Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/891f76e3-93a4-3dbf-a5ed-73fa07976dcd.roa
File:                     891f76e3-93a4-3dbf-a5ed-73fa07976dcd.roa (raw, json)
Hash identifier:          ccqg76hwK5w43DcXfDKYC/v7nkslXeUV7X/J+jxvqcA=
Subject key identifier:   E9:C7:25:BB:44:A5:30:43:C8:3E:3A:71:44:2A:FF:56:43:9A:4B:1E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B63674B39C689793038945D20
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/891f76e3-93a4-3dbf-a5ed-73fa07976dcd.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        65.22.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4b:39:c6:89:79:30:38:94:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=8c0c9175-4a7c-4b70-9844-d8664af42708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:21:d3:4c:28:9c:b4:ba:e3:75:ac:40:d5:f2:
                    58:11:ec:d0:fc:57:05:c9:c1:86:12:48:64:dc:d8:
                    a7:15:f9:3f:f3:26:a8:bf:4f:c5:3a:08:d1:76:93:
                    c6:df:ec:31:59:0f:58:dc:f5:fa:69:f9:5b:75:01:
                    19:49:34:d3:ed:da:86:ca:ed:01:68:d9:c1:1c:db:
                    59:b5:65:1b:6e:a4:4f:17:4b:a3:3d:46:73:b5:9f:
                    50:31:95:e9:18:50:5d:1b:7d:51:df:65:08:aa:c1:
                    55:db:22:d7:9b:63:60:07:68:ec:cb:e2:24:5c:e4:
                    e3:e4:36:bb:ea:56:d1:c7:06:ba:a3:34:04:f0:e4:
                    da:f5:54:6a:bc:2a:19:e5:0e:ce:7e:b5:03:c7:ac:
                    3c:1f:3a:66:e4:39:24:03:80:37:7f:40:d8:c1:d4:
                    c3:63:54:da:94:dc:c0:a6:fe:8f:f8:b3:46:5e:00:
                    a5:a8:9c:18:0e:2d:88:44:f9:00:3f:fd:57:28:b5:
                    14:1b:19:0e:0b:b2:45:a3:5f:07:20:5c:b3:b4:aa:
                    b8:8e:5d:3b:cb:76:79:d6:95:71:16:42:d6:3f:32:
                    1e:d1:58:b3:7c:bf:fa:68:4f:f2:20:a2:90:02:e2:
                    d6:20:c6:93:34:7d:7a:4b:d1:13:8a:ad:5d:ed:6e:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C7:25:BB:44:A5:30:43:C8:3E:3A:71:44:2A:FF:56:43:9A:4B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/891f76e3-93a4-3dbf-a5ed-73fa07976dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:6b:f4:4a:0a:c4:f7:fb:5f:4e:d1:40:55:de:2e:b8:a8:
         10:4b:40:a0:18:5e:9f:1e:ce:8a:2b:08:f4:c6:b7:5e:2e:ee:
         ae:11:70:ee:74:7f:1b:96:01:18:5d:2a:fa:85:41:68:05:b6:
         c2:c4:29:d5:c3:80:48:17:e5:5c:f6:e2:e2:8a:0c:f9:17:6d:
         90:ee:0c:9f:d1:e3:16:45:12:bb:74:00:22:c6:3a:32:d6:d9:
         b2:82:18:7e:7d:05:5c:a4:4c:d0:12:82:91:55:94:de:9a:16:
         00:e5:b2:b0:35:03:ee:a0:06:c5:b0:4e:b1:a9:44:65:83:c5:
         68:d2:53:93:54:be:a9:22:3b:60:ad:96:24:8e:df:4e:c7:e8:
         09:4a:a8:fc:2c:ee:92:36:4e:e0:ec:fb:cc:ac:9c:2d:4b:be:
         88:95:35:d4:58:8b:84:22:34:7d:0f:7a:10:c4:1a:60:f2:fa:
         00:d8:10:29:e8:36:73:1c:e2:b1:b0:30:90:1d:76:8f:2a:03:
         2a:25:05:57:03:01:10:45:61:5d:e4:24:f0:4e:c0:cf:20:60:
         da:48:41:32:1f:35:2b:f0:56:84:d4:01:3f:a1:9e:e4:c2:5d:
         a7:a5:76:a6:8c:87:74:6b:b6:b1:4c:ed:61:61:72:4e:62:b5:
         9f:d2:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:13 2025 by rpki-client