Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/19572676-0503-3fa5-b27c-c96d9a5f21f4.roa
File:                     19572676-0503-3fa5-b27c-c96d9a5f21f4.roa (raw, json)
Hash identifier:          54gcPaC/gTLJVu9TjrjnMnjsfnFLwQd+vQLdxcrZoPo=
Subject key identifier:   82:78:08:DE:A9:02:97:43:44:47:D2:99:10:C9:02:7F:74:8E:04:F2
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461796304D19E88481BD20
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/19572676-0503-3fa5-b27c-c96d9a5f21f4.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:17:96:30:4d:19:e8:84:81:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=cc9a6dba-d7ad-4a91-b09a-1e9506b0bdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:06:39:35:80:d2:a0:04:84:06:24:87:b9:f3:
                    3e:a9:1e:95:8e:93:ae:39:ab:41:ae:c1:b6:25:96:
                    23:57:f9:ba:a8:b1:43:43:c8:8c:a9:99:61:fa:42:
                    d3:f7:7a:c5:59:e8:1d:7b:18:2d:cf:45:c8:30:4c:
                    de:ed:8e:af:a0:4a:59:03:35:2b:9a:43:16:5d:44:
                    12:c0:43:cd:07:6e:41:0d:b4:f3:a3:7d:97:b6:1f:
                    4a:ce:1f:2a:35:c1:ee:21:97:12:5c:11:10:e2:af:
                    3a:6e:46:d1:db:e3:43:46:46:0a:4e:59:26:d4:fa:
                    aa:0b:98:13:61:01:c6:0d:84:a0:cd:fb:11:e7:90:
                    e5:98:61:0d:7d:bc:c1:67:d5:4a:f5:4a:54:ea:f5:
                    3c:9a:19:b1:73:1d:01:e0:8c:b2:11:72:82:c8:7c:
                    cf:6d:b8:b7:d9:94:a0:21:a0:44:d6:3a:f7:c6:b2:
                    de:1f:3c:73:b5:93:0a:c4:bf:ce:73:64:2d:19:a6:
                    af:45:f9:d9:2c:ca:cc:84:10:2f:7a:4d:d3:eb:b0:
                    24:46:7d:88:f2:bd:46:a1:3f:52:4d:2f:91:e0:45:
                    a5:d2:fc:6d:0c:21:c3:82:cb:2a:73:c6:ca:cd:76:
                    06:07:10:3c:43:0e:9f:8a:ae:ee:f6:3f:70:a9:69:
                    ab:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:78:08:DE:A9:02:97:43:44:47:D2:99:10:C9:02:7F:74:8E:04:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/19572676-0503-3fa5-b27c-c96d9a5f21f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:58:96:80:1a:a1:bb:07:a2:54:ce:18:99:97:4e:65:34:8f:
         4f:07:2a:41:54:0f:dd:7d:4e:e4:87:c4:65:ca:a9:9c:af:f1:
         a6:fd:6e:83:44:fb:d2:db:6e:04:8f:ed:4e:28:3e:13:33:8a:
         be:ba:0a:25:45:43:ee:1a:00:03:fa:a2:f5:dc:3b:8e:00:f2:
         37:23:73:6f:47:3a:62:92:df:d8:2a:e5:1f:24:f1:58:55:a8:
         02:65:05:df:89:0c:1a:0c:c8:21:e4:d9:60:b3:c4:f8:85:57:
         6b:3f:59:08:fa:d2:93:0e:a8:ed:78:b1:d5:aa:27:6f:49:21:
         ae:bb:d0:1b:ef:df:e4:09:19:05:3c:33:68:5f:d2:28:60:95:
         72:c4:55:f7:d0:6f:d3:f1:1c:98:84:72:fe:20:bd:73:44:d8:
         0c:4f:e7:11:7e:1c:75:61:c8:af:83:2a:5e:08:01:95:73:88:
         77:de:18:df:22:66:ec:be:69:46:6f:96:33:ab:70:a6:60:fc:
         2a:52:2b:5b:59:02:7e:a0:1d:3f:11:9a:48:fd:82:91:91:b2:
         f4:91:f6:c1:1a:1e:17:4d:a8:31:26:e3:6b:8b:67:2a:58:39:
         76:b6:8d:54:a1:3b:c0:79:7b:8a:42:82:db:b8:15:64:85:83:
         d7:fa:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:56 2025 by rpki-client