Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7ccb30af-a017-3100-a3ad-246c10337950.roa
File:                     7ccb30af-a017-3100-a3ad-246c10337950.roa (raw, json)
Hash identifier:          oYQLpuCp++ReQqbeJIz165//s5WpWDCCyfmMSRM44Ms=
Subject key identifier:   FE:22:A1:ED:6B:45:F8:FD:BE:88:A7:E9:9D:4D:8F:6F:86:5D:F7:58
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62020035B505EA6E0444B0B8
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7ccb30af-a017-3100-a3ad-246c10337950.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:00:35:b5:05:ea:6e:04:44:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=caaf128c-8f77-4d39-89e6-9ed42d2f68a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:e3:3d:bc:71:9a:90:e9:22:7e:32:b1:11:
                    22:7d:70:cb:d1:44:a7:ba:a6:f3:14:09:9b:7c:ad:
                    6e:62:ef:24:ab:65:28:b2:cf:19:11:14:8f:a0:59:
                    e5:9e:d3:d8:c9:bb:1a:24:ed:81:83:8f:60:89:1c:
                    19:9a:a8:6d:6e:9d:2f:f2:23:bd:e5:42:33:7a:0e:
                    52:bd:58:35:33:da:8e:57:ce:d4:74:65:02:8d:6e:
                    f1:37:b5:8c:45:84:92:d5:a5:b8:29:ac:0d:9b:61:
                    52:68:b6:10:bb:58:98:9a:21:29:96:c1:9c:e2:25:
                    33:d1:ed:16:64:ae:2f:e9:9d:bb:b0:ed:39:74:33:
                    55:cf:78:8e:bd:47:85:9b:82:64:47:89:c2:ed:53:
                    56:4b:5f:61:5f:b1:e9:ef:ea:bb:31:c6:9f:c6:01:
                    0e:95:c2:67:0e:c0:17:b7:07:01:a1:17:62:dd:44:
                    8d:69:9a:34:36:d3:85:e7:47:fa:ea:6c:b4:7d:88:
                    40:66:8c:4b:a0:2a:a7:46:c5:87:1b:e0:1e:93:56:
                    6a:b9:cc:70:c9:3a:bb:74:c0:57:d2:04:12:63:c1:
                    44:c0:5a:c9:77:58:7b:51:c0:01:1b:1e:5a:1e:5b:
                    bb:b1:c9:0d:e4:b8:eb:68:bf:bd:c8:88:64:1f:c5:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:A1:ED:6B:45:F8:FD:BE:88:A7:E9:9D:4D:8F:6F:86:5D:F7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7ccb30af-a017-3100-a3ad-246c10337950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:82:e5:52:05:e9:74:fb:4a:6a:06:ab:9c:38:b7:73:cb:
         b7:73:e2:39:dd:eb:0f:8f:4f:3e:49:9b:55:ef:17:aa:b8:fb:
         53:54:08:e6:e7:90:2c:ae:65:d2:49:63:8e:fd:fe:6d:19:b4:
         d6:3e:32:d0:6c:4c:bf:1c:4e:a2:9b:55:3f:09:75:d0:93:cc:
         eb:dd:76:33:0e:b9:60:d6:ce:02:2e:64:f5:e8:0b:0a:4f:44:
         b1:cb:de:4f:0f:d6:a5:9e:92:e3:dd:e3:06:8e:a2:34:13:72:
         f7:46:31:21:a5:ed:8b:1a:06:65:7d:bb:c6:88:6a:6a:ee:0e:
         c2:1d:6e:27:1a:69:2a:da:05:9d:89:fb:bc:8f:93:92:e2:7a:
         1f:37:aa:80:ca:a7:63:3a:4e:6b:55:6e:a4:6e:35:08:43:e4:
         9e:d7:f5:e5:ea:6c:5a:46:eb:4a:16:19:99:dd:64:c7:c7:83:
         62:a1:e4:4d:c9:ee:c4:14:8f:2b:bc:79:00:b9:62:81:d3:c9:
         8c:d2:ec:20:d8:2e:ac:d5:c4:3d:ff:36:d7:34:51:25:4e:9c:
         cb:af:a2:5c:0c:11:91:90:65:b3:ac:f9:1e:5d:8d:b1:4b:ee:
         a9:12:da:d8:76:16:66:92:23:4b:34:55:76:d4:40:ed:f8:a2:
         f4:cd:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:32 2025 by rpki-client