Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa
File:                     8243bda0-f4c5-3196-872d-cda3f2256d3a.roa (raw, json)
Hash identifier:          y6IctGS9k+vbzKvEWUexUjFbkCSzvTEKjCgSeJpRzKI=
Subject key identifier:   C6:71:38:F3:77:AE:CF:CF:0F:3B:29:A4:73:5E:E5:7D:4C:CD:BE:1E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A814605C4FC80E61E568F8380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:05:c4:fc:80:e6:1e:56:8f:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=fa517cc9-47f7-4241-893f-24d929d436bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f5:c9:42:56:e6:37:6c:6e:0a:5c:d3:39:4e:
                    12:02:1c:4b:43:f1:e5:d0:e0:21:1f:a8:a1:61:14:
                    23:6e:56:58:13:4e:f8:5f:6f:52:5b:23:cd:51:f1:
                    5f:cc:cb:45:67:30:7b:1a:a3:7d:8f:1f:00:ca:57:
                    bc:68:c2:a4:82:a7:07:92:e6:dc:ba:66:98:1f:75:
                    92:d1:b8:cd:c3:13:cf:eb:0b:42:17:1d:e7:85:f4:
                    ce:2a:ee:13:12:1f:a5:5b:2a:67:ab:b7:c0:16:fd:
                    02:69:43:e9:41:30:bd:8c:c7:64:46:c9:6e:a0:ec:
                    58:ab:bf:9b:e7:31:e2:3b:bd:f4:0d:23:48:c4:bb:
                    9f:a7:56:61:ec:04:93:75:7f:a2:a4:18:5f:ee:ce:
                    1d:fc:d4:c4:f2:5d:80:0d:69:83:36:86:52:11:07:
                    51:93:64:02:71:3e:49:80:66:97:f9:47:7e:68:45:
                    79:7c:b6:61:fc:b2:39:63:e2:ed:98:9c:ec:a4:6f:
                    43:cf:92:25:0e:2a:5a:8e:b8:c3:22:8b:6c:95:a7:
                    f8:4f:ad:be:4d:0b:fb:5b:f6:6c:ff:e4:74:16:d0:
                    56:18:cc:23:3d:db:b9:69:53:c8:58:86:29:2b:19:
                    87:80:7f:8b:0b:bb:e8:c0:0a:24:e2:e2:4c:a7:2c:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:38:F3:77:AE:CF:CF:0F:3B:29:A4:73:5E:E5:7D:4C:CD:BE:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:03:d9:37:9a:7f:ff:92:e0:45:2f:80:cd:7f:f1:41:73:31:
         09:55:66:ac:92:57:31:73:c5:48:84:0b:c0:13:02:e6:f2:da:
         17:63:06:c7:79:cd:1b:58:77:6c:d4:b2:ec:61:9d:c5:37:58:
         56:16:f2:fd:ad:b0:9d:1d:85:1f:eb:6f:d3:a6:6f:b0:1e:68:
         81:2f:04:b1:3c:88:bd:7f:65:2f:a4:fd:d1:08:a6:11:0a:99:
         2d:75:ef:c7:1c:db:f5:84:8a:f6:0f:6d:fe:56:08:bc:e8:0e:
         21:d2:c8:5d:85:0f:4f:b0:bc:60:f0:4f:56:5b:89:39:84:2b:
         d8:9a:39:e8:66:c8:61:d6:41:97:e6:f5:4e:dd:27:27:42:04:
         aa:62:11:c4:8e:c9:78:7d:2b:8b:88:52:b4:df:99:fc:18:f4:
         a1:40:f5:53:3d:60:b6:42:fe:0b:19:69:e8:64:4c:56:10:ef:
         57:40:64:06:96:ac:d3:c0:fb:6e:91:07:0e:33:a6:ee:20:fb:
         98:2e:6a:8a:5b:a3:13:cb:dd:23:d7:a6:24:6f:69:4d:34:5b:
         92:14:8a:cf:26:b5:5d:da:be:67:ad:cf:ee:f0:59:c6:02:05:
         9a:bf:2c:97:ee:50:a8:63:21:37:60:63:39:b4:86:d2:51:c3:
         ae:5e:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:25 2025 by rpki-client