Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa
File:                     043392a1-76c7-3951-b215-fe1dd38b254d.roa (raw, json)
Hash identifier:          S6fPdH8m6wmjiuYN8pTwAvZlZ7Ku3SToHvhpny9ed+4=
Subject key identifier:   4A:F9:4E:AE:8D:B8:13:9C:F3:97:98:C8:F5:8F:E7:A2:9C:F1:D4:10
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814613AE0C4F2E989162EC00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:13:ae:0c:4f:2e:98:91:62:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=c89333f2-d34d-4dbe-8d41-4c0260c85bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:5d:01:fd:27:3b:a7:dd:5e:a9:98:6a:a3:
                    37:9d:ec:61:12:53:db:4a:13:d0:35:f9:4c:17:12:
                    93:20:2e:95:80:c1:59:b9:85:92:b0:2e:98:c4:2e:
                    d8:19:ae:87:66:10:b7:fb:d0:51:2d:82:c2:6b:18:
                    c0:24:5f:dc:d5:ac:c6:31:34:90:cd:76:86:5e:0b:
                    1f:00:17:10:f0:08:91:f1:e4:72:5c:52:c3:16:e0:
                    48:5c:85:fa:16:2f:a0:15:3d:f0:1c:68:81:8c:87:
                    f4:bb:dd:c8:34:e8:3a:8b:7d:20:ed:23:60:ef:9d:
                    ad:df:57:17:30:ed:5a:ec:21:ea:90:8a:d0:71:00:
                    f3:ff:2f:3c:a2:8a:33:1e:96:ad:1f:7d:88:e6:e5:
                    7d:9f:db:17:0a:82:c9:f5:89:24:7d:2f:fe:da:83:
                    be:3f:08:ec:1a:cd:c2:68:44:81:69:bd:8d:a9:41:
                    0d:a5:09:b3:ce:4e:80:70:6c:5b:23:14:5f:f2:ef:
                    03:3c:02:32:bd:37:52:4b:89:f4:8d:50:79:de:2e:
                    ca:fe:c8:a2:7e:2f:3d:84:b7:07:01:38:41:b3:e2:
                    60:eb:b0:b7:cd:5c:b3:af:8c:b7:15:c3:d5:d6:cf:
                    ef:09:44:b6:6f:85:45:b8:1d:b4:f2:a1:59:7b:0e:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:4E:AE:8D:B8:13:9C:F3:97:98:C8:F5:8F:E7:A2:9C:F1:D4:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:8b:aa:41:02:cd:a3:42:41:d8:c8:53:93:0f:f0:99:be:e1:
         bb:9e:85:cf:e6:b3:cd:45:b1:28:6d:ce:96:aa:35:61:28:ea:
         96:fb:fe:4d:7b:80:ce:7a:11:cc:e4:a2:61:01:3c:e0:8c:08:
         40:cf:52:7d:7a:98:57:d7:40:5d:57:89:e7:db:1f:65:7d:a0:
         b2:27:5a:89:59:e2:3d:98:2d:f3:0c:33:cd:e0:df:58:f1:08:
         32:9f:a2:42:4a:4e:f4:75:ec:58:a9:5b:5a:45:3d:23:bb:d5:
         cb:56:1c:2a:9c:f2:16:61:fb:77:73:cb:47:e2:fd:aa:cf:15:
         26:be:fd:91:22:9e:1f:6b:d6:fe:dc:e8:74:eb:ce:4b:53:90:
         96:65:86:21:60:be:ff:20:2d:0a:f6:c2:d1:82:8d:c7:07:9c:
         9f:c6:2d:45:1f:ed:74:78:e9:51:a1:fb:1a:db:49:92:e6:94:
         3c:fd:27:10:49:ed:27:7a:22:7d:2f:5b:5c:c6:85:9e:95:e1:
         f3:08:c6:5f:ac:84:b4:52:bc:68:f6:22:67:4e:15:e1:d6:78:
         f4:26:1e:95:b4:29:3d:8a:d6:11:be:1f:e8:f8:2b:bf:e5:58:
         b9:15:f7:9a:7c:96:fb:25:89:6f:cb:a9:18:9b:33:ac:13:ed:
         53:60:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:24 2025 by rpki-client