Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9fd3590c-6f43-3237-b280-d27e5de7c188.roa
File:                     9fd3590c-6f43-3237-b280-d27e5de7c188.roa (raw, json)
Hash identifier:          G2msVx+9G4x8MgPGZcRcHFd6eLFPlA+dr5/bT28rmxk=
Subject key identifier:   24:89:EB:21:16:CB:DB:EB:32:E4:15:39:AB:6A:22:53:B7:1E:FE:95
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201D556E088104D8F43FBA0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9fd3590c-6f43-3237-b280-d27e5de7c188.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:d5:56:e0:88:10:4d:8f:43:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=8902ab9e-8d74-45a2-bc73-8e52511f8d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:6d:f9:1e:9a:be:1a:31:b3:1b:99:6f:ff:
                    fc:df:70:d6:7f:b5:7a:a1:e6:04:46:67:fd:ee:a5:
                    f5:74:73:ea:89:35:cc:79:7e:3d:7b:ae:30:9f:70:
                    3c:d0:b9:52:15:9e:68:d9:2c:e4:12:f5:92:10:ca:
                    a5:fe:c5:81:5f:09:c3:58:8b:4e:5f:ec:6f:19:f1:
                    c7:ea:b6:c8:44:ad:e8:02:aa:98:2b:67:4a:a3:c7:
                    58:05:bb:62:d8:54:e8:14:8b:26:45:f6:76:5b:78:
                    1c:09:ab:42:1f:c1:e1:92:84:57:0e:3f:14:65:a9:
                    a1:93:ea:b0:7d:4e:a2:40:be:26:5f:4e:94:4f:fb:
                    2a:04:aa:28:13:6f:9e:be:10:d1:bc:0c:89:b8:aa:
                    19:a9:82:ea:0c:c8:07:f1:72:a3:79:92:82:b4:99:
                    5c:24:be:9f:36:cf:bf:9a:3c:cf:51:89:32:2c:f2:
                    23:4d:51:55:c0:85:31:34:66:51:0e:59:4e:c1:14:
                    f3:66:5b:3e:a8:b3:94:90:57:98:a5:a2:57:80:00:
                    2b:00:74:02:3d:19:16:15:5d:33:0b:80:3c:81:1d:
                    47:83:bf:86:d1:7b:af:4d:08:dd:7d:93:91:a7:07:
                    b7:22:70:9d:5d:18:8a:34:af:44:a4:a8:b4:8f:66:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:EB:21:16:CB:DB:EB:32:E4:15:39:AB:6A:22:53:B7:1E:FE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9fd3590c-6f43-3237-b280-d27e5de7c188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6b:d5:e7:7b:32:6f:10:10:43:45:50:b2:f5:cd:ef:86:ec:
         13:53:f0:ab:7d:bb:08:50:0e:90:bd:24:89:10:45:f5:7f:cf:
         43:4b:8e:12:7a:30:3a:17:8f:d3:fb:de:24:73:d1:35:59:9f:
         06:09:26:b7:31:a9:53:4c:bf:4c:3e:9a:50:e2:77:32:2f:1f:
         d8:99:3f:92:c5:34:1c:14:3e:d1:1f:dd:a3:c9:41:59:97:f8:
         0a:15:0e:ea:bb:49:2e:e5:9a:ad:07:a5:d8:5f:3a:88:4e:11:
         8f:88:dd:e0:4d:22:9d:dc:1f:90:6c:fe:77:7f:26:56:a1:9e:
         0f:3f:1b:e1:87:13:36:05:b1:bb:1c:33:87:4b:5e:67:a1:ae:
         a1:dc:14:cd:f0:23:d1:46:ab:61:66:86:20:3b:47:d2:f4:e5:
         0c:68:ed:71:4e:44:de:91:07:22:1c:d4:87:63:3f:8f:e1:26:
         16:26:7d:d9:73:b5:37:59:98:26:f1:33:48:5c:5a:bd:e3:84:
         3e:ab:a6:18:40:24:8f:84:ba:8f:29:b2:07:c5:7d:22:a5:6c:
         2c:c5:be:38:70:ec:b9:c1:4d:d1:0a:62:8a:26:e9:47:6b:26:
         26:70:25:20:fc:fb:0d:53:4c:bc:ae:98:da:d8:8a:fe:73:a9:
         28:52:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:04 2025 by rpki-client