Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a27bab4e-c1f0-3f94-832a-2e0ae9ad232b.roa
File:                     a27bab4e-c1f0-3f94-832a-2e0ae9ad232b.roa (raw, json)
Hash identifier:          0vLkLGpKLczAOdC9CJnhiNskqVkh+fEcT2T0Ixq0q+k=
Subject key identifier:   3A:99:80:92:D2:28:32:B5:B4:16:DD:71:6A:21:5D:9B:9F:2B:6E:78
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B62021B66D56C5C9BED72BA20
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a27bab4e-c1f0-3f94-832a-2e0ae9ad232b.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1b:66:d5:6c:5c:9b:ed:72:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=7b4ef259-4e51-49a0-8dbe-9d0fe36057eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:f5:1a:79:4c:a8:8c:4c:a4:cc:6c:35:18:
                    03:94:6e:25:a4:d4:05:18:ce:9c:bb:28:ca:51:10:
                    80:53:db:f1:7a:b6:f8:47:0b:16:6d:b9:87:0e:13:
                    f3:c6:08:a8:c2:61:e7:89:57:1f:f1:db:36:4c:7f:
                    b7:45:2f:47:72:f7:1f:e2:59:61:85:e4:6a:57:0c:
                    13:16:cf:be:92:d5:7f:27:8c:26:e8:0b:0e:0e:b2:
                    35:b2:62:e0:a3:27:b6:18:67:cb:aa:05:39:e9:48:
                    12:df:b0:8c:d4:46:a0:8c:f6:5c:b3:c4:1d:46:2b:
                    a7:f4:6e:47:20:4d:db:ec:ab:f1:b5:ae:20:84:98:
                    74:00:a0:db:f9:84:22:0d:68:f3:4a:67:3c:4f:21:
                    2b:c9:a0:4d:6e:b2:7f:b7:f3:58:0d:87:b1:c4:25:
                    89:41:82:dc:02:65:1a:12:09:84:16:b9:ff:41:dc:
                    21:04:12:06:37:ed:0e:fe:1a:a5:fe:ae:a3:4c:e8:
                    e3:0e:8f:5f:b9:7e:20:50:44:1b:30:1e:c6:d1:44:
                    cd:93:81:46:dc:59:71:32:1a:7b:a1:97:46:9d:3e:
                    94:88:1d:bf:01:ba:99:e8:82:e2:07:e6:dc:a5:40:
                    ad:d9:ef:ca:67:de:63:83:3d:73:df:d8:1a:3c:83:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:99:80:92:D2:28:32:B5:B4:16:DD:71:6A:21:5D:9B:9F:2B:6E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a27bab4e-c1f0-3f94-832a-2e0ae9ad232b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:09:ed:f0:3a:23:ba:4b:4e:d4:3a:2a:d5:2c:8d:af:65:a0:
         34:8a:df:5a:17:c0:47:f9:ff:e2:a3:45:c7:80:bd:52:e2:96:
         8e:df:76:54:c6:93:c7:94:c3:04:c6:63:85:2f:ca:a5:d7:8a:
         cb:d6:4c:ed:08:b1:d9:8f:90:c9:20:87:90:bc:75:dd:06:8e:
         68:c1:ab:0b:1c:a4:05:27:c7:81:11:eb:d6:33:81:85:59:6a:
         41:01:9d:e6:93:25:7c:3c:58:91:99:74:f3:f5:14:52:14:e1:
         f7:0c:c0:4b:5c:b8:6c:22:c6:d2:96:08:f3:24:d8:4f:88:88:
         00:38:7b:c8:ba:20:d3:f5:4b:a6:bb:5a:d9:d6:79:b8:a8:c4:
         46:84:a1:9e:cf:a6:6b:ab:49:3c:b6:71:04:dc:e3:d4:67:7a:
         f9:80:ee:3e:25:f2:de:5c:32:45:1b:cd:4f:7f:44:9e:73:76:
         88:aa:c4:74:b2:f1:42:54:94:a9:30:bf:e4:01:e3:33:3e:3f:
         fb:8a:8e:d0:7c:33:ab:b7:74:46:6c:87:1f:4c:e9:a5:f2:db:
         1c:81:f2:60:88:9c:25:6e:c5:ef:42:90:62:27:4b:c1:42:f0:
         b5:fd:98:00:ec:18:a3:2a:c5:4f:1a:7b:83:2d:fa:ad:fa:b5:
         7c:cc:48:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:38 2025 by rpki-client