:35:c7:a8:9a:ad:08:
         b6:36:87:73:b8:81:d7:75:8a:50:d7:40:25:66:e7:45:37:1a:
         e5:6e:43:56:45:b2:1d:2e:db:5a:85:48:6e:5a:94:f9:ff:d1:
         4e:59:32:2c:31:b7:a2:bc:b2:5a:98:bf:82:57:fc:04:b9:51:
         24:37:0c:de:83:90:42:db:13:e8:ad:7c:7b:02:76:b3:17:e3:
         f7:79:9c:26:6c:50:99:44:56:00:06:8d:70:77:09:10:7b:a8:
         51:e7:3a:77:71:d9:01:d9:44:11:c1:21:26:c3:8e:55:4b:21:
         33:e2:6b:c4:cd:27:7f:2f:35:3c:83:cd:e6:23:21:58:18:ee:
         99:a5:f0:4a:8c:e7:6f:9d:d1:bc:52:cc:f0:82:f4:92:db:50:
         4c:4d:3b:05:03:fe:e5:bc:f3:14:26:1e:1f:c2:e6:1b:75:1d:
         99:9f:26:0c:1e:a3:2c:c1:cf:a2:7d:6c:df:97:26:1d:42:da:
         36:a8:e6:d3:f5:0b:8e:d7:f7:e9:8b:7c:7d:6c:4d:c4:97:57:
         3e:5d:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:49:03 2025 by rpki-client