Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa
File:                     f8f30434-cd44-39b5-9767-fd50db071a96.roa (raw, json)
Hash identifier:          FghBzq8t58sS38LXTqkTQtIxa90IxoJqjep5eEzp2w8=
Subject key identifier:   07:A1:FF:A4:C4:0D:C6:7F:89:FE:72:FC:EA:6C:7E:F4:C3:5C:17:E6
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B63674D97E107CF2E76FBE380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        65.22.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4d:97:e1:07:cf:2e:76:fb:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=118073be-6dea-495d-9cca-619b195b8347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:c4:e2:a6:83:97:4b:0d:1d:a0:74:48:28:
                    7e:3e:6e:c2:40:df:ab:8d:65:c7:93:dd:c9:a8:09:
                    e7:fc:b2:87:53:50:16:ce:f3:23:72:f5:b6:69:8d:
                    4b:55:ba:08:fc:50:57:18:b6:f5:9b:d1:3d:00:1e:
                    c8:d2:18:bd:f2:ec:28:29:64:db:fe:8c:cb:9c:27:
                    ba:fd:5f:ee:14:bd:83:77:db:d5:e4:57:e3:20:5e:
                    4f:3c:39:85:a3:58:a3:79:5f:52:5d:02:60:c8:97:
                    a0:c1:98:34:ba:69:2a:24:df:37:d0:e2:43:d1:da:
                    f8:a8:ab:cb:51:7d:2d:66:58:ef:a0:32:e6:20:62:
                    1c:de:13:a3:e5:7f:63:3a:f9:dd:8f:87:bd:d8:03:
                    f7:da:0f:ca:89:54:8c:ff:79:16:2d:98:0e:36:ef:
                    ac:44:e3:13:04:81:b0:c8:af:0c:44:3d:48:b6:01:
                    f1:05:30:0b:4a:98:2a:83:4a:f6:65:ef:b6:fa:a8:
                    76:2f:1e:b1:46:b3:b7:5b:1e:ce:05:a2:d2:45:31:
                    1f:89:68:d7:ef:67:b6:15:88:68:9a:eb:51:12:3d:
                    86:bf:04:28:ae:34:a1:ea:8d:d7:1c:01:d1:73:e6:
                    fe:2f:a5:0e:2a:04:fc:67:44:3a:a9:fe:91:54:17:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A1:FF:A4:C4:0D:C6:7F:89:FE:72:FC:EA:6C:7E:F4:C3:5C:17:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:df:68:a9:21:ac:21:ec:7a:be:2d:77:f5:95:1a:70:76:
         01:17:de:b4:7c:9a:8e:63:80:05:97:13:dd:ab:0d:73:95:5e:
         31:41:19:77:f3:66:fd:f1:02:b3:f2:c3:61:64:9f:5a:4a:18:
         92:2f:01:c8:40:59:92:9e:17:0b:7c:b7:b7:41:b2:3a:f6:27:
         2c:48:02:11:ae:57:e4:48:2e:88:50:36:23:c6:b6:db:26:5c:
         37:6c:e2:f3:3d:dd:5c:cb:66:c7:d8:8c:b6:8c:ee:11:7d:88:
         0c:ed:a8:d4:f2:b1:9f:cd:da:48:19:80:4b:35:30:d7:7e:1c:
         47:90:6e:ce:93:6f:55:e7:3f:7d:e2:9a:b9:cc:9c:dd:30:d4:
         e9:e4:6c:16:52:4a:78:b6:22:eb:e3:91:cc:6c:e8:8b:03:48:
         81:73:38:b7:f9:3d:b8:5f:67:11:8b:72:06:58:7d:db:20:24:
         41:49:6d:9a:1e:8c:25:e7:ac:cf:78:81:99:78:73:e5:ac:36:
         04:52:dc:da:09:7f:ce:2b:83:05:a9:f6:74:68:c4:48:56:1d:
         99:54:5c:99:9f:21:18:9f:75:32:7e:20:fe:7d:13:13:8a:00:
         92:52:0c:85:92:12:bc:f7:f1:70:80:1c:b0:8a:c7:b0:5c:82:
         01:56:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:16:34 2025 by rpki-client