Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa
File:                     ddc8d858-035c-3840-a15e-407ffbe6818e.roa (raw, json)
Hash identifier:          qgix0Qqg6qWVvFCZ9F5RxanuvialfY5p1EEz/jzidHI=
Subject key identifier:   AC:D2:9E:EF:46:51:4F:A8:50:11:7A:A6:F3:D8:DC:07:38:D4:A9:94
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620227CE74564FD10D6E44F0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:27:ce:74:56:4f:d1:0d:6e:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=300dad67-a793-4e66-a60f-e4eee826db26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:f3:ca:9c:b3:ed:b9:7a:d5:fb:af:bb:36:
                    78:3d:1e:9c:61:13:d4:df:72:f3:81:eb:69:1b:40:
                    c0:72:05:06:99:67:62:80:b3:38:99:52:cb:fe:f8:
                    00:4b:c7:ec:13:5b:45:1d:c6:b0:07:78:f7:71:06:
                    0d:56:e0:f1:fe:67:96:90:72:84:5f:1b:ed:34:99:
                    ed:e9:5a:fb:e2:f9:00:90:c5:cb:24:69:34:bc:ab:
                    0f:71:20:a4:9b:8f:5e:cd:aa:38:73:68:9a:af:db:
                    35:82:e7:e3:ab:08:93:8b:d8:47:36:3a:6f:00:8c:
                    48:86:f3:1a:07:9d:cd:4f:3f:71:90:d2:c0:28:2a:
                    cf:be:3f:07:f4:d1:08:ae:06:e8:d7:52:29:72:75:
                    58:2d:52:29:34:35:a3:59:26:f4:db:2c:6f:9d:96:
                    fd:2a:57:ff:f4:5d:fd:45:ad:a5:26:b1:14:85:7a:
                    9b:fb:f0:d6:a8:3b:34:1a:bd:84:17:15:dc:2c:09:
                    16:41:b6:43:31:29:22:10:4c:55:00:1d:c1:6c:73:
                    6c:34:d4:e0:bf:d2:3e:d4:6e:79:16:9e:0c:08:5b:
                    b2:2d:bb:0a:17:e2:84:5e:77:fc:2d:65:29:44:86:
                    16:7b:62:68:a5:0d:89:65:b7:5d:a7:9c:53:3d:16:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D2:9E:EF:46:51:4F:A8:50:11:7A:A6:F3:D8:DC:07:38:D4:A9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:30:37:c3:fb:3a:8f:bf:0b:4b:bf:d4:35:9d:90:f7:f7:b8:
         ec:c1:47:67:48:cd:0f:d0:28:78:e8:80:0b:0e:33:6e:ff:75:
         5e:29:1d:45:11:6e:91:df:51:1a:0d:41:d1:03:7f:a7:46:ac:
         08:61:d1:b7:27:70:ad:16:95:7e:c6:28:77:25:ea:93:2f:ef:
         05:f4:b5:2c:34:f5:de:87:af:62:d6:60:92:9f:24:0e:8f:01:
         f9:ed:8d:e6:89:29:22:96:a2:f7:a9:2b:98:2c:64:13:30:f4:
         41:5b:b3:07:d5:01:0f:ac:d7:b4:af:60:a5:51:96:57:23:8b:
         26:4d:81:f1:e3:0f:71:54:cd:27:f5:e3:e2:b1:f2:57:cb:55:
         27:ee:88:02:b2:73:ef:12:0d:65:25:ff:7e:da:83:f8:2c:85:
         a9:f5:59:70:cd:25:56:4b:59:33:9b:09:c6:bd:52:fe:6f:50:
         bb:bc:41:74:97:38:fc:3f:75:3a:06:90:bf:6d:7d:52:87:5e:
         5e:57:61:b4:92:14:a6:6a:ba:a9:01:b8:b5:ae:2f:06:fe:22:
         2b:32:2c:dc:3a:ea:28:e1:7d:b0:d8:17:c6:51:b7:63:3e:9e:
         51:11:fb:dc:a8:06:1c:58:a3:00:2f:0f:95:95:59:95:7d:66:
         7e:72:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:20 2025 by rpki-client