Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa
File:                     d3d48afe-6908-31d4-958a-74f7b78b9069.roa (raw, json)
Hash identifier:          KzxWSGZkhd5Xl1lTtn2jaKwU5O+KfBldiICwSJ/X/Pk=
Subject key identifier:   CE:1A:26:7F:75:E5:DB:71:D5:CF:09:2B:F3:B8:23:D8:3B:8F:3B:73
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201CA5B8C5B5E6B3A382740
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ca:5b:8c:5b:5e:6b:3a:38:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=4552e829-185e-4ab4-953e-16e1c2fc5560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:21:3a:3b:1f:4f:32:03:55:72:dc:d2:b2:
                    35:f9:21:0f:50:eb:b0:df:c4:8d:2c:9e:07:d5:50:
                    2f:c3:14:dc:88:c8:5d:65:99:ca:ab:45:66:bb:1e:
                    57:12:0d:2f:cf:7b:f3:a7:2f:5e:67:87:64:50:a9:
                    18:ae:ac:91:5c:e2:11:9a:a4:b4:21:44:56:2b:b8:
                    6e:43:97:bb:ea:5e:94:1e:79:5d:b3:8b:b8:e8:b6:
                    72:1a:c7:14:d2:54:d9:41:22:80:1b:70:0d:0f:90:
                    7b:b9:29:9b:23:9f:fa:b3:9d:51:6e:3d:ba:d5:ef:
                    1b:6c:08:12:69:f9:b6:1b:67:07:c5:1a:3f:c0:80:
                    94:ee:e4:13:14:17:db:24:41:8e:0d:eb:34:94:77:
                    11:a3:f0:df:13:6f:ad:6c:f2:dc:01:66:60:fb:c7:
                    06:17:39:b1:cf:43:5e:8a:d5:cb:1f:e8:7d:6f:2f:
                    4f:f6:62:26:9e:e8:54:46:6e:1b:3c:df:3b:31:68:
                    4b:1c:fe:fc:d6:0c:0b:1e:44:a7:40:8e:eb:36:b5:
                    40:46:01:d1:04:71:74:ca:4a:73:23:d2:8f:f0:5a:
                    93:b1:9e:49:52:bf:a5:65:db:8e:d1:3c:09:ea:08:
                    c0:16:48:48:a7:16:3c:8b:bc:59:6a:ce:48:e7:02:
                    50:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1A:26:7F:75:E5:DB:71:D5:CF:09:2B:F3:B8:23:D8:3B:8F:3B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:12:32:f8:70:f6:c2:51:93:5f:8f:d7:d6:b2:b5:ff:7f:76:
         98:0d:4c:7c:c9:ac:c3:fe:d7:85:da:c4:8b:4b:dc:f6:42:f8:
         53:b3:9e:ee:d4:a7:76:38:f7:41:5b:21:2c:36:b1:15:ba:b9:
         38:ed:e4:e5:5c:fe:b8:9a:06:52:df:3d:35:40:75:ce:ed:f8:
         e8:b0:7d:05:f5:8e:ee:cc:42:b0:d1:0c:7d:88:e7:45:0f:3d:
         84:02:21:d6:f9:ed:02:b6:2c:49:c4:95:8a:75:28:8c:1d:59:
         26:ca:83:f8:e4:c7:65:86:76:c5:17:a7:de:a5:e9:43:82:f7:
         61:ee:01:f4:5e:49:3f:7b:ce:87:2b:3e:0e:5d:a3:81:f2:b2:
         62:1d:67:48:c7:9e:cc:62:57:07:f2:99:fe:e2:38:66:99:fc:
         d2:5a:06:c6:92:aa:d8:f7:c5:b7:85:44:cf:ae:0a:49:16:b3:
         b6:e6:2e:74:b8:54:80:c5:c5:c1:5a:c1:c5:3c:20:06:59:85:
         e8:41:f3:61:85:c0:29:bf:55:05:a9:d7:01:1f:ae:0e:70:3d:
         be:73:18:a5:0f:57:1f:11:61:a6:f9:71:18:5f:f6:90:9b:1c:
         45:45:6a:0e:fa:80:39:8d:5a:bb:77:38:bc:08:c7:d7:7a:48:
         64:54:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:54:53 2025 by rpki-client