Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47d200cc-c09c-39a1-99ff-79465787a690.roa
File:                     47d200cc-c09c-39a1-99ff-79465787a690.roa (raw, json)
Hash identifier:          QuP7VCBpIHSGTuiAktWjj5pz6pTYGxvE2cYv4Fd/brM=
Subject key identifier:   50:18:E1:E4:8A:DF:B2:30:A5:DD:85:BF:16:BE:D8:37:A3:B7:FC:12
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A82AB3E4E2023CEC968A41500
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47d200cc-c09c-39a1-99ff-79465787a690.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     207266
IP address blocks:        65.22.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:3e:4e:20:23:ce:c9:68:a4:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=4e881a5d-60e3-408d-8632-321813c030dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:d4:86:73:cc:55:55:9d:e0:53:d8:4b:b9:
                    a6:b1:57:da:09:b1:5e:8c:16:9b:39:2d:8a:61:53:
                    3c:d4:80:85:59:85:3e:d1:35:78:6f:f2:a5:3f:64:
                    8c:b9:20:6f:6d:d3:3e:40:16:26:d8:1a:e3:66:b5:
                    f3:58:01:5e:58:6b:5c:a2:73:80:b4:77:94:a0:13:
                    2f:23:c1:b2:cf:31:8e:f0:82:1b:d7:cf:5f:a8:30:
                    13:66:20:c5:6b:07:01:da:2c:6f:2e:db:3a:6a:ab:
                    71:2f:d3:76:03:cd:c8:61:2c:03:66:00:7d:65:69:
                    73:9e:8a:8e:c3:17:3a:32:c9:88:1b:b1:09:db:1f:
                    68:5c:5a:8c:3e:28:eb:96:db:66:b3:89:76:9d:11:
                    e8:61:74:47:8c:8c:e2:b7:e6:a8:78:99:60:a3:d0:
                    6f:27:0c:e8:b7:ea:b6:60:1e:8c:14:c6:5b:a1:14:
                    1b:c3:b1:9a:6d:76:0a:84:cb:aa:e7:1c:8b:e1:ef:
                    f1:66:39:d4:27:c1:8c:43:37:0e:d6:21:bf:2e:74:
                    13:ed:73:5e:4a:55:90:3d:d5:4f:ab:fa:d0:2d:eb:
                    e5:d0:66:06:9a:33:a0:63:21:4f:37:9f:7a:6b:1f:
                    31:b3:85:9f:22:95:50:de:9a:17:13:5a:79:95:85:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:E1:E4:8A:DF:B2:30:A5:DD:85:BF:16:BE:D8:37:A3:B7:FC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/47d200cc-c09c-39a1-99ff-79465787a690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8f:42:ee:2f:35:2d:7f:92:9a:99:a7:a5:44:4a:40:ba:16:
         e7:9b:01:db:18:8b:16:ab:69:cb:11:b1:9d:15:a3:1a:75:e2:
         c3:d4:1c:48:04:a3:cc:42:6a:9f:f3:3a:4e:b2:e4:89:f3:8d:
         92:01:d8:db:4e:46:2b:9e:18:91:38:b3:46:23:47:d2:e7:d2:
         81:62:e8:6d:f1:28:12:2c:48:d2:b0:a8:f7:77:f2:b7:92:77:
         d7:a7:60:ca:b6:02:0b:1f:b3:b9:3d:e8:71:08:f7:29:0e:32:
         19:e6:97:97:4b:08:ec:ae:e0:aa:14:77:ef:bb:23:70:68:5a:
         b0:30:c2:6a:a0:78:ab:57:ab:b9:cc:63:27:19:f9:0f:46:c5:
         44:31:77:83:cb:ae:70:86:c2:79:66:62:d6:a9:c7:ae:f4:45:
         fd:b6:6a:59:83:59:d3:75:f1:83:96:20:a4:ee:0d:73:23:37:
         13:39:0f:66:d1:0d:a8:de:f3:96:ed:f0:e5:1c:63:34:eb:34:
         8a:b0:00:8e:46:ad:81:37:cb:8c:c9:d6:15:ad:9a:1d:7c:dd:
         49:3a:f3:0f:91:ac:c8:af:db:c2:59:6a:1c:29:7b:f1:c9:40:
         56:5c:1f:d3:05:19:b7:cd:07:ee:91:e1:69:f2:36:a4:1f:dc:
         d6:6b:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:09:41 2025 by rpki-client