Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/27544b2a-e2a9-34e9-9e60-e67de4a35aee.roa
File:                     27544b2a-e2a9-34e9-9e60-e67de4a35aee.roa (raw, json)
Hash identifier:          AQgYyJh79pQi01v8IeDgba5anJWVIu62N0F3SUHMtJk=
Subject key identifier:   AE:F8:00:E4:81:1A:CA:95:A0:9F:7B:6A:C4:92:2A:7D:39:6D:D4:8D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849192D1F002483CAAA62427BF0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/27544b2a-e2a9-34e9-9e60-e67de4a35aee.roa
Signing time:             Thu 06 Mar 2025 13:19:57 +0000
ROA not before:           Thu 06 Mar 2025 13:19:57 +0000
ROA not after:            Wed 04 Jun 2025 12:19:57 +0000
asID:                     207266
IP address blocks:        65.22.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:2d:1f:00:24:83:ca:aa:62:42:7b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar  6 13:19:57 2025 GMT
            Not After : Jun  4 12:19:57 2025 GMT
        Subject: CN=0f4f7d8c-746e-410d-a673-d7ed99d12a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:ca:80:c4:fd:bf:dc:10:cc:d1:49:91:14:
                    bc:1d:cf:75:0e:07:50:fe:47:77:2f:25:e9:6b:86:
                    70:b2:9f:7e:15:69:39:36:f4:61:ec:a1:c5:15:4a:
                    ea:e7:2b:4b:ba:52:3e:46:48:19:cc:07:14:24:3b:
                    74:8a:b3:4f:f9:01:26:42:8a:78:5f:b0:20:0a:f3:
                    27:fb:37:fe:c0:c8:59:ea:27:16:4d:a9:d3:43:5b:
                    5a:bc:a5:d5:8d:7d:5f:4f:0b:5a:9e:97:64:36:fa:
                    5b:bc:0f:14:41:0a:3e:b1:38:c8:4d:d0:10:6b:de:
                    c8:fa:a1:c6:24:3d:61:55:e5:e6:ea:bc:fe:05:47:
                    a0:cf:e0:19:76:f9:89:3f:17:ca:83:12:ea:6f:54:
                    b1:c3:67:61:cf:30:0a:6e:ba:02:3c:f8:1e:a1:cf:
                    d5:2f:05:4e:ae:7c:ff:41:c8:fc:d6:b7:63:4a:48:
                    77:e1:81:f8:15:4f:d6:0b:a4:33:48:8e:43:6f:bb:
                    fe:3d:a8:72:55:f6:1a:c0:60:2a:94:66:d4:1c:98:
                    ee:78:ab:1d:7f:23:8b:56:06:40:91:c5:ef:5c:a6:
                    23:9d:96:e2:7b:bd:16:22:2d:06:18:6c:61:71:4c:
                    66:52:86:bd:15:1e:6b:08:1f:d9:1a:40:01:bf:ae:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F8:00:E4:81:1A:CA:95:A0:9F:7B:6A:C4:92:2A:7D:39:6D:D4:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/27544b2a-e2a9-34e9-9e60-e67de4a35aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:24:c7:c2:36:70:49:cf:b9:19:3b:12:f7:28:79:43:8d:e2:
         37:db:9c:39:30:a5:d4:a6:12:81:61:cd:e4:31:7b:21:63:b9:
         00:1f:78:50:25:20:b0:be:13:42:fe:c6:b3:13:9c:c8:a9:c4:
         46:51:35:0e:8a:a7:9c:5b:dd:71:08:9a:51:b9:fa:0f:69:e0:
         e7:1e:7b:bb:da:df:df:d1:7c:24:ec:37:f8:b3:b1:f4:a8:ba:
         00:5d:a2:14:58:5d:51:b1:09:92:7c:45:51:5d:6d:f2:7f:3e:
         1b:6b:43:4c:19:36:f7:08:78:48:51:81:c9:6f:ae:5a:a8:0b:
         0f:41:67:63:66:fe:40:1d:eb:a5:a9:ac:9a:19:a5:c8:70:64:
         be:f5:28:3c:e6:ea:bc:23:f4:a7:df:ae:3f:b9:42:e1:75:28:
         f2:ae:c0:6f:43:36:87:fd:dc:da:a5:7f:ea:3e:55:15:68:6d:
         9a:63:9f:80:b4:f0:98:c8:23:d4:0f:3c:41:15:9a:2e:77:a5:
         84:f3:0c:ed:f1:bf:7a:0b:ae:cd:99:17:27:e7:f7:38:5c:54:
         3a:16:9a:3c:8f:cf:bd:86:8d:1e:7f:6c:9a:7a:65:52:d5:17:
         35:e2:d6:04:3e:e2:e8:ed:84:ea:20:eb:df:d1:48:d6:e6:9b:
         ed:8a:e7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 06:11:12 2025 by rpki-client