Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa
File:                     37fb047b-5012-3f7c-b83e-f1839b19285b.roa (raw, json)
Hash identifier:          MdqBoDvN8O43jGeqTYOXt22eu1eSy1e2AkUoI0S33NI=
Subject key identifier:   C2:98:44:42:A6:38:44:ED:77:D2:8E:8A:7C:DE:2D:04:EA:60:1C:7B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146099D718E3B879ECAFD00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:09:9d:71:8e:3b:87:9e:ca:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=d8e99c29-8705-4317-909e-665b16a3dca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:3d:b9:c1:eb:37:95:a9:98:18:02:9f:5b:
                    d3:8e:41:4b:06:6b:3f:b8:5c:50:14:14:31:73:57:
                    43:0e:09:ba:c7:aa:c0:57:d8:63:8b:12:65:ed:5c:
                    95:37:91:dd:7f:4b:51:e7:bc:58:22:1a:bb:a4:b9:
                    4c:e8:a1:58:1b:be:e9:f6:dc:ca:2b:03:30:74:8f:
                    f0:5e:db:d8:3f:96:a7:06:b2:13:36:17:a9:88:70:
                    10:bd:f3:db:47:d6:d1:9b:ec:e5:99:c7:cb:19:82:
                    a5:36:be:2f:d7:49:c1:4d:e5:2e:0b:84:c4:a8:7c:
                    32:e6:33:0f:3a:27:e1:de:f6:0e:a3:e3:73:7c:62:
                    f3:b5:cf:ef:7a:77:16:1c:61:a8:6f:dc:d1:94:a8:
                    08:8c:86:08:13:25:48:6c:4e:97:35:ba:68:11:53:
                    57:a3:42:cb:17:11:2c:a4:05:ca:21:f2:f2:20:f1:
                    da:95:e3:b5:8e:2e:80:37:ce:eb:e4:f8:06:4b:2c:
                    fe:1d:3d:e8:1f:0a:c6:ac:f9:0e:52:a5:2b:64:09:
                    31:14:98:45:08:5c:48:80:76:8d:f4:15:2c:49:32:
                    5b:0f:98:f9:39:49:9d:61:23:37:94:eb:43:6b:b4:
                    d9:76:5f:32:eb:d9:b7:4a:75:19:25:8c:4e:67:8e:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:98:44:42:A6:38:44:ED:77:D2:8E:8A:7C:DE:2D:04:EA:60:1C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:68:80:58:e6:cc:4b:c8:7a:8c:a5:1c:88:d4:9a:4c:99:85:
         f0:7f:d4:6b:ce:ce:5f:b5:b5:9e:7c:b0:f1:e1:6c:f7:52:b9:
         8f:f4:2e:f8:ba:95:bb:e2:65:ef:1e:c8:08:cb:84:ce:cb:1c:
         f5:6e:51:40:7d:17:28:da:87:c2:e0:55:1a:16:60:1a:4e:9a:
         43:4e:e4:c5:58:11:7b:f5:d2:93:ea:71:db:22:ec:8e:e3:03:
         0a:e4:ab:1b:c6:95:b3:60:72:4a:ac:0b:c3:45:94:9a:f1:f7:
         6d:4d:ec:6b:76:15:1a:5d:48:96:df:88:3f:14:1a:ca:d4:a0:
         f2:5b:22:68:8c:ff:e8:e5:70:ac:ca:cd:8c:00:45:5c:85:cb:
         01:72:97:58:f3:46:e2:48:35:1d:b7:48:39:8a:fd:52:3e:9b:
         ae:9c:39:88:db:88:9b:7e:a7:6f:95:f5:2c:b0:2d:e7:1d:fd:
         01:44:30:96:45:2c:2c:67:88:6c:14:38:61:b5:9a:2d:87:89:
         e5:6f:4c:32:14:ab:c5:15:84:2a:d0:d9:d7:72:1a:0d:c5:07:
         22:02:5a:01:5d:5c:ff:39:28:f0:30:f3:47:6c:f7:fe:7c:2b:
         66:5f:91:01:47:ff:9f:75:1b:f6:23:7e:78:53:fa:cf:1a:68:
         bf:ee:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:20:59 2025 by rpki-client