Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77d3ac5-a400-3311-8a42-2ba2329a8b2c.roa
File:                     e77d3ac5-a400-3311-8a42-2ba2329a8b2c.roa (raw, json)
Hash identifier:          eurMZd8OEvWHoA3yHJZienHEodeap+nmcjDIiIfVK4s=
Subject key identifier:   D6:91:96:F2:B0:77:C2:4E:5F:76:2C:7B:B8:5B:33:AC:54:90:86:F2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B63673EECBE198C409EC12080
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77d3ac5-a400-3311-8a42-2ba2329a8b2c.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        65.22.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3e:ec:be:19:8c:40:9e:c1:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=ecdbf6ed-ca88-447c-8906-5fd1f393bb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:e9:28:35:d7:9a:e9:c5:e8:e3:4e:12:42:
                    24:57:ea:3e:cb:5a:03:db:b5:09:f2:f5:99:fe:f4:
                    01:0b:ca:84:bd:99:e5:d7:80:3f:28:63:82:69:cc:
                    0f:48:e7:da:50:46:dc:8a:e5:05:ba:99:18:cf:47:
                    09:ab:fa:9f:80:5d:d0:e5:be:71:e9:e7:30:8b:41:
                    69:60:89:a8:cb:f6:19:22:47:2c:76:ec:b1:a4:e5:
                    b3:8f:f1:5c:6d:59:fa:e3:c1:1b:fc:81:51:a3:37:
                    95:a1:12:4d:d4:0f:63:fa:81:cf:47:80:17:3c:df:
                    f0:09:53:9e:b6:c6:ff:1f:1c:17:ec:48:be:b3:af:
                    3b:41:e4:8f:9e:91:bf:a1:cf:63:d4:5a:6e:36:eb:
                    20:06:99:ff:63:d9:d6:07:73:dd:43:cd:e3:c5:5c:
                    2b:5f:93:7e:5c:32:5f:7e:96:70:42:5b:24:93:5b:
                    6e:da:48:3f:99:9c:44:4a:74:3d:9c:2d:75:e1:cb:
                    67:77:8d:16:f9:70:05:7a:f1:79:ae:72:e2:05:16:
                    0b:1a:39:84:02:98:2a:03:db:13:f4:95:55:6d:d4:
                    fb:48:9b:09:db:2b:47:e4:ee:f3:ec:6d:ba:b8:6a:
                    5e:53:35:15:4a:c9:95:ac:bb:d6:1d:32:46:92:f5:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:91:96:F2:B0:77:C2:4E:5F:76:2C:7B:B8:5B:33:AC:54:90:86:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77d3ac5-a400-3311-8a42-2ba2329a8b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ad:89:8d:8b:dc:dd:af:50:ad:ad:d4:18:73:57:54:3a:86:
         e9:89:35:53:3c:73:d2:76:ca:14:97:1b:ed:6c:39:14:e9:2c:
         d3:b2:69:ec:d8:80:cc:d5:32:8f:2e:89:b7:f3:a8:77:c5:dd:
         4d:67:44:71:5d:1c:87:9e:fb:9d:73:3b:a3:0b:ae:d2:9b:3b:
         e3:3f:f6:c8:e1:29:67:71:d0:40:7d:ad:37:e0:9c:60:b4:c0:
         5a:e5:9f:77:ce:5a:95:f5:58:66:c7:cc:cc:cc:bc:a6:b6:fa:
         16:fd:48:f7:36:58:82:c1:4a:b5:a5:c3:db:e7:f0:a2:ae:78:
         a5:5c:56:37:33:10:f7:af:e7:75:2d:08:d7:06:c4:a5:8c:81:
         01:fe:a2:c2:df:19:bd:13:82:18:a9:6b:70:bc:93:a3:30:54:
         61:f7:41:0b:f7:2c:a1:be:55:8c:11:c6:ff:83:82:f6:96:37:
         c2:9d:2b:56:93:a3:ab:00:1d:2c:f3:0d:1c:4a:60:cf:b5:f2:
         23:9e:23:e1:35:d0:b7:77:0a:81:22:59:50:3b:54:0f:13:01:
         cb:fa:ef:80:85:e9:73:5a:04:3c:91:ab:7d:0f:14:b3:fa:d7:
         62:ed:2a:14:a5:17:7e:ab:a7:d0:70:70:11:60:04:bc:d6:5f:
         bf:e2:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:19 2025 by rpki-client