Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a82303c9-ac3a-3a2c-8390-bf102681bf90.roa
File:                     a82303c9-ac3a-3a2c-8390-bf102681bf90.roa (raw, json)
Hash identifier:          f7TKNBjshZBIjZzadlj+sySS/RiXLhIGE1mSxXreEDo=
Subject key identifier:   D6:24:CD:E0:22:0D:FA:66:31:86:46:0A:0C:DC:02:B4:DB:DB:58:14
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A21207856AAEEF533DE0C9C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a82303c9-ac3a-3a2c-8390-bf102681bf90.roa
Signing time:             Thu 24 Apr 2025 14:11:06 +0000
ROA not before:           Thu 24 Apr 2025 14:11:06 +0000
ROA not after:            Wed 23 Jul 2025 14:11:06 +0000
asID:                     207266
IP address blocks:        65.22.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:12:07:85:6a:ae:ef:53:3d:e0:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 14:11:06 2025 GMT
            Not After : Jul 23 14:11:06 2025 GMT
        Subject: CN=b13c42e5-fcce-4479-b676-211ac6d58def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:73:25:f1:ad:4f:22:0a:34:92:b6:c1:a4:
                    63:c5:5b:2b:02:1f:31:ef:c1:86:a6:c8:4c:52:48:
                    37:41:66:ea:92:5d:f3:70:3b:f2:17:9e:84:d4:54:
                    16:9f:c5:37:c8:cb:72:3a:71:b7:55:af:21:5b:f1:
                    89:bf:ca:6a:63:84:a7:dd:f6:4f:5e:6d:51:2d:a2:
                    72:e3:3f:0e:89:ab:61:39:c2:17:79:9d:62:d0:15:
                    8f:73:f3:83:23:5c:65:4f:e2:d6:d9:37:97:2a:09:
                    07:aa:a8:43:69:44:70:1a:3b:ec:4a:46:fd:63:a8:
                    1a:97:14:ad:3a:31:81:07:6c:ef:63:23:07:04:9f:
                    19:f9:df:27:57:5e:6a:d9:ce:bd:45:c6:76:a1:e9:
                    62:cb:d6:42:7c:2a:19:79:87:57:68:2b:d0:c6:e3:
                    39:cf:31:60:10:d6:98:4b:61:e7:88:b3:88:ce:a2:
                    42:57:cc:80:3f:a5:97:d3:f6:99:84:11:3d:96:41:
                    d3:f1:97:b7:f9:fe:f3:7c:0c:9e:2b:b2:f3:8e:fc:
                    d3:11:94:40:e2:3e:e6:8c:5a:9c:c0:27:29:3e:b4:
                    49:76:9b:3a:27:e2:a3:27:dc:8a:0c:1b:e8:7d:e2:
                    65:54:15:0e:75:13:43:98:3a:66:0a:19:42:19:10:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:24:CD:E0:22:0D:FA:66:31:86:46:0A:0C:DC:02:B4:DB:DB:58:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a82303c9-ac3a-3a2c-8390-bf102681bf90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ac:1f:5f:23:82:c1:56:ec:d2:87:bc:a2:70:d2:fc:e0:3f:
         62:ec:f6:99:14:e3:d1:4b:6b:67:a3:97:d5:d4:15:ec:74:78:
         69:9b:38:d4:13:1b:2f:d3:c2:e1:be:b8:5c:5c:8f:3e:68:21:
         fa:5d:81:c7:9a:4e:f0:07:2e:fb:5f:57:4c:db:95:2c:ec:7f:
         b6:24:e7:fd:70:00:04:89:61:ba:99:97:33:e4:51:8c:7e:a0:
         50:d7:77:fa:9f:a2:b2:1b:ba:01:8b:f5:53:14:f0:9c:c5:48:
         a2:27:87:d6:7c:2d:27:9b:87:56:68:e9:7c:9c:c4:4a:47:85:
         f6:1e:ec:55:b3:22:50:1d:5d:ce:64:46:76:4e:ab:e9:18:20:
         88:a8:8c:16:bc:01:e5:1f:0a:1e:dd:c9:6f:e7:3d:65:6b:28:
         cb:49:c4:f6:ca:37:bc:a0:e6:46:d6:09:38:34:3d:f6:d6:dc:
         48:8e:39:77:17:b0:9f:4f:4e:a0:75:a1:cf:28:ca:c2:ea:9c:
         df:28:73:76:5c:f9:09:bb:99:ab:0c:03:ae:70:a9:df:ec:f4:
         35:80:38:02:01:5d:7d:61:5c:87:84:b7:1f:97:4a:6e:e4:68:
         75:83:45:83:7a:67:93:2f:de:16:d3:c3:aa:0f:b7:b9:d7:3b:
         cd:8b:af:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEgeFaq7vUz3gycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDQyNDE0MTEwNloXDTI1MDcyMzE0MTEwNlowLzEtMCsGA1UEAxMk
YjEzYzQyZTUtZmNjZS00NDc5LWI2NzYtMjExYWM2ZDU4ZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIRzJfGtTyIKNJK2waRjxVsrAh8x78GGpshM
Ukg3QWbqkl3zcDvyF56E1FQWn8U3yMtyOnG3Va8hW/GJv8pqY4Sn3fZPXm1RLaJy
4z8OiathOcIXeZ1i0BWPc/ODI1xlT+LW2TeXKgkHqqhDaURwGjvsSkb9Y6galxSt
OjGBB2zvYyMHBJ8Z+d8nV15q2c69RcZ2oeliy9ZCfCoZeYdXaCvQxuM5zzFgENaY
S2HniLOIzqJCV8yAP6WX0/aZhBE9lkHT8Ze3+f7zfAyeK7LzjvzTEZRA4j7mjFqc
wCcpPrRJdps6J+KjJ9yKDBvofeJlVBUOdRNDmDpmChlCGRDMiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYkzeAiDfpmMYZGCgzcArTb21gUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTgyMzAzYzktYWMzYS0z
YTJjLTgzOTAtYmYxMDI2ODFiZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRazMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSsH18jgsFW7NKHvKJw0vzgP2Ls9pkU49FLa2ejl9XUFex0eGmbONQT
Gy/TwuG+uFxcjz5oIfpdgceaTvAHLvtfV0zblSzsf7Yk5/1wAASJYbqZlzPkUYx+
oFDXd/qforIbugGL9VMU8JzFSKInh9Z8LSebh1Zo6XycxEpHhfYe7FWzIlAdXc5k
RnZOq+kYIIiojBa8AeUfCh7dyW/nPWVrKMtJxPbKN7yg5kbWCTg0PfbW3EiOOXcX
sJ9PTqB1oc8oysLqnN8oc3Zc+Qm7masMA65wqd/s9DWAOAIBXX1hXIeEtx+XSm7k
aHWDRYN6Z5Mv3hbTw6oPt7nXO82Lr2I=
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:07:12 2025 by rpki-client