Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6be68259-55a5-35fd-8390-45c030df8c40.roa
File:                     6be68259-55a5-35fd-8390-45c030df8c40.roa (raw, json)
Hash identifier:          C+w/KyAYE2be23wno50xqShwe9wl+1lKOlZi++FWZUk=
Subject key identifier:   22:E3:D8:C9:30:4A:61:74:41:94:48:F7:36:E0:84:12:5F:85:4C:BC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1B733BBEEBC3FCD365A9DC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6be68259-55a5-35fd-8390-45c030df8c40.roa
Signing time:             Thu 24 Apr 2025 11:08:06 +0000
ROA not before:           Thu 24 Apr 2025 11:08:06 +0000
ROA not after:            Wed 23 Jul 2025 11:08:06 +0000
asID:                     12041
IP address blocks:        65.22.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:b7:33:bb:ee:bc:3f:cd:36:5a:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:08:06 2025 GMT
            Not After : Jul 23 11:08:06 2025 GMT
        Subject: CN=33cecd5d-06ea-4eb6-b4ba-12baca3c4692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:26:7c:b3:bf:7d:fb:d3:59:93:81:47:a8:
                    01:e5:3d:47:41:ad:1b:33:4e:54:a5:0e:9d:52:a8:
                    d4:54:9d:44:f2:d5:a9:72:89:32:09:27:47:0e:13:
                    8a:5b:0d:b1:90:b3:9c:1b:78:3c:5f:95:00:59:bf:
                    f2:00:aa:65:47:20:82:27:5f:0b:1d:be:c9:32:fa:
                    de:63:7d:ab:98:79:d1:8c:cd:99:bd:a6:79:42:a8:
                    b5:d3:3d:fd:e9:2e:14:6c:87:da:58:e1:15:20:53:
                    a8:cc:c8:68:b6:8e:7b:fb:f6:5b:d3:cd:9f:64:52:
                    63:0d:fb:b0:65:c3:1b:34:ef:23:28:19:c0:1f:06:
                    80:7e:fe:1a:8a:6f:32:5d:da:09:0b:8b:ab:79:a6:
                    50:9f:2d:d1:88:13:ed:b6:2c:a9:23:4d:59:47:ee:
                    1f:9d:3f:b7:d1:21:93:2e:b3:09:73:a9:3d:59:ba:
                    b8:51:da:51:7e:dd:4c:26:ad:18:e6:17:55:c1:14:
                    c1:bf:ff:25:d5:22:b5:d5:ce:5d:09:c9:74:af:e9:
                    17:be:35:08:27:1a:d5:a1:8a:73:4c:20:2d:e1:03:
                    26:23:c5:f6:0e:f4:6e:3e:ae:0c:eb:95:cf:9c:32:
                    06:b2:f3:fc:9b:b5:e6:e1:5b:57:6d:23:33:26:08:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E3:D8:C9:30:4A:61:74:41:94:48:F7:36:E0:84:12:5F:85:4C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6be68259-55a5-35fd-8390-45c030df8c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f9:99:f0:ce:34:5b:45:b5:c1:41:09:dd:ee:de:85:1c:9d:
         6f:15:15:13:bb:07:eb:8f:c8:a6:7f:23:60:59:43:f8:e4:c1:
         35:fc:3a:b3:7b:78:3c:f9:03:73:87:63:d4:1c:5b:8e:a6:fd:
         43:b6:de:67:7b:c3:c2:3b:80:6a:e6:64:89:35:04:1a:30:1e:
         0e:27:60:fd:d4:c0:45:a6:30:18:0d:2f:5b:b3:61:be:07:98:
         7a:a3:69:07:31:68:fe:0b:9b:45:51:55:15:8f:15:6c:cc:b0:
         8c:01:0f:7e:5d:0a:26:77:00:8f:5f:d1:05:9b:62:ae:6d:3e:
         d0:81:2b:24:a7:22:c4:2d:e0:a7:4e:19:9f:3a:55:43:14:f3:
         e4:af:78:09:1d:d1:97:4c:18:e5:31:dd:c7:80:b8:91:28:b8:
         b8:10:eb:e9:d2:05:e1:e2:c2:dc:2e:b6:e7:80:ce:9b:b3:72:
         cb:19:46:58:8d:e6:36:77:62:f1:8f:9f:a0:a8:df:8d:95:c4:
         05:ef:ec:05:eb:19:6a:26:0a:ad:70:07:0f:85:56:8c:f0:14:
         33:2c:96:74:1c:53:90:d0:6a:07:b6:82:8f:73:55:89:3d:8d:
         de:af:49:4e:2b:44:d1:61:88:b7:c9:3b:35:f0:8f:cc:3d:92:
         5d:8a:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:57:08 2025 by rpki-client