Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa
File:                     763f52b2-d755-32c5-9727-61ee6f561e05.roa (raw, json)
Hash identifier:          v94RxBP1w+rM2d01McFAGOV9Ne3M0zRUv33CtacLFcE=
Subject key identifier:   1B:45:E5:EC:F4:A7:A2:E4:10:B7:D5:E5:B2:C8:36:3D:29:6D:C6:E4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461069068DF6C388238EC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:10:69:06:8d:f6:c3:88:23:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=20283e5d-fd51-4427-8069-44a1830d2608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:ce:42:08:4b:85:a6:78:90:50:80:cf:04:
                    35:5f:61:b0:8f:be:d2:ef:24:9f:06:15:09:ae:4c:
                    8e:24:79:5e:24:71:4b:32:53:82:45:03:d2:95:41:
                    f0:fc:65:8a:db:80:1d:37:b5:58:7c:84:9b:eb:c8:
                    1b:6c:91:f5:77:2e:c4:2f:5f:19:d3:b4:b6:48:0a:
                    7e:6a:6c:96:d3:5c:3f:97:d4:04:51:9e:79:dc:85:
                    4b:95:c5:ed:4b:02:0b:6a:5a:62:93:25:66:cc:46:
                    e5:38:29:eb:13:53:c5:bf:55:50:c1:eb:e2:bd:52:
                    31:ba:bb:db:90:22:41:64:7d:4e:05:0d:f4:7e:bb:
                    67:b2:36:3d:08:cc:95:cc:15:f1:e5:94:99:ea:5a:
                    40:a7:df:76:ba:61:c4:a5:68:28:5d:e0:3a:7c:7d:
                    90:e3:b4:09:cb:a1:a5:be:b1:c9:00:9e:22:5b:e9:
                    e5:aa:ae:79:3d:70:6b:f6:98:5c:6a:cc:46:79:0a:
                    33:9d:b8:42:fa:85:26:61:70:c3:67:c2:09:90:6b:
                    08:79:cf:1b:46:e5:6b:aa:e7:64:98:a5:4e:e5:93:
                    85:3d:02:7a:f9:73:1c:f6:ed:f3:87:de:d2:c2:3e:
                    72:03:d3:1c:fe:ef:55:09:ad:11:aa:95:f7:36:08:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:45:E5:EC:F4:A7:A2:E4:10:B7:D5:E5:B2:C8:36:3D:29:6D:C6:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/763f52b2-d755-32c5-9727-61ee6f561e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:3c:9c:75:20:29:2a:c5:0a:29:21:fe:6e:95:de:07:cc:
         f7:99:b4:90:b4:12:ca:a1:c2:d2:dd:7b:55:ef:c3:1a:94:14:
         6e:a4:84:42:e0:6e:fe:98:7b:73:cb:10:96:5e:51:e9:e3:c3:
         4f:0c:24:a1:c2:ab:bc:35:1d:8a:30:06:e9:63:19:54:d3:a6:
         b1:ba:2f:06:69:ce:55:10:e2:7a:61:d9:85:50:61:7e:91:8f:
         46:67:b5:23:aa:fb:62:48:38:85:17:33:3c:b6:35:3c:ab:32:
         88:d3:29:92:f8:bd:38:be:96:ae:82:70:ec:dc:41:f2:0a:6f:
         80:70:08:42:6d:41:67:c2:5a:b3:f8:b2:21:3e:97:06:9b:45:
         2c:94:68:50:84:84:97:c1:ad:9d:31:99:af:cd:72:27:a3:2e:
         4b:b0:11:4e:40:0d:c0:ad:4e:1d:c8:a3:3b:40:9d:fd:d2:60:
         cd:5f:d2:b2:c8:97:d3:8a:04:18:10:e4:31:24:a2:f3:fe:46:
         30:4f:d8:0e:f2:3c:e4:7c:77:3d:d9:77:30:5f:b6:30:de:81:
         38:a6:ad:cb:67:3e:ad:21:05:5b:71:c5:dd:92:8b:df:4e:ca:
         b0:fa:6e:a4:7f:7e:0a:fd:9d:10:d9:bf:89:eb:23:ae:4e:23:
         0a:0d:18:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:02 2025 by rpki-client