Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c7d02ad-9ffd-31b4-aee0-fac26bff27e9.roa
File:                     4c7d02ad-9ffd-31b4-aee0-fac26bff27e9.roa (raw, json)
Hash identifier:          P6cDDlKhRSMA4yrt4h/ElRHRxOzBKx8d8LUx6ZfEMj8=
Subject key identifier:   93:FD:E2:08:CE:EB:BF:6E:B4:A3:9F:7D:A6:E9:D8:4C:1A:78:EC:4A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A82AB3F12E5DC5004A6645E40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c7d02ad-9ffd-31b4-aee0-fac26bff27e9.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     207266
IP address blocks:        65.22.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:3f:12:e5:dc:50:04:a6:64:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=c7217614-48fd-41f9-b0a2-cdfe49baed7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:ef:61:3f:22:12:d7:b6:17:bd:19:56:dd:
                    d8:7d:8f:6c:57:36:b5:76:ab:23:c0:e6:17:60:86:
                    ee:35:fe:6c:38:d3:d6:20:b3:9e:e1:c3:ec:5c:2a:
                    9a:15:7e:c9:6c:90:68:28:89:68:de:99:2a:ff:a8:
                    6a:71:78:fe:89:52:64:7f:c3:d8:c9:d6:8b:43:14:
                    b0:f5:f0:6f:2b:99:ad:ae:ff:4e:13:e4:cc:68:b3:
                    da:59:29:be:6f:58:28:d0:7f:fb:8f:36:48:51:b4:
                    7e:02:48:60:d6:f1:34:86:76:d5:19:eb:ff:24:5d:
                    a9:62:4c:d4:f7:25:c4:a8:f4:93:e5:99:6f:a2:22:
                    a4:d3:1a:ac:3c:9b:7b:e7:62:0d:86:0f:97:62:e8:
                    d9:23:3c:57:b7:92:5f:f1:ca:36:fa:25:d5:3a:80:
                    44:9f:c6:4f:8d:82:31:82:35:d8:74:c3:41:72:43:
                    fc:c6:67:c0:eb:81:8e:cb:48:d4:d7:99:35:be:c4:
                    c0:e2:79:62:33:db:f4:f6:cc:ad:89:25:57:79:49:
                    af:28:de:b6:4f:1b:1e:4a:ad:f4:b8:1c:10:4c:f3:
                    eb:cc:23:d0:f3:90:4a:87:16:79:8b:32:17:53:8d:
                    56:a4:05:e5:57:dd:bd:7a:54:19:e1:35:b4:32:ca:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:E2:08:CE:EB:BF:6E:B4:A3:9F:7D:A6:E9:D8:4C:1A:78:EC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c7d02ad-9ffd-31b4-aee0-fac26bff27e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b7:8c:68:47:44:fa:08:03:44:91:14:ce:2f:a8:de:b4:4c:
         45:9b:ec:3e:c1:45:e3:6f:51:dc:30:4f:27:6b:12:e2:b6:ed:
         fb:92:7b:24:39:0b:81:cc:0d:21:99:e0:d8:5c:e1:a5:5e:a1:
         8a:37:17:64:0c:ba:a7:1a:4f:c8:b0:5d:dc:da:c6:a3:32:17:
         d3:b7:1e:9e:e2:20:bd:4e:b3:82:7d:03:4a:3d:14:5b:41:08:
         00:4b:8d:cb:20:f9:e4:ff:ec:27:33:00:61:d1:eb:d9:bf:e4:
         c2:bd:38:f5:db:24:db:4d:5a:e0:12:9f:9d:a1:17:87:16:45:
         19:09:7b:98:3c:2b:5f:60:38:c1:52:19:0c:50:8a:62:a0:13:
         98:57:ac:b7:ec:b2:50:33:93:22:17:a3:a3:f7:f8:b8:0a:55:
         a3:7d:33:f5:61:1a:d1:ed:68:16:a8:8d:6f:f8:e0:6c:aa:7f:
         38:69:58:16:5f:07:d5:2e:ed:95:ed:9b:32:6b:46:5b:8e:3d:
         66:92:aa:9c:85:ff:c2:23:b0:69:5b:00:ba:4f:ca:95:67:bd:
         b6:0b:cd:2a:75:f3:5c:15:5e:63:22:06:63:3a:72:ab:e0:32:
         66:12:35:bd:c5:47:e1:a9:81:78:eb:14:92:15:6a:0a:2a:f7:
         17:36:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:14 2025 by rpki-client