Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa
File:                     bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa (raw, json)
Hash identifier:          Vjd+irSBbbRaPcJMcvcZRZVobna9KVAcvzjojBQ90lE=
Subject key identifier:   53:C5:BF:E0:0B:09:36:7F:8C:4E:6C:96:FC:9D:30:B1:0A:99:F1:88
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201DB5E475C600FCA7F6A80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        65.22.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:db:5e:47:5c:60:0f:ca:7f:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=a28279f6-dcc7-443a-a724-558d009a78b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:39:91:09:cf:27:db:62:d1:2b:12:a7:65:
                    c6:cb:71:ca:62:bb:85:44:99:e1:ea:ec:8f:6b:d6:
                    d8:a5:b8:73:28:7f:a7:76:c7:27:2a:0a:0c:0e:85:
                    28:c7:3f:76:24:aa:2a:23:a0:1f:13:24:dd:99:40:
                    bf:58:a1:21:eb:3b:07:09:9b:71:21:11:97:1a:c5:
                    89:58:7f:4e:f0:23:b9:d5:b5:c0:43:3b:5a:01:44:
                    48:60:e4:99:94:e2:47:22:17:99:16:9c:7c:d0:d4:
                    e9:d1:5e:02:ed:50:5e:d1:64:66:5f:62:a1:ce:89:
                    97:4d:fc:41:4c:41:63:15:f6:9f:ea:01:25:0b:16:
                    ff:ef:d1:4e:53:56:86:0b:3e:52:28:53:a6:5e:ae:
                    88:ab:cf:1a:aa:f1:65:6b:76:e6:72:50:60:6e:1a:
                    48:cf:d5:95:2f:13:da:44:72:d4:d6:86:99:46:7f:
                    20:ca:00:a1:8b:fa:b4:d7:b8:9e:80:82:f6:24:9f:
                    ac:d5:98:44:8c:81:54:2e:3e:81:b7:16:af:d9:ff:
                    f1:b9:8e:b9:05:7e:85:7a:9b:56:04:e9:d6:92:27:
                    b8:dd:d9:3a:c9:8f:ff:2f:79:55:f5:15:13:65:88:
                    cc:49:2b:da:8f:45:01:fe:65:86:ea:d4:df:a9:9b:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:BF:E0:0B:09:36:7F:8C:4E:6C:96:FC:9D:30:B1:0A:99:F1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1b:63:5d:82:d8:32:d7:24:09:99:1b:e3:62:bb:d5:1b:f5:
         31:37:c3:fe:b7:0b:69:e1:53:8f:ab:82:63:f1:67:97:10:e7:
         62:3b:fc:de:61:7f:2b:5a:7e:ec:c5:1e:96:2c:8b:dc:99:48:
         ad:99:1b:18:b9:e7:3a:e2:c1:89:72:69:c7:f8:94:9b:60:84:
         64:26:18:66:8d:0e:9c:be:f7:04:75:a7:14:a4:56:d3:b2:f5:
         f5:d8:84:b6:f0:8b:03:21:84:f3:0c:f5:3e:74:87:ed:ab:ae:
         f8:c4:4f:1c:27:ef:42:1e:61:cc:20:f5:d1:b5:e4:f1:cb:ef:
         6e:03:65:16:5d:25:24:50:1c:c4:0d:27:1a:a7:df:c0:54:5f:
         36:f0:70:36:60:26:19:31:18:c9:81:c1:67:62:c7:ea:08:28:
         a6:6d:f5:86:34:cd:76:f6:69:48:1c:b3:db:db:b5:8f:7f:6f:
         51:6d:87:f4:24:b7:a6:3b:50:99:d8:b4:23:54:84:8d:a3:5f:
         27:9e:e9:6d:f3:72:85:34:bd:95:81:e4:d6:54:e7:a5:a8:b9:
         a4:8f:35:bf:d2:70:e4:22:f1:90:30:f0:60:4a:ad:5e:7f:35:
         8b:40:24:d5:c5:bc:83:b7:d4:92:f2:80:ec:18:5e:1f:9a:ca:
         75:84:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:17:31 2025 by rpki-client