Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e059ae5c-2f57-34ea-bc48-8ee1b11145e0.roa
File:                     e059ae5c-2f57-34ea-bc48-8ee1b11145e0.roa (raw, json)
Hash identifier:          HUKYhtOt7+6fK9upyqPA0k1PbRj+DM82wUwDXxfDCho=
Subject key identifier:   89:54:18:DE:5A:EF:0E:98:32:2D:97:91:A7:D5:44:B0:90:D9:78:13
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81460AB7D936F7D01B509DC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e059ae5c-2f57-34ea-bc48-8ee1b11145e0.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:0a:b7:d9:36:f7:d0:1b:50:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=86518e10-30c4-4f24-bc31-586068f92d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:42:fa:3b:af:7f:d5:8b:dd:8f:bd:57:ed:
                    92:3d:95:5e:be:27:ab:6e:43:6a:a1:3c:42:64:74:
                    57:61:dc:b4:a3:4e:bc:82:32:54:ac:bc:da:b3:e9:
                    09:e6:8c:56:81:08:ae:34:40:ae:1d:9b:20:38:c0:
                    78:99:ba:7c:e6:44:90:00:7d:03:be:ad:c7:e8:01:
                    26:9e:ae:cd:07:74:4b:0a:3d:76:b6:6b:fa:15:f5:
                    da:33:9d:53:ec:06:27:14:68:ac:94:08:19:df:9d:
                    83:c3:7f:e0:af:2e:f9:0c:a1:27:d2:b3:ab:a3:75:
                    17:89:49:26:61:07:b3:dd:c5:45:de:00:24:36:20:
                    d4:9a:85:ab:06:a7:d5:c1:f6:25:a6:e0:c7:df:f4:
                    22:16:3f:d6:81:2e:36:80:5b:38:d6:c7:bd:9f:62:
                    39:47:35:8b:81:19:82:4e:75:b8:b8:2d:e3:48:f4:
                    07:e5:dd:21:c8:b7:f4:44:5e:2d:50:6c:3d:bf:2c:
                    d3:8a:43:cb:61:c4:57:3a:c7:b5:52:d8:53:e4:80:
                    02:7d:1c:aa:cd:38:18:68:a6:8a:bc:32:a1:93:20:
                    74:b6:15:94:9c:65:1f:54:a1:70:8c:ed:4e:50:21:
                    72:06:62:08:db:6b:e9:04:d0:88:3a:2f:42:b2:1b:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:54:18:DE:5A:EF:0E:98:32:2D:97:91:A7:D5:44:B0:90:D9:78:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e059ae5c-2f57-34ea-bc48-8ee1b11145e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:41:c7:29:b8:0a:fe:f7:bd:b8:7a:9d:c8:2b:92:34:9a:
         65:09:7e:6f:f8:55:31:22:e0:e4:6c:5e:dc:35:96:3b:3c:fe:
         0c:20:50:63:54:c3:0b:d2:87:dc:7a:8c:33:60:eb:8c:de:bc:
         0a:cc:7c:ec:a6:4e:b4:77:6a:6e:b9:3a:92:1e:35:57:b9:ec:
         7c:a2:8d:55:99:cb:16:bf:f9:ad:dc:a9:23:3d:8b:e7:ef:bb:
         2a:4b:16:1d:ab:53:3d:a8:45:50:d2:de:e0:61:92:33:4a:7d:
         ce:43:89:ca:61:53:57:4a:df:fb:70:8f:60:98:9c:5f:1c:bc:
         d0:c2:f8:b0:51:69:08:af:95:d2:06:08:23:aa:a7:ba:12:a5:
         7b:b1:c9:e1:e7:60:05:54:ac:e4:1d:fc:2f:cb:1d:fc:2a:f7:
         93:8b:a7:90:f4:bb:bc:e4:95:58:58:c7:f5:53:54:56:70:d5:
         00:e3:61:9f:57:93:a9:cd:01:23:4f:d9:e8:99:dd:69:2a:33:
         fd:2f:92:d1:12:cc:d8:8d:97:58:11:2a:23:c0:e7:3f:a7:d3:
         ce:fa:b8:0d:8a:ca:26:a9:09:ca:f6:a0:98:51:33:c2:97:db:
         4c:1e:ce:63:62:f5:78:9f:a0:87:e1:f7:d8:4a:8c:98:01:de:
         3a:6a:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:08 2025 by rpki-client