Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1498c40-84fa-3906-826b-09370506500b.roa
File:                     d1498c40-84fa-3906-826b-09370506500b.roa (raw, json)
Hash identifier:          bQbOq/Zm+TlTKw7rUP5UjxFz+fQZa8Rd+O58lsGBcCg=
Subject key identifier:   BE:C1:22:2D:BE:02:DD:6B:CF:94:05:76:71:B4:17:59:13:24:A1:91
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8146167BC5F0D2C190071800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1498c40-84fa-3906-826b-09370506500b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:16:7b:c5:f0:d2:c1:90:07:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=1fbfb241-1ead-41ba-9ab8-5e5d9574a8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1d:0c:e6:48:6e:a9:fa:a5:8d:81:cf:82:55:
                    fc:27:9d:ac:7e:1e:b7:ba:05:74:d6:cf:15:c6:d6:
                    30:bb:9a:16:f0:90:53:d4:43:7f:03:50:0b:24:52:
                    3b:23:15:fa:44:aa:c8:3d:55:0b:24:e8:d3:5a:0a:
                    7c:31:f6:08:88:35:15:e5:98:29:77:94:c6:b7:c1:
                    76:1f:97:d9:cb:ea:d4:1b:74:36:63:d9:2c:42:24:
                    c2:11:a8:c2:13:87:d1:3d:66:55:b1:a3:09:ea:4c:
                    cb:02:86:28:72:d5:ea:35:b6:a9:a7:7f:cf:ec:54:
                    32:04:ed:bf:72:e3:f0:59:19:f4:bf:01:0e:15:11:
                    ba:e9:13:82:f4:98:18:89:65:b9:15:30:ee:1a:00:
                    2f:28:da:fb:30:bf:b6:2d:1b:a2:4d:fb:dd:02:65:
                    a4:bc:77:f5:b9:4b:72:eb:d1:c6:53:c8:7c:f7:db:
                    e9:86:3c:0b:6b:e8:ae:28:90:ea:89:54:7f:36:f2:
                    f2:92:b3:a7:ec:e0:5b:ab:9a:5e:9a:72:2a:4e:02:
                    e7:48:d2:ca:06:37:cc:39:ab:bb:c8:c7:79:70:c8:
                    5e:13:1d:ba:ef:ac:97:12:dd:6d:f7:90:e7:6b:b5:
                    e6:68:b5:25:f4:24:4e:c8:0d:84:f5:91:49:67:fa:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:22:2D:BE:02:DD:6B:CF:94:05:76:71:B4:17:59:13:24:A1:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1498c40-84fa-3906-826b-09370506500b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:94:7b:17:b4:2e:bf:b4:c7:db:c0:2a:6c:6e:a7:ab:71:
         fb:40:10:de:82:62:e9:6f:11:95:7d:c1:7b:fe:21:a7:8b:43:
         6c:35:89:bf:6b:d8:ea:bc:49:f3:5f:c2:6c:0b:11:02:73:6c:
         0e:47:0a:d1:6f:76:72:c7:0a:74:c1:2f:8b:3c:ab:d8:c7:0a:
         bd:02:b6:3f:0e:75:77:ef:50:14:49:f0:95:fd:66:75:d0:41:
         fd:12:67:d2:0d:6d:13:0c:34:16:0d:af:7f:31:23:b0:c2:ec:
         17:c4:27:57:7b:95:c5:25:26:48:fb:f7:8a:de:a8:2b:c6:81:
         43:52:5a:11:14:e4:46:18:8a:45:9c:06:a3:dc:ee:c1:4d:3e:
         aa:20:e5:a2:07:a6:6d:8a:4b:58:96:72:74:fb:50:a9:ad:de:
         61:f4:dd:b6:21:f9:50:bf:b3:8d:ce:11:ea:66:e5:3d:ad:9f:
         bf:fe:fb:65:59:15:a5:76:0e:a3:db:09:3b:bc:f6:90:e4:2a:
         c7:88:ac:d5:e5:ef:fb:f0:8c:fb:28:1f:b3:d2:02:8c:a8:55:
         ea:91:b7:6d:c7:3d:3f:4e:0b:db:8f:2d:70:76:a1:53:35:0e:
         39:f0:0f:28:09:ce:c3:d0:5b:f8:e0:e9:69:1d:8e:eb:d8:82:
         ff:d2:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:56 2025 by rpki-client