Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa
File:                     7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa (raw, json)
Hash identifier:          0ltnA/sZUE7ZYlyFE03ZC2/n1k2FhvdePuzzpZSSqrc=
Subject key identifier:   10:71:6F:EB:BF:05:83:7F:F6:BC:FD:50:7A:70:12:88:41:18:3B:48
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62022BC319B8F1DBFC553040
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:2b:c3:19:b8:f1:db:fc:55:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=247abac7-06a8-44c3-ac79-3a49c569349c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:91:64:ba:b9:72:14:1a:ca:32:b4:c6:43:
                    0a:3c:b3:f9:46:3c:dc:d1:9a:2e:21:7a:1f:30:19:
                    f7:5d:a7:14:49:f6:7d:d5:3a:d0:89:71:16:10:80:
                    49:63:3e:23:07:3e:49:41:40:7f:3a:d7:56:d0:ec:
                    c4:e5:8b:49:f6:b8:89:eb:f2:07:ae:a5:51:39:87:
                    c3:5b:ae:61:fc:6f:6d:a9:24:a7:56:46:ec:ce:03:
                    52:9a:69:2c:b5:05:16:84:de:b8:79:b0:b7:ce:91:
                    e7:d2:7b:09:6d:3a:55:fc:0e:14:77:be:11:5b:87:
                    9f:ff:3c:43:31:f6:5e:bc:d7:b6:23:bb:de:81:2e:
                    e1:52:d9:da:8f:26:3d:fd:6a:8f:f4:e7:1d:05:19:
                    11:17:f3:c6:45:89:72:c8:2d:9f:78:a4:01:d9:16:
                    1a:59:e6:1e:58:d8:1e:9d:33:6f:be:ad:28:6a:21:
                    62:b8:59:fd:0d:df:30:56:e1:ea:fd:54:bb:56:c0:
                    a5:30:9f:30:de:a7:3f:2b:93:25:39:5c:09:5d:37:
                    6e:22:5a:8e:9f:2c:60:2b:ae:24:98:94:1d:c9:2a:
                    84:a2:f4:97:97:c0:1c:5e:f3:e7:4d:72:31:47:c8:
                    9e:a3:b4:51:1d:d3:40:f5:f4:8e:5d:92:5a:9f:67:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:71:6F:EB:BF:05:83:7F:F6:BC:FD:50:7A:70:12:88:41:18:3B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7f196fc3-6d26-34bf-9f91-c5d336707f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:17:4b:96:f1:10:5f:0c:3d:41:e6:29:f2:98:ae:1b:71:
         2c:ca:9c:46:07:59:21:81:96:c4:05:f1:8f:cc:82:1e:2a:12:
         7f:cc:8c:3b:e4:69:58:cc:7c:cf:a6:ef:22:39:8f:15:db:9b:
         ee:b2:c9:7e:2a:b5:5d:fd:57:57:4a:92:d2:4c:d3:e4:2e:af:
         e9:20:99:d3:bc:d2:2c:9f:34:ad:ad:ba:5c:fa:fe:67:c0:07:
         60:c9:6e:3e:f4:aa:d8:91:57:76:bf:55:fd:ff:67:20:54:6f:
         60:0e:ba:df:ef:a9:e5:3b:8d:2e:d0:c9:3b:a7:ad:11:86:e0:
         68:c7:bb:58:48:90:4e:53:6d:b1:f2:e8:73:16:df:b8:76:e7:
         62:94:82:bc:09:b9:55:f1:08:22:ef:48:48:58:c9:60:42:eb:
         35:83:83:ff:2c:97:ab:39:65:c1:5a:89:bc:bb:27:bf:7c:b2:
         5e:5b:28:6c:9f:13:85:ba:99:5e:82:a9:28:d2:2b:bb:4a:3a:
         ca:b5:7a:99:a3:f0:88:c7:5c:dc:aa:9b:23:4a:12:8f:26:86:
         71:b9:3a:90:74:8d:dd:8f:64:1c:21:5a:ff:f1:00:7a:14:c9:
         62:39:01:94:42:67:fd:c2:77:55:32:5c:ba:26:8d:7a:e5:d2:
         c6:a8:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:29 2025 by rpki-client