Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa
File:                     d3d48afe-6908-31d4-958a-74f7b78b9069.roa (raw, json)
Hash identifier:          c+U7fQOTzah63lCG2mpgO29g6w5F2E04J+2H7kuqVRs=
Subject key identifier:   59:8B:1A:67:5B:5F:98:5E:C5:D3:1A:EE:F3:EC:B8:CA:CA:3A:D0:D8
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81460AA1162F9CC65BDB0A00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:0a:a1:16:2f:9c:c6:5b:db:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=00034c9a-410a-46a3-b54f-13377ca2135d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:65:bc:99:b7:0b:48:66:f4:2b:c8:72:65:de:
                    b9:07:34:55:bb:1b:a9:73:d0:e5:09:fe:3e:49:cb:
                    98:55:1c:2a:ac:38:e1:03:9c:76:a9:01:30:a2:89:
                    68:b1:ec:03:b7:19:01:9f:52:8c:42:87:48:aa:91:
                    2b:99:ab:cb:b4:1c:fe:19:80:9b:5e:d6:f2:9b:a2:
                    fa:50:61:58:51:27:0c:1c:90:df:55:0b:8b:53:b9:
                    73:4d:30:b4:80:b2:e4:b7:cf:99:45:ec:91:0a:f0:
                    4e:34:c3:96:7b:a9:70:b9:a7:31:99:70:d5:cc:c5:
                    07:8f:9b:ac:d4:41:29:39:c5:77:1e:f5:77:7a:1b:
                    32:da:fc:33:a8:56:f3:29:46:36:c4:7c:95:83:bc:
                    27:b3:bb:bc:5d:95:59:4b:3e:75:bc:41:f3:e1:7f:
                    d0:d6:cd:35:e9:f1:56:b2:94:fa:c1:4a:20:1d:fd:
                    58:53:19:58:8a:d8:7a:7a:0b:e1:ff:d1:77:ab:cf:
                    90:27:13:a9:a1:8a:bc:23:5a:df:89:a9:f7:2f:0f:
                    59:5f:04:71:c0:f7:85:ac:a3:d6:b7:3f:77:3d:0c:
                    f2:48:f2:b0:aa:10:ce:88:e0:9c:6a:31:b6:c2:aa:
                    34:f3:c2:17:c6:ab:8e:48:ea:a7:7f:47:ac:76:28:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:1A:67:5B:5F:98:5E:C5:D3:1A:EE:F3:EC:B8:CA:CA:3A:D0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:0d:74:dd:75:7e:33:4c:4e:77:12:8a:96:1e:7c:f3:fd:14:
         9f:a9:89:94:5b:d5:19:bb:e2:22:69:b1:88:fe:61:7f:0e:dc:
         e7:09:1c:bb:8a:55:19:56:60:f0:f6:f8:e8:28:bb:e1:d3:3b:
         cc:f0:6d:3d:5e:b5:30:af:13:ea:3b:40:6e:eb:c5:35:fb:73:
         2b:77:6d:9e:4c:c5:fb:de:13:4a:88:b9:8a:29:ab:00:83:94:
         03:94:8f:70:56:1b:f9:d5:d8:9f:29:2d:22:7d:0c:7a:d8:42:
         80:7b:28:c3:76:4b:94:42:ef:a4:09:a6:b8:bb:ab:51:d8:21:
         ba:e0:d8:55:ac:9f:31:d6:06:89:54:3e:54:ee:d0:80:22:91:
         71:52:18:bd:93:c1:28:11:a6:67:16:ed:93:24:b5:36:26:0f:
         d9:6b:34:a4:f5:f7:6e:49:ef:b1:60:70:ae:14:65:f3:72:54:
         cc:c3:c0:ef:0a:94:0c:9a:da:eb:c9:3b:77:20:59:cd:42:09:
         f2:7d:05:ce:df:9a:0b:e5:9d:f7:53:f1:aa:dc:1c:8b:0c:d6:
         ef:2c:bb:f3:d2:a4:1a:5b:a9:8e:56:46:4c:58:a5:a3:4a:00:
         ad:af:ec:90:4b:05:fc:0a:da:0c:a0:9a:bc:36:99:1e:4c:7e:
         1f:f9:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:10 2025 by rpki-client