Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4c6544a-bfbb-3766-99d0-daaae9788335.roa
File:                     e4c6544a-bfbb-3766-99d0-daaae9788335.roa (raw, json)
Hash identifier:          VIUtPrbEE9oRpGzqCb9AQg6TSOWoFktqDjbsLlR/NR0=
Subject key identifier:   D2:07:AC:6D:CC:03:84:FC:2F:00:96:5C:5B:1F:7D:AD:B2:8A:6B:00
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A2121B3CF2658BA5A0805800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4c6544a-bfbb-3766-99d0-daaae9788335.roa
Signing time:             Thu 24 Apr 2025 14:11:16 +0000
ROA not before:           Thu 24 Apr 2025 14:11:16 +0000
ROA not after:            Wed 23 Jul 2025 14:11:16 +0000
asID:                     207266
IP address blocks:        65.22.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:12:1b:3c:f2:65:8b:a5:a0:80:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 14:11:16 2025 GMT
            Not After : Jul 23 14:11:16 2025 GMT
        Subject: CN=e41b9504-3092-4771-a624-c0e90564b70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:9d:e9:24:46:69:33:c8:d6:6f:2b:81:b8:
                    ff:76:c3:1a:07:f2:f1:d9:f8:49:bc:fb:b8:4d:e5:
                    e3:22:61:55:a4:74:b8:36:45:39:ca:2e:54:33:a8:
                    27:50:61:be:77:72:eb:89:0d:9a:1b:03:d9:67:7c:
                    63:87:ee:ae:f4:f9:1a:f3:5f:f1:f4:00:73:08:42:
                    c0:07:c8:a8:f0:c1:83:7d:a9:25:7a:8a:f2:c2:22:
                    ff:fc:ad:50:a3:4f:5d:04:8d:32:ac:bb:ec:1c:dc:
                    ef:56:db:b3:fa:28:94:e0:6e:3e:87:14:c0:6b:09:
                    40:69:36:83:ca:f3:9e:17:ea:bf:4b:93:e0:a1:cf:
                    40:8c:2a:e8:03:c9:b4:a8:4c:a7:75:ed:50:f0:c7:
                    9b:8e:c1:78:60:94:4d:0e:64:b6:8a:25:04:1c:16:
                    07:b3:4a:83:67:69:70:5f:e7:8b:96:da:67:0a:ec:
                    f2:28:2b:1b:bc:c7:6f:df:01:fa:18:c9:4c:86:4f:
                    0a:ca:ed:c3:34:f4:9c:18:d0:68:14:58:e4:18:ce:
                    80:f7:d1:09:0a:9f:99:93:5f:dc:3a:b9:5f:c3:43:
                    9c:20:49:f9:61:d1:fc:d6:07:71:5f:cd:26:70:be:
                    78:40:65:ad:d3:97:aa:4c:2a:80:b5:f6:69:ea:c2:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:07:AC:6D:CC:03:84:FC:2F:00:96:5C:5B:1F:7D:AD:B2:8A:6B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4c6544a-bfbb-3766-99d0-daaae9788335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:33:a6:87:01:74:2c:08:88:a3:98:c3:bd:74:5a:e6:ce:a4:
         1f:22:ae:48:a2:82:83:89:94:0f:af:e6:d2:00:ee:72:91:31:
         f2:40:cd:58:92:a6:e7:5f:26:88:0b:1a:65:41:aa:27:4b:a1:
         82:8a:81:0d:40:f2:2c:9f:ea:8d:dc:d3:77:cc:af:c9:b1:dd:
         c3:0f:8b:47:d5:0e:4a:f0:c1:34:46:2a:67:dc:8b:9f:15:f3:
         da:00:08:da:16:1c:88:b9:8c:0a:8f:fc:6e:3a:4f:1b:b8:a3:
         ab:44:9f:5b:b0:3d:89:e8:49:cc:b4:ce:54:ef:84:3e:be:45:
         42:5a:1b:37:4a:9a:de:46:25:1a:70:41:fd:b7:ae:12:a2:a4:
         bc:c5:1a:e8:9d:25:b3:88:9c:5d:f6:93:97:80:34:cd:fb:e1:
         bb:1a:40:c2:6c:80:9d:ee:54:21:76:90:37:73:c7:0f:ae:3c:
         94:20:53:ac:48:14:a2:3e:89:60:d1:f6:94:43:69:01:b6:6c:
         3e:6e:84:49:4a:96:fe:26:4b:ab:0b:6a:d3:7d:d2:86:45:98:
         dd:6b:f4:c3:27:37:76:45:0d:b2:b5:57:26:75:a8:24:1f:7d:
         e3:14:fb:3a:e5:5c:4c:c1:68:e9:06:80:32:d5:fb:3e:54:85:
         5b:36:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:38:10 2025 by rpki-client