Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa
File:                     f97c1542-281c-386c-aa21-e33460f6654b.roa (raw, json)
Hash identifier:          1NSze7Wdm5Csv8r6SAZfjLfFMIwr0U05ZAK95HuDISI=
Subject key identifier:   19:BE:E1:B1:23:F1:FB:36:08:90:6A:59:69:6C:69:D7:9F:88:F2:C5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81461591049304664D6D7730
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:15:91:04:93:04:66:4d:6d:77:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=97ee44cf-3be6-49ba-ba83-89c4a5b29ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:24:92:92:6b:03:a8:34:b7:ee:d2:1e:fb:
                    87:57:c2:ef:93:de:d1:28:b1:98:fd:ac:34:7f:27:
                    32:4f:d4:78:4e:13:00:6b:95:3a:54:7c:09:37:35:
                    d8:19:e4:55:46:6f:75:8a:bf:9e:21:56:97:87:84:
                    44:43:57:87:df:43:99:be:f2:ff:84:6d:21:db:50:
                    9f:da:c9:6f:82:7e:ac:64:b3:10:42:31:af:2f:e3:
                    af:67:f6:e5:88:c8:21:1c:44:39:1b:0e:39:63:c0:
                    11:04:79:e2:d6:80:e6:5b:c5:c9:51:a4:2a:cc:3c:
                    e9:00:97:18:9c:5a:78:ff:7f:4b:75:b7:11:b6:7c:
                    24:68:45:65:a6:d8:af:e6:af:0d:b5:6b:48:38:01:
                    f2:1b:12:a7:72:84:3b:c6:cf:ec:1e:49:8d:74:e9:
                    0d:36:b9:68:5e:89:88:26:0c:fa:64:e4:cb:bc:5a:
                    d8:5d:a5:8a:88:d5:5b:08:21:a4:3f:d4:72:a4:e1:
                    0c:e3:d2:c8:9d:4c:34:3b:e4:20:32:e6:b8:75:09:
                    4f:0a:fc:1d:c6:a1:d4:e3:6c:ed:1a:b8:b8:54:75:
                    5d:d4:33:10:8b:70:85:3c:38:92:75:22:e4:db:8e:
                    80:3d:05:5c:c8:fa:c2:ad:af:c0:2c:54:93:4e:60:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BE:E1:B1:23:F1:FB:36:08:90:6A:59:69:6C:69:D7:9F:88:F2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:73:79:0b:f5:1c:6e:ec:a9:75:3b:44:a3:39:5c:69:1d:
         d3:52:31:3f:da:2d:df:a2:d5:25:3a:17:af:98:a6:eb:8f:d3:
         64:51:f5:17:82:7d:fb:8e:e6:6d:d1:66:61:ea:e3:02:15:30:
         66:d0:d6:24:cf:90:92:0e:49:41:e9:4a:6c:88:7a:1e:a4:e5:
         90:de:e8:84:8f:a6:31:6b:dd:e6:01:0a:ef:d5:0d:39:b3:04:
         89:fc:fb:d0:29:ba:78:7a:aa:0f:8c:15:6b:6d:70:66:c8:e4:
         e4:02:6e:42:44:9b:cb:ff:94:95:f9:1c:5d:df:3e:72:5c:dc:
         70:f7:cb:ff:63:75:ae:3f:e3:eb:a4:96:b3:cc:dc:87:ff:b4:
         4a:30:57:99:b4:ee:9c:bf:15:69:f7:87:d7:ce:2c:65:4d:5f:
         ce:90:64:23:1e:11:41:63:f1:87:4c:85:69:e4:46:83:f1:d8:
         ab:41:bf:7b:35:4e:ee:a1:33:c2:b6:90:99:40:64:37:00:86:
         71:d5:93:3e:d2:9c:4d:e3:14:60:d3:2a:c5:ba:66:49:b1:f0:
         1b:28:e7:3e:14:81:86:62:03:d7:e6:d1:db:eb:df:21:98:f5:
         50:98:fc:11:a8:97:e0:6f:6b:8b:86:26:68:a1:69:d3:a3:ad:
         71:ac:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:04 2025 by rpki-client