Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa
File:                     10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa (raw, json)
Hash identifier:          X/7ffwchw36yKOwN4WlxHDftGEp+9UYIX/PEU4e9Gu4=
Subject key identifier:   25:C2:B2:42:65:27:7B:99:8B:8E:61:CB:8F:09:15:E3:7D:2C:9F:1F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1B79511A32D432E37982080
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa
Signing time:             Thu 24 Apr 2025 11:08:52 +0000
ROA not before:           Thu 24 Apr 2025 11:08:52 +0000
ROA not after:            Wed 23 Jul 2025 11:08:52 +0000
asID:                     12041
IP address blocks:        65.22.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:b7:95:11:a3:2d:43:2e:37:98:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:08:52 2025 GMT
            Not After : Jul 23 11:08:52 2025 GMT
        Subject: CN=31aa6680-9b1e-4d5b-b8b1-340ec982e4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d2:81:19:eb:7b:ad:47:01:da:bb:f1:5b:33:
                    19:06:62:cc:f5:67:fd:f6:ae:44:29:b3:85:30:1b:
                    60:c9:a5:c6:5c:d7:2d:51:e0:d5:1f:76:b6:19:69:
                    23:1c:f7:71:cc:01:cf:88:09:90:f0:42:4c:ea:27:
                    f4:8c:91:ee:9d:da:9d:60:c8:a8:f1:76:54:3c:27:
                    e2:a3:cf:ab:eb:fc:08:de:d8:eb:46:48:af:20:75:
                    84:9c:28:79:d0:ab:d2:5c:2d:3d:87:1f:1d:30:96:
                    fd:8c:14:a2:f1:17:ae:8c:96:ab:58:b8:3c:11:0d:
                    d3:d5:75:40:aa:0f:ac:ab:13:b6:c3:2e:da:c4:a5:
                    0b:69:ce:9e:45:e1:16:1f:60:76:ea:5e:34:8f:2c:
                    93:75:81:db:a5:a8:eb:4a:ea:b1:6c:83:2b:45:85:
                    af:35:71:25:2f:42:83:34:32:ad:e2:c3:4a:64:58:
                    77:24:48:2c:78:59:67:ab:3d:88:48:b6:17:bb:4e:
                    1b:69:18:87:99:bd:ee:8b:be:9a:9f:49:26:11:b5:
                    f6:1f:e1:51:ce:63:6d:e9:16:41:8e:d8:07:98:f9:
                    84:a6:ec:52:23:46:04:4c:e0:58:09:85:4c:24:72:
                    65:98:ad:86:09:da:f3:a5:a3:4e:66:e4:67:d9:9c:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:B2:42:65:27:7B:99:8B:8E:61:CB:8F:09:15:E3:7D:2C:9F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/10e1a2a8-ec5d-3bdf-9b2d-ab18bd098882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:7e:d1:66:55:95:84:bb:8c:92:e7:42:97:a9:90:58:31:69:
         45:e9:79:0d:50:5e:3a:da:41:e7:04:78:01:6f:ea:74:6b:ab:
         df:97:42:de:bd:dd:60:65:ba:f5:ad:a1:df:d1:6c:09:cb:6d:
         44:c5:62:7c:80:34:8e:29:22:85:7d:46:f2:2f:e4:d9:37:ec:
         f0:8e:6d:15:cc:40:5c:7e:59:c2:26:84:fe:ac:49:2d:f5:11:
         85:06:2a:b0:47:6c:d5:32:e4:eb:2a:f3:01:cf:47:1b:80:35:
         9e:89:64:f9:53:8f:f3:ae:4e:3e:fe:57:92:6f:ea:6d:b7:f6:
         09:b1:b8:cd:c7:f5:01:cb:02:e2:f5:21:d5:d0:2b:f6:2a:b4:
         96:6c:ab:99:3e:83:fd:be:b4:3c:a3:1f:97:5a:8d:63:17:0e:
         a0:00:17:94:97:18:49:50:1a:02:dc:33:f9:3e:69:39:1e:07:
         fd:7a:2f:39:ac:60:47:99:a8:73:dd:f4:60:aa:20:ef:04:21:
         3a:45:e0:ab:b9:94:ff:50:0d:a5:81:68:27:df:87:88:7d:8d:
         6c:22:93:8b:40:10:a3:f5:47:87:4e:87:01:63:62:b6:ac:90:
         f7:35:2f:14:df:c5:7b:54:4b:f8:37:3f:69:de:a3:8a:f7:13:
         09:a8:87:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:04:25 2025 by rpki-client