Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53c8bb09-258f-32ba-bd29-d616ef1872d8.roa
File:                     53c8bb09-258f-32ba-bd29-d616ef1872d8.roa (raw, json)
Hash identifier:          KWnRK3lg79CFCu3KZHeMDdmjk80TPV2i7lQxYy5wmmQ=
Subject key identifier:   54:11:0E:F7:49:E1:11:6E:34:05:3B:34:2E:48:92:00:D7:14:AC:0C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146142321CF4D5D85C79F80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53c8bb09-258f-32ba-bd29-d616ef1872d8.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:14:23:21:cf:4d:5d:85:c7:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=f3d842ff-263e-42f6-b8e2-d881b0342d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:72:d1:1a:3f:fd:05:54:70:85:12:cb:53:
                    6a:44:fa:70:f2:1d:fc:d8:8c:05:f9:37:6a:8b:16:
                    93:65:40:96:49:ae:18:3a:23:2e:b2:fc:24:a5:60:
                    ce:91:13:70:ec:69:45:c1:33:43:67:c9:e0:86:24:
                    69:f4:6b:27:bf:61:a6:47:23:cb:0a:6e:48:83:10:
                    f5:68:fc:3c:c5:ca:52:3d:46:ca:08:de:b0:c4:cb:
                    09:fa:88:7a:82:63:d6:22:22:a0:95:f4:f5:1c:2d:
                    d3:7d:21:63:c9:62:54:65:a3:cf:15:22:e5:a9:be:
                    d2:cb:33:e5:ba:da:2f:77:f9:af:35:71:1e:ed:74:
                    59:5d:26:09:86:b1:e9:0f:24:e6:be:b8:44:89:72:
                    17:44:51:cf:81:e6:d5:c6:24:38:4e:f7:49:9a:d4:
                    3a:1e:76:6f:d5:6f:d8:29:b2:ca:dc:45:fc:f4:3c:
                    b1:bd:79:e8:bf:41:d7:c8:d2:63:44:ef:73:b4:09:
                    98:36:c4:19:0e:c3:af:ba:54:ad:6b:fb:3c:d6:9f:
                    96:30:6d:fe:bd:7e:40:99:82:31:40:40:7b:fc:37:
                    dc:c5:51:1a:f6:ba:4a:d1:a7:2a:d8:0d:c9:b7:81:
                    e9:5d:76:4a:1c:f0:bf:b1:77:0f:17:7b:06:29:58:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:11:0E:F7:49:E1:11:6E:34:05:3B:34:2E:48:92:00:D7:14:AC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53c8bb09-258f-32ba-bd29-d616ef1872d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:04:4d:35:95:36:9f:7a:70:73:ae:01:44:a7:ae:4d:64:
         bd:9c:cd:ec:31:11:63:8c:ff:a3:b8:7f:f8:95:1c:c5:a0:2b:
         0d:57:18:20:7e:e7:be:49:a0:3f:b5:ca:9b:76:c5:da:bf:e3:
         f1:46:31:1f:a7:60:ac:d4:ec:62:60:a5:08:40:a4:a9:eb:91:
         6a:9c:87:1a:6f:b3:28:12:2c:4b:0f:95:69:6d:b6:15:fd:df:
         ee:26:ad:a6:fd:48:9d:2e:1e:ad:f6:86:a4:18:28:81:89:08:
         b5:2a:72:c7:26:4e:19:d7:d5:90:c2:3f:53:7d:e4:61:84:87:
         af:08:99:51:5f:3b:8a:b5:30:35:6e:26:97:7c:96:89:7e:7a:
         89:e5:0a:09:4a:17:20:2f:52:38:e6:72:fe:12:fa:1a:57:dc:
         e8:69:91:5f:33:e1:e9:c4:d8:a2:85:3b:94:3c:e3:71:2d:e3:
         ac:2d:40:ac:a9:8e:9c:80:1a:d4:83:bc:86:0b:a8:8b:62:f1:
         f4:fd:02:56:a7:ef:0b:a2:f6:14:26:77:90:4b:25:2d:aa:a3:
         35:3e:75:29:71:05:f2:58:18:48:6a:e1:e6:ac:53:d8:34:f7:
         5b:a9:4a:f3:d3:f5:a7:2d:a0:90:8b:54:8f:55:e4:5e:0c:e5:
         17:14:2d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:10:38 2025 by rpki-client