Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8ac73e5f-18d7-3f60-929a-62daf4c0b8df.roa
File:                     8ac73e5f-18d7-3f60-929a-62daf4c0b8df.roa (raw, json)
Hash identifier:          bYeRLNjResRjnSviNX5umVX5XmRYRHt1Ng2KloUBs2g=
Subject key identifier:   27:A6:5E:AE:67:3A:75:D0:AE:E4:4C:CB:7B:70:35:3B:DB:DB:A1:CA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849192D1E4B1A85D029F1964400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8ac73e5f-18d7-3f60-929a-62daf4c0b8df.roa
Signing time:             Thu 06 Mar 2025 13:19:56 +0000
ROA not before:           Thu 06 Mar 2025 13:19:56 +0000
ROA not after:            Wed 04 Jun 2025 12:19:56 +0000
asID:                     207266
IP address blocks:        65.22.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:2d:1e:4b:1a:85:d0:29:f1:96:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar  6 13:19:56 2025 GMT
            Not After : Jun  4 12:19:56 2025 GMT
        Subject: CN=debe26f3-cb5c-4f7c-a6ce-79223f80692d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:1e:5c:24:0d:d8:26:0b:bc:5e:cf:9b:46:
                    38:36:f9:5d:a5:bb:07:e2:57:87:a7:d9:6a:61:1e:
                    40:cf:bb:ff:d7:a2:e2:91:45:55:f9:8c:dd:43:43:
                    a8:a5:c9:47:03:5e:d4:f9:ad:ba:e4:be:07:ac:8c:
                    de:4b:13:d5:5e:65:81:9e:75:bf:01:2d:39:95:9b:
                    a6:28:fc:32:21:f6:09:0a:68:6b:71:69:57:6f:c9:
                    c3:df:87:24:44:e2:2f:a9:9f:87:a8:d7:b0:54:04:
                    7a:9c:b8:c9:2a:fd:42:7b:a4:6d:14:7d:43:21:d1:
                    56:c0:1f:e9:20:92:82:4a:5b:f2:28:b9:b8:a1:0f:
                    9b:18:21:2d:86:ea:d5:9a:d8:9f:e6:06:77:b2:d1:
                    98:00:29:9e:81:60:04:6d:38:9c:23:60:c3:d4:c1:
                    41:2f:4d:c4:ae:2a:6b:39:ac:ad:2a:74:12:fa:52:
                    39:9a:43:6e:6e:83:16:f3:71:5d:12:3a:00:be:8d:
                    17:f5:f5:dc:d1:8a:3e:70:cc:19:e5:40:15:b0:3f:
                    35:d0:43:0d:c5:a4:52:3d:df:0a:2b:23:c3:60:bd:
                    32:ac:d9:a5:5d:18:dd:6d:ff:8a:dd:09:1e:c6:7e:
                    6a:b7:fc:70:d6:49:8a:d1:c3:8d:72:4a:1a:6f:3b:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A6:5E:AE:67:3A:75:D0:AE:E4:4C:CB:7B:70:35:3B:DB:DB:A1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8ac73e5f-18d7-3f60-929a-62daf4c0b8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:69:bb:7a:f3:9a:5a:6e:28:d9:ff:1b:58:a9:31:96:c6:
         49:e1:06:86:bc:1a:ad:97:c0:0f:75:51:8b:9f:de:be:c0:df:
         40:a5:6d:3d:4f:56:72:74:10:8f:f0:6a:e7:02:07:25:de:41:
         cb:5c:ac:40:dd:7e:13:bd:7b:f3:27:65:c6:98:2a:f8:77:cf:
         37:6c:a5:d1:b3:21:e8:18:59:2a:c3:cd:77:79:17:ad:eb:ed:
         9c:90:0a:84:a2:36:b2:ee:0e:54:d4:06:f2:85:04:e9:4e:95:
         0c:8c:2d:50:fb:62:22:c4:91:74:72:99:b3:e8:c3:d8:8d:f7:
         e4:93:ae:81:95:ab:a8:cc:8c:0a:1b:eb:73:4d:28:c9:e8:b2:
         ad:3c:90:3f:59:d0:5e:1b:d3:6e:16:8e:fc:4a:14:6e:7a:ef:
         10:d1:70:6d:5a:5b:8d:66:1f:0c:e1:32:84:73:46:3b:d9:1a:
         ff:55:0b:84:1a:8d:32:d1:0c:34:a8:57:3e:d6:12:45:5a:f3:
         b5:6f:64:67:1a:93:87:c0:73:9a:c5:e3:9a:dc:b5:71:b7:0b:
         ad:6a:9a:2b:fc:ab:8c:64:c6:92:41:b8:a7:e7:23:e2:3b:52:
         9e:33:c3:07:ec:4f:fa:42:65:6c:71:b4:5c:e2:9f:95:d4:dd:
         51:79:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 06:08:49 2025 by rpki-client