Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa
File:                     37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa (raw, json)
Hash identifier:          q59qlHFSeEr+eFap98hRWxUASZNgLkbn4Q27MjI+WbE=
Subject key identifier:   11:ED:00:21:D3:9A:E2:A4:19:FC:62:B3:F2:2E:60:CE:3A:75:45:0B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B620232DBB45EE2010B2D0B40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:32:db:b4:5e:e2:01:0b:2d:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=78a1d1b3-816b-447d-bc70-4981f310a13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:40:88:8a:c0:b6:f2:40:01:10:b9:f5:0b:
                    22:45:00:d1:56:1f:fb:63:50:93:a4:80:9a:99:9b:
                    1d:2e:1c:fb:a5:56:cc:2d:80:87:1d:6e:17:12:3c:
                    be:73:1d:63:3a:41:63:31:18:92:1e:6c:bc:b3:48:
                    b2:4f:b2:db:b3:bd:6a:45:6b:0b:de:90:a5:95:2e:
                    9d:39:d2:0b:db:a7:49:ab:61:7b:20:0c:dc:ed:d1:
                    cc:f3:0d:7f:45:da:bf:79:eb:23:ac:05:aa:73:4b:
                    90:c8:a6:45:65:ab:86:e1:f1:86:39:4b:16:c7:aa:
                    db:ef:de:e8:f6:d8:fe:76:83:8c:e6:c5:5f:bf:a4:
                    c7:d8:6c:86:44:b0:a2:45:03:ac:57:50:d0:ee:5f:
                    ad:b8:e7:10:11:b0:6e:96:68:0f:ca:57:43:23:0d:
                    3c:eb:60:b0:b5:d7:f9:1b:1e:06:3c:6e:b6:38:cc:
                    a8:e5:19:34:0d:78:0f:91:0e:6e:4e:0f:ad:30:65:
                    2c:ef:6a:27:c1:f4:66:3d:88:df:b2:1b:6b:66:b7:
                    6c:27:2f:b9:cd:05:1e:42:3b:5a:b9:4e:38:95:c7:
                    06:4a:11:42:a4:d9:f8:61:ff:27:d2:d0:97:82:65:
                    2f:97:e8:3a:7a:a8:9c:26:c2:cf:f6:40:fd:a5:4e:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:00:21:D3:9A:E2:A4:19:FC:62:B3:F2:2E:60:CE:3A:75:45:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:cc:99:24:58:be:b4:3b:0b:9f:68:9d:97:66:e7:5f:98:
         f9:b8:27:67:2e:cf:22:24:4d:61:f0:b0:66:4e:b7:bf:4c:04:
         3b:07:09:d0:dc:31:3a:c0:33:c0:50:85:50:34:4e:da:47:8e:
         0e:e0:e8:b9:e7:45:91:da:c9:89:7e:e5:4d:6d:05:a9:94:e2:
         d9:e2:df:73:d6:92:65:83:b8:c0:8f:33:6a:ba:9b:c8:1d:64:
         80:0b:92:98:93:32:5f:49:ef:e5:e2:95:2a:c1:65:c7:a9:a0:
         25:7f:b7:13:8b:a4:01:db:db:a9:1d:51:18:2a:fe:7f:4f:02:
         5b:d8:bf:4d:b6:50:4d:15:90:f3:1d:ab:3b:3e:3f:47:70:41:
         b5:ee:3b:be:bf:47:ac:96:96:c9:95:e5:6b:c5:13:69:82:c0:
         f2:62:08:d8:45:50:00:22:2c:3b:b7:71:07:b6:de:1f:f2:1e:
         8a:2a:04:fc:97:c6:a8:13:fa:60:e5:f4:a9:bb:69:e2:ff:7b:
         78:25:70:02:6e:61:eb:da:08:4c:a7:fe:40:74:19:ff:56:63:
         ff:74:56:06:1e:eb:84:88:bb:2e:89:3d:da:5a:0c:a0:1f:b2:
         c0:27:f7:fa:e5:4d:fa:3c:e1:94:74:4b:60:74:4a:49:79:4f:
         0f:06:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:16:35 2025 by rpki-client