Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7ccb30af-a017-3100-a3ad-246c10337950.roa
File:                     7ccb30af-a017-3100-a3ad-246c10337950.roa (raw, json)
Hash identifier:          D95eltzJHmImU2SFZ6Fzy8XovmTB2p790cV3ibPCxF0=
Subject key identifier:   E4:97:02:A0:0A:49:3C:81:AB:85:32:88:DA:84:7D:2C:44:B2:A8:73
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1B850A79E80D83DE85A9EC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7ccb30af-a017-3100-a3ad-246c10337950.roa
Signing time:             Thu 24 Apr 2025 11:10:20 +0000
ROA not before:           Thu 24 Apr 2025 11:10:20 +0000
ROA not after:            Wed 23 Jul 2025 11:10:20 +0000
asID:                     12041
IP address blocks:        65.22.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:b8:50:a7:9e:80:d8:3d:e8:5a:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:10:20 2025 GMT
            Not After : Jul 23 11:10:20 2025 GMT
        Subject: CN=15102a0c-44e8-4de2-bae1-8a8dbeb2af78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:66:93:e5:bb:84:ee:d7:7d:00:54:a1:22:
                    96:be:83:41:8f:2d:e3:a1:89:5e:40:28:50:39:2b:
                    0d:5d:0d:a8:c3:a1:b9:e9:f5:31:db:c0:fa:0a:37:
                    5e:52:4b:5f:f1:76:b5:08:12:ce:76:a2:5a:0a:e4:
                    e2:62:a3:a1:ef:b2:30:28:03:d2:23:57:bc:0b:ca:
                    88:4c:eb:64:a9:6f:a2:04:1d:f5:d0:d6:29:89:91:
                    56:1c:a0:d0:39:5a:80:e7:f3:07:a3:a3:5b:c4:67:
                    5f:18:c2:76:ee:9e:bb:fc:a3:ee:0f:80:f3:b8:94:
                    d4:24:19:64:cf:02:93:13:e7:34:3e:27:92:30:37:
                    70:37:cd:48:27:ec:2e:41:fb:d1:f8:a0:33:bb:ef:
                    2b:0f:7b:c0:38:1f:07:d4:d4:96:ee:f4:bb:30:32:
                    38:91:0e:94:25:72:8e:ba:9e:66:fd:98:77:3c:86:
                    db:db:e1:0d:17:d4:80:4a:3c:3f:85:0d:eb:cf:84:
                    9e:03:dc:d5:b1:f0:b1:30:16:15:9f:b1:47:ef:29:
                    d8:ff:4b:6f:4c:59:a4:8c:e3:28:cc:54:40:2e:95:
                    60:43:ec:cc:e9:34:cb:26:5b:21:a3:1d:7e:e4:bd:
                    2a:d4:d0:f7:56:47:94:dd:6c:6b:34:88:7b:c3:e2:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:02:A0:0A:49:3C:81:AB:85:32:88:DA:84:7D:2C:44:B2:A8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7ccb30af-a017-3100-a3ad-246c10337950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d9:6b:3c:8a:0e:85:b7:e6:c4:02:b3:e5:bb:64:66:07:95:
         f2:be:82:46:2b:22:1a:ee:23:3a:2b:95:84:c7:b3:cc:75:32:
         22:69:0b:89:e4:11:42:dd:16:38:6c:ac:15:f7:9c:80:a7:b6:
         19:98:8e:8d:91:2d:d5:0d:23:bf:17:50:6d:a5:c8:a0:51:5b:
         d8:4f:17:fb:70:6d:f0:45:af:af:47:d6:bd:46:b1:83:b9:d3:
         ef:c6:e5:0a:5a:f3:7a:f0:50:dc:89:66:74:9e:99:74:b6:21:
         23:3f:d3:84:37:e9:ea:5b:f0:dc:d8:cb:ed:ba:89:41:1e:9b:
         85:95:1a:34:96:97:87:bc:3c:aa:8f:a2:0a:e1:fd:f1:94:4f:
         91:46:67:e9:0b:5e:e1:96:cb:21:71:72:67:7b:2c:ed:49:d4:
         d5:82:cd:b9:f8:dc:8a:bc:82:d2:77:24:86:97:60:70:cb:23:
         fa:e1:55:4a:99:26:bb:3e:b7:06:8c:37:a5:47:4b:77:32:b6:
         4b:c9:9c:d8:04:60:88:36:8b:78:55:41:5c:91:95:57:dc:c3:
         8e:a2:9b:7f:e7:d6:16:02:d5:1b:d4:a7:2d:ad:94:8e:15:eb:
         93:e2:4b:ba:d3:c2:0d:e6:14:28:02:2b:4e:05:e1:4a:39:cd:
         8f:43:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:51:17 2025 by rpki-client