Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1552ba92-1c59-3ffc-b786-f8e18f25e9bd.roa
File:                     1552ba92-1c59-3ffc-b786-f8e18f25e9bd.roa (raw, json)
Hash identifier:          JNwdDtcA+ePMTC+u4i/kPX66jqnNJDr6ruJWbkyZX18=
Subject key identifier:   9B:06:F1:5F:DF:52:2D:95:CE:13:57:C3:71:72:C0:71:79:9C:A9:77
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461775B0C3544BBE111400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1552ba92-1c59-3ffc-b786-f8e18f25e9bd.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:17:75:b0:c3:54:4b:be:11:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=2f46ef4e-ed6f-41a3-b4e0-40dd2fda4232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:7d:f8:09:86:b0:8f:32:70:5d:10:8c:11:
                    56:a3:cf:c0:57:c7:3f:6e:76:49:cc:63:bf:3e:62:
                    1a:57:8f:4f:32:f8:4d:67:a6:06:3c:2a:b2:1e:14:
                    f5:6f:80:c8:3c:01:04:5a:b7:4d:b1:83:ee:58:34:
                    66:ea:76:ca:c2:71:46:60:b8:40:a3:a3:81:d1:1a:
                    be:56:fa:82:9a:7f:09:5b:fb:c9:89:30:dd:e8:ab:
                    07:79:25:b6:fd:bd:9e:2b:69:0c:a8:93:ee:88:25:
                    36:d6:76:73:7b:40:ba:21:3e:24:93:30:e9:ae:7f:
                    f0:3d:2e:b8:8b:d5:08:4b:d9:da:e0:e1:6e:16:01:
                    2f:88:c7:8f:78:f7:37:18:92:63:9a:01:c5:50:c9:
                    51:8e:23:ec:b4:1a:ac:4b:21:dd:d5:9d:11:02:43:
                    25:13:a3:e1:77:55:43:40:85:47:e2:6e:4c:24:24:
                    03:b2:86:d8:4d:c0:52:0a:8d:0a:f3:a5:02:4e:6d:
                    a4:98:38:a7:7e:7b:b9:12:6f:12:b7:4c:44:0f:67:
                    e5:9c:21:11:71:65:29:47:dd:61:3a:8d:35:1b:ea:
                    e4:11:2d:e9:39:67:05:15:af:c1:47:ac:d6:9b:9e:
                    27:2c:39:03:c2:81:22:fa:44:6b:67:6c:e8:29:33:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:06:F1:5F:DF:52:2D:95:CE:13:57:C3:71:72:C0:71:79:9C:A9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1552ba92-1c59-3ffc-b786-f8e18f25e9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:78:5f:c6:0c:e3:29:60:4d:71:04:94:0e:08:76:7a:3d:
         86:10:c0:f1:0f:35:04:11:71:5c:c1:2e:73:e2:75:81:20:9b:
         b4:92:c8:e3:55:35:37:a6:e9:6e:22:11:46:8c:01:61:8f:12:
         30:32:b3:41:26:05:2e:c7:f1:87:40:a3:0d:06:f9:d5:d3:ce:
         70:35:95:5b:b8:82:f8:56:8d:8e:53:94:5a:d8:a0:91:73:13:
         1e:dc:ee:e1:ba:8f:44:3f:1b:37:e5:00:9b:21:ee:03:c5:7e:
         9d:bd:2d:3e:d1:b9:0c:3e:7e:41:27:67:5a:03:2b:3c:81:59:
         e5:80:57:89:2f:cb:aa:6c:d5:be:73:6b:a9:91:e2:ce:0a:5b:
         55:e1:18:80:e4:d2:49:ae:77:19:ae:3f:4f:26:ef:b9:ce:49:
         0c:a2:5a:8c:ac:78:28:8f:6e:19:9f:cc:b7:5b:25:ae:87:be:
         5f:f1:65:50:fe:a4:f2:c4:da:1f:53:8b:01:0b:7a:3f:0f:b3:
         7a:09:01:b2:9e:a3:37:c0:ae:e9:9f:d2:4e:74:00:9e:85:45:
         38:28:c4:08:41:36:67:ba:f8:0c:31:7d:5a:f4:59:3a:03:66:
         4c:0b:88:89:9c:67:47:9b:42:48:a9:c2:80:80:78:04:6f:19:
         68:31:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:03 2025 by rpki-client