Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa
File:                     0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa (raw, json)
Hash identifier:          eBUtK5/jh187KLk+B7ajFhjtqi5qMxJddyF0NNcpwPA=
Subject key identifier:   0E:7C:46:5C:0A:14:F0:28:63:99:30:BD:3F:88:71:97:14:A4:83:00
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1B7AE2BAFEACAFD87D38980
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa
Signing time:             Thu 24 Apr 2025 11:09:04 +0000
ROA not before:           Thu 24 Apr 2025 11:09:04 +0000
ROA not after:            Wed 23 Jul 2025 11:09:04 +0000
asID:                     12041
IP address blocks:        65.22.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:b7:ae:2b:af:ea:ca:fd:87:d3:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:09:04 2025 GMT
            Not After : Jul 23 11:09:04 2025 GMT
        Subject: CN=fbf3944f-7370-4083-8b80-e4758fadb872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:98:c1:b0:1d:87:26:75:d3:39:3c:d3:ac:
                    bd:4b:50:1d:e8:43:8d:eb:1a:84:77:60:a1:5b:50:
                    66:c0:16:e4:bf:54:9f:37:dd:b4:69:7c:08:a8:8f:
                    c9:12:ad:7f:26:ca:21:3f:a2:d6:a4:03:28:89:ed:
                    c2:b2:4a:00:16:57:cc:a4:ef:bb:1e:59:42:0f:c9:
                    42:93:68:9f:91:e4:d3:0b:20:6e:d6:49:0c:80:df:
                    7b:22:65:6e:fc:0b:12:0b:a0:0a:b7:0f:80:96:ce:
                    03:ee:4d:a7:52:af:7d:7a:1f:5d:01:6a:4f:ef:50:
                    2a:d2:5e:9b:1e:47:51:6a:44:25:9e:10:7c:d8:d3:
                    de:2d:5c:da:d0:c6:cc:2b:7f:76:ff:30:bf:8b:d9:
                    82:70:92:30:2d:58:8c:2d:5e:cc:29:81:b9:7b:66:
                    21:eb:ae:1c:1a:2c:a9:99:4b:cf:ce:50:b9:d6:92:
                    2f:48:39:67:35:e4:a2:79:7e:5c:be:a0:f9:89:26:
                    2d:65:83:d7:a8:50:03:90:0d:04:7c:c9:85:02:bc:
                    10:25:00:94:43:2c:6d:29:c7:2b:93:7b:32:6a:ef:
                    64:cc:f8:0a:f5:6d:04:10:96:62:25:fc:a8:ca:06:
                    90:64:4f:a1:5a:25:69:ba:42:55:3f:57:a4:4a:f5:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7C:46:5C:0A:14:F0:28:63:99:30:BD:3F:88:71:97:14:A4:83:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0017796e-2dcb-3f83-ade5-5330cf9bbbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e9:af:41:e5:ce:e9:52:92:c6:ce:c1:53:44:56:bf:e8:72:
         4d:ca:b4:7f:a9:d1:10:98:cc:33:26:b1:59:8c:d8:2d:39:84:
         f8:ca:d9:9f:1b:56:bc:5d:b3:39:1d:81:ae:13:16:ba:08:de:
         65:ed:ed:04:a3:5f:ad:b7:53:52:5a:07:1e:62:a3:1d:a9:a8:
         fc:0a:f9:b7:39:c8:bb:16:7b:f5:57:0c:a5:37:92:5c:7d:5e:
         a3:ea:df:89:ff:ac:58:65:07:ca:32:b3:1b:c8:4b:f3:a9:32:
         9c:51:52:ab:c3:5e:5b:79:b2:80:30:2f:f2:8e:ea:b5:a8:7c:
         ff:70:90:f5:b9:5f:73:bc:1d:78:db:59:e1:17:28:c0:4d:04:
         40:0b:3d:a7:93:43:99:06:68:92:9a:47:c7:1b:4f:6a:65:c3:
         52:a4:0a:75:04:84:b4:d5:e1:1f:41:37:c7:c6:f5:75:ab:1c:
         f4:6b:68:9a:43:8c:6a:cd:37:20:40:ba:dd:d4:91:99:b0:60:
         a3:77:ef:88:b6:c5:89:f9:4b:af:0a:02:20:99:80:10:51:d7:
         11:f0:74:af:b2:9a:d9:f4:7c:ad:d6:23:ba:26:60:66:ff:e0:
         0c:3a:d5:19:7f:4e:6a:33:62:d0:47:f2:70:32:13:de:ba:34:
         4f:26:32:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht64rr+rK/YfTiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDQyNDExMDkwNFoXDTI1MDcyMzExMDkwNFowLzEtMCsGA1UEAxMk
ZmJmMzk0NGYtNzM3MC00MDgzLThiODAtZTQ3NThmYWRiODcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y+YwbAdhyZ10zk806y9S1Ad6EON6xqEd2Ch
W1BmwBbkv1SfN920aXwIqI/JEq1/JsohP6LWpAMoie3CskoAFlfMpO+7HllCD8lC
k2ifkeTTCyBu1kkMgN97ImVu/AsSC6AKtw+Als4D7k2nUq99eh9dAWpP71Aq0l6b
HkdRakQlnhB82NPeLVza0MbMK392/zC/i9mCcJIwLViMLV7MKYG5e2Yh664cGiyp
mUvPzlC51pIvSDlnNeSieX5cvqD5iSYtZYPXqFADkA0EfMmFArwQJQCUQyxtKccr
k3syau9kzPgK9W0EEJZiJfyoygaQZE+hWiVpukJVP1ekSvXQkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA58RlwKFPAoY5kwvT+IcZcUpIMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDAxNzc5NmUtMmRjYi0z
ZjgzLWFkZTUtNTMzMGNmOWJiYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLpr0HlzulSksbOwVNEVr/ock3KtH+p0RCYzDMmsVmM2C05hPjK2Z8b
Vrxdszkdga4TFroI3mXt7QSjX623U1JaBx5iox2pqPwK+bc5yLsWe/VXDKU3klx9
XqPq34n/rFhlB8oysxvIS/OpMpxRUqvDXlt5soAwL/KO6rWofP9wkPW5X3O8HXjb
WeEXKMBNBEALPaeTQ5kGaJKaR8cbT2plw1KkCnUEhLTV4R9BN8fG9XWrHPRraJpD
jGrNNyBAut3UkZmwYKN374i2xYn5S68KAiCZgBBR1xHwdK+ymtn0fK3WI7omYGb/
4Aw61Rl/TmozYtBH8nAyE966NE8mMnw=
-----END CERTIFICATE-----
Generated at Fri May 9 17:56:59 2025 by rpki-client