Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e05edfd-71fe-3b77-9c54-08030d08a120.roa
File:                     6e05edfd-71fe-3b77-9c54-08030d08a120.roa (raw, json)
Hash identifier:          1HmCXuHTBrAoeCzxC0SVwFwNIFYOw4w6icjCpHVmeqg=
Subject key identifier:   AC:36:C7:51:64:C9:E2:2F:C0:B9:33:C4:4E:2C:32:12:00:83:C9:C5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1B81DDF86A57C69B6F34500
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e05edfd-71fe-3b77-9c54-08030d08a120.roa
Signing time:             Thu 24 Apr 2025 11:09:56 +0000
ROA not before:           Thu 24 Apr 2025 11:09:56 +0000
ROA not after:            Wed 23 Jul 2025 11:09:56 +0000
asID:                     12041
IP address blocks:        65.22.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:b8:1d:df:86:a5:7c:69:b6:f3:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:09:56 2025 GMT
            Not After : Jul 23 11:09:56 2025 GMT
        Subject: CN=69ef4f84-db40-4ea3-a8f7-0005862e5d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:00:9d:da:26:78:23:a8:29:c8:9e:be:7d:
                    96:f6:af:c8:04:c3:9b:1f:08:b1:4b:56:65:4c:08:
                    e9:97:80:55:a3:03:ef:10:f6:01:2b:0d:fa:3c:12:
                    57:b7:4a:fb:81:e2:10:c6:b4:81:68:4c:58:74:d8:
                    ab:75:92:17:40:ea:c9:c1:ed:3e:ea:15:9a:d1:c0:
                    da:7c:66:df:c1:be:22:8d:08:d2:22:94:a9:40:27:
                    f0:45:be:94:98:ec:d2:ca:6e:7f:2e:71:ae:98:26:
                    c1:04:01:11:6d:63:06:1c:8d:8b:fd:35:de:f8:40:
                    7b:c9:c9:23:30:94:6d:0e:59:71:a1:19:c1:28:9a:
                    7b:ec:bb:48:bc:d9:25:84:1d:a2:7a:93:9b:9f:35:
                    33:ed:9c:fe:ed:eb:b4:1c:ed:16:7e:ef:e1:30:9c:
                    e6:a3:89:48:7f:7c:e7:2b:0d:9d:5f:f8:56:98:15:
                    fe:3a:62:6f:9f:de:6d:be:ce:cb:58:58:23:14:b4:
                    ac:a7:c9:fd:bb:e6:2d:76:45:ff:e9:1a:50:9b:81:
                    55:70:55:af:b8:78:5f:1b:7f:9f:50:af:fd:7c:b5:
                    9f:54:ac:c2:06:e3:34:2a:62:26:cb:2a:84:aa:67:
                    c1:5c:12:49:f2:d3:a9:bc:55:75:f6:a9:64:a0:e4:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:36:C7:51:64:C9:E2:2F:C0:B9:33:C4:4E:2C:32:12:00:83:C9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e05edfd-71fe-3b77-9c54-08030d08a120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:25:1f:b6:cc:93:14:31:e0:ba:1a:e8:72:4d:ba:aa:49:65:
         c4:6b:02:25:e0:d6:8b:21:98:51:9e:ce:48:b3:0a:32:ac:d2:
         02:39:43:8a:51:c9:00:40:55:2e:22:12:d3:b1:66:e4:80:55:
         59:4a:cb:5a:60:0b:5e:5d:ef:57:c4:84:7f:fd:52:e4:e8:84:
         af:5f:5f:3b:14:3d:e0:82:2f:12:d5:b7:b5:52:90:d6:07:f4:
         17:06:a2:bc:ac:7f:b5:1e:d4:f8:ad:66:b0:d5:14:62:9e:36:
         89:8d:b4:98:b3:08:fa:4a:af:96:dc:89:5b:d4:34:42:8f:37:
         37:e3:b3:7d:0a:44:b4:83:e7:cf:c4:e2:72:1e:3b:49:ba:95:
         5c:f7:00:aa:55:69:a9:eb:a8:02:6f:65:0e:3b:9a:a0:7b:7e:
         d8:c3:d5:07:bb:b9:8e:75:9d:20:c5:fd:5e:a7:14:7d:15:8d:
         06:4a:8d:48:db:f5:50:91:89:0b:35:91:ad:c3:de:6d:a6:c2:
         4b:13:8c:fa:00:87:55:42:10:87:de:bf:75:4e:a2:7a:38:f9:
         86:10:26:d4:f3:81:c5:5c:fc:b8:d0:3f:bd:22:9b:13:46:dc:
         bd:29:95:94:4f:cb:e6:bd:35:70:47:a1:61:c9:ce:92:b0:fd:
         77:3c:26:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuB3fhqV8abbzRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDQyNDExMDk1NloXDTI1MDcyMzExMDk1NlowLzEtMCsGA1UEAxMk
NjllZjRmODQtZGI0MC00ZWEzLWE4ZjctMDAwNTg2MmU1ZDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE0AndomeCOoKcievn2W9q/IBMObHwixS1Zl
TAjpl4BVowPvEPYBKw36PBJXt0r7geIQxrSBaExYdNirdZIXQOrJwe0+6hWa0cDa
fGbfwb4ijQjSIpSpQCfwRb6UmOzSym5/LnGumCbBBAERbWMGHI2L/TXe+EB7yckj
MJRtDllxoRnBKJp77LtIvNklhB2iepObnzUz7Zz+7eu0HO0Wfu/hMJzmo4lIf3zn
Kw2dX/hWmBX+OmJvn95tvs7LWFgjFLSsp8n9u+YtdkX/6RpQm4FVcFWvuHhfG3+f
UK/9fLWfVKzCBuM0KmImyyqEqmfBXBJJ8tOpvFV19qlkoOQZDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKw2x1FkyeIvwLkzxE4sMhIAg8nFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmUwNWVkZmQtNzFmZS0z
Yjc3LTljNTQtMDgwMzBkMDhhMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMlH7bMkxQx4Loa6HJNuqpJZcRrAiXg1oshmFGezkizCjKs0gI5Q4pR
yQBAVS4iEtOxZuSAVVlKy1pgC15d71fEhH/9UuTohK9fXzsUPeCCLxLVt7VSkNYH
9BcGorysf7Ue1PitZrDVFGKeNomNtJizCPpKr5bciVvUNEKPNzfjs30KRLSD58/E
4nIeO0m6lVz3AKpVaanrqAJvZQ47mqB7ftjD1Qe7uY51nSDF/V6nFH0VjQZKjUjb
9VCRiQs1ka3D3m2mwksTjPoAh1VCEIfev3VOono4+YYQJtTzgcVc/LjQP70imxNG
3L0plZRPy+a9NXBHoWHJzpKw/Xc8Jq8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:46 2025 by rpki-client