Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/399ab747-c91b-356b-aecd-b3af6d048fa7.roa
File:                     399ab747-c91b-356b-aecd-b3af6d048fa7.roa (raw, json)
Hash identifier:          YVe5mI5aj3MJIbtLNww1DWkG6qsYiT6BrOyNv22YYgk=
Subject key identifier:   B5:A2:81:B3:7A:2B:20:A3:3D:48:9A:7C:D9:4D:36:67:FE:D1:FA:3A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1B7FB96558BE48DE1C79740
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/399ab747-c91b-356b-aecd-b3af6d048fa7.roa
Signing time:             Thu 24 Apr 2025 11:09:40 +0000
ROA not before:           Thu 24 Apr 2025 11:09:40 +0000
ROA not after:            Wed 23 Jul 2025 11:09:40 +0000
asID:                     12041
IP address blocks:        65.22.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:b7:fb:96:55:8b:e4:8d:e1:c7:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:09:40 2025 GMT
            Not After : Jul 23 11:09:40 2025 GMT
        Subject: CN=fdad3bdb-fe29-4b65-ad1a-d394c3f06c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:8b:74:1d:e7:d8:27:f4:a0:ab:3d:56:1d:
                    b1:81:06:80:0a:3d:9c:8b:9e:a8:52:fb:54:2e:a6:
                    e7:a3:b5:2e:c8:55:a4:00:0b:50:31:c8:13:42:57:
                    6d:ff:cd:e1:20:9c:1e:4e:7f:39:59:74:43:fd:27:
                    9b:66:c7:19:8e:c0:03:19:10:a2:b8:39:88:06:40:
                    53:1c:2f:ab:5a:a4:d2:71:fc:2a:fa:6e:d1:7d:05:
                    0e:2d:56:0f:3f:c3:27:a8:26:35:98:b1:99:bb:ca:
                    f0:40:a7:40:57:71:8a:a6:ca:ff:1a:d4:1b:ee:8a:
                    07:0b:4b:ab:33:7c:3f:b0:2e:27:14:15:bb:dc:96:
                    b7:44:74:d6:c7:3c:ee:3e:4d:45:ed:1f:a1:05:dd:
                    8e:96:3b:ee:97:2b:b2:c8:a9:96:27:81:90:59:cd:
                    e8:c1:89:30:7f:2f:0d:a2:6a:f3:74:13:01:fb:e3:
                    0c:f0:da:39:1d:7e:a8:d9:3e:4d:6b:53:90:dc:c0:
                    42:59:8a:e2:f7:9c:ad:48:89:73:8e:c4:87:ea:b0:
                    f0:bc:ab:9c:19:e3:1e:1b:2b:6f:eb:62:60:19:ee:
                    ae:6a:17:65:e6:6c:91:de:65:c0:92:05:39:81:19:
                    06:2e:32:2c:4f:94:c4:c0:3b:ba:ee:9a:dd:b6:fb:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:81:B3:7A:2B:20:A3:3D:48:9A:7C:D9:4D:36:67:FE:D1:FA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/399ab747-c91b-356b-aecd-b3af6d048fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:10:ba:68:6f:28:5e:70:f9:07:52:ea:b0:a3:b6:4a:d4:3a:
         b2:ff:9b:4a:48:dc:d6:be:cb:35:57:4c:ab:d3:98:c8:2d:98:
         28:88:a1:ff:d9:18:bf:57:27:12:7c:21:73:a7:f2:4b:7e:96:
         e1:3d:88:57:fd:97:0a:c2:01:22:14:db:d8:d1:91:dc:a2:92:
         eb:c1:9c:2c:4c:08:03:84:09:bd:74:f5:4e:68:fc:cd:dd:d3:
         f4:dd:e6:05:eb:8e:40:86:85:d6:52:7a:d3:c1:8b:cc:f7:0b:
         78:3d:fa:bc:c4:4b:c0:17:23:6f:02:2d:0d:3d:65:fd:b6:b1:
         1c:4b:2d:78:34:a8:12:63:e6:0b:eb:64:df:c4:2a:e0:2d:a3:
         6b:df:f9:87:4f:ad:cc:86:d3:ff:fd:d1:78:34:1d:fc:cd:ca:
         a6:c3:08:9a:60:7d:8c:79:71:f0:22:1d:27:87:96:c8:27:67:
         6b:10:2f:d2:27:78:f7:b8:90:bc:76:ed:35:82:a4:66:48:4f:
         02:c1:da:28:e0:6d:1c:6c:df:e0:3a:93:23:b0:26:aa:f0:ef:
         b8:22:e3:58:8b:29:59:b6:a9:10:fc:a1:11:86:07:c3:8d:0e:
         1b:9f:57:12:6a:01:3a:84:4f:06:6f:3c:65:54:d0:df:ad:2b:
         d2:50:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:24:49 2025 by rpki-client