Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/44a13b84-eb7b-3dc9-822a-61453f46bd9b.roa
File:                     44a13b84-eb7b-3dc9-822a-61453f46bd9b.roa (raw, json)
Hash identifier:          2ynnLWmDVsk0BY6GPdk2vbMjJD1vQMUDQtWKqOKJAAI=
Subject key identifier:   10:C0:7E:C9:C8:62:05:36:91:0F:94:CA:92:D9:A0:F1:E5:A2:31:CD
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814612B5386B03E5C962EB00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/44a13b84-eb7b-3dc9-822a-61453f46bd9b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:12:b5:38:6b:03:e5:c9:62:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=6ce49312-35ae-403d-be8b-a4bc13cdf96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:6d:43:93:b6:95:4b:5d:73:cb:4c:35:2c:
                    f9:a9:30:97:71:c6:3a:38:4f:36:44:bf:45:f0:6a:
                    f9:f2:1d:c6:1d:82:12:17:16:77:24:78:63:f6:44:
                    94:8d:70:88:b4:49:93:83:20:c7:2f:69:7d:c5:42:
                    d1:46:81:2b:6d:e5:ee:4e:8d:84:dc:fe:07:17:a2:
                    c5:21:13:f9:d3:a0:76:2c:65:8a:d1:e7:c2:7e:27:
                    38:ef:45:66:ef:83:a2:5b:28:dd:83:c1:e2:dd:ba:
                    3d:80:05:09:97:60:4c:c0:0e:fb:0d:d3:3c:62:38:
                    35:2e:16:64:e7:cd:a7:35:3b:42:be:1a:c7:29:fa:
                    1b:36:c2:ce:7f:b0:a4:f1:d4:66:15:c2:ab:86:e4:
                    f2:e9:dc:3f:e0:2f:98:98:7d:17:f2:7b:bc:74:6e:
                    74:27:67:b0:49:f6:f7:9b:68:30:b2:59:d0:e6:a6:
                    a9:a7:fe:5f:05:3b:54:c6:b6:29:1b:f5:cc:23:c2:
                    aa:93:3a:2c:c4:bd:c9:56:10:c2:04:24:a8:05:5f:
                    01:ac:cd:6d:ea:da:97:65:0c:87:82:1f:68:26:e7:
                    aa:9e:0c:9d:57:58:72:e3:ad:fb:d0:6e:99:d5:2e:
                    5e:09:f6:38:b0:f0:2a:fb:93:db:c9:bc:05:25:2f:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:7E:C9:C8:62:05:36:91:0F:94:CA:92:D9:A0:F1:E5:A2:31:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/44a13b84-eb7b-3dc9-822a-61453f46bd9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cb:8e:16:f2:ac:2c:f1:05:19:be:65:77:fa:14:ad:43:6d:
         2b:59:36:5f:a4:7b:ae:33:0e:ea:19:ed:38:6b:67:58:0c:3f:
         ad:e6:4a:ed:4d:9b:b6:c9:53:6d:b8:06:ba:88:0a:40:37:19:
         91:65:a8:42:ed:e8:44:52:2e:45:cb:f6:b5:f6:e6:4d:9d:ff:
         37:ed:46:d5:54:d4:a7:01:80:f9:a0:1c:c1:f1:79:fa:a2:de:
         b8:0d:ea:e1:fc:fd:1b:37:83:fe:bf:17:ec:cb:ab:99:31:24:
         e9:c0:a4:13:fd:35:78:da:08:0f:93:bf:7f:b1:62:40:e3:53:
         d7:63:53:90:52:8f:04:c3:e2:53:d3:bf:5c:7e:3a:5d:d2:fd:
         65:77:53:c9:f1:d0:92:fc:74:52:30:ad:a6:fe:a2:38:3f:65:
         d4:57:7b:0f:c6:00:e0:fe:91:28:62:1c:65:d0:35:c0:32:26:
         1d:26:99:dd:d1:e3:73:9f:1e:f5:8f:df:fe:3a:b1:2c:0f:9c:
         ee:58:8d:ee:73:d0:33:10:ab:b9:1d:45:99:08:98:80:68:16:
         26:16:e9:5c:a8:58:34:7c:70:16:05:f2:40:73:23:19:5e:5d:
         34:08:be:d4:a7:b7:18:fd:32:37:0a:e5:20:a9:b2:7c:8c:a7:
         09:11:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:24:47 2025 by rpki-client