Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/adc7b46c-44a7-3c40-b262-aa282a486f86.roa
File:                     adc7b46c-44a7-3c40-b262-aa282a486f86.roa (raw, json)
Hash identifier:          6ZmmRtBRt9t1A4oK5Ep6w9XWvUubix+gnIn5Bb2SoOk=
Subject key identifier:   41:A1:8A:B0:F0:A4:B5:7D:E7:62:35:E8:3F:4C:67:8D:24:87:BD:FB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849192D1831532676EA9E8C9E80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/adc7b46c-44a7-3c40-b262-aa282a486f86.roa
Signing time:             Thu 06 Mar 2025 13:19:54 +0000
ROA not before:           Thu 06 Mar 2025 13:19:54 +0000
ROA not after:            Wed 04 Jun 2025 12:19:54 +0000
asID:                     207266
IP address blocks:        65.22.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:2d:18:31:53:26:76:ea:9e:8c:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar  6 13:19:54 2025 GMT
            Not After : Jun  4 12:19:54 2025 GMT
        Subject: CN=5aaa6a63-afcc-4f00-bafe-156829dd6d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:96:33:a2:40:fb:03:69:85:4f:59:16:17:
                    30:dc:45:4e:a8:b7:8e:63:92:48:a4:c3:76:b3:0e:
                    33:de:37:22:ea:dd:3a:7f:07:a8:55:12:dd:96:47:
                    97:19:73:3a:f4:39:d9:24:35:1b:fc:a4:30:27:f8:
                    46:86:72:24:2d:86:fa:bf:ec:5b:cf:08:f5:92:15:
                    75:70:42:0b:8a:81:29:9d:47:47:66:e4:0c:dd:fd:
                    9e:ea:e1:e0:2d:9b:9d:43:4d:48:7a:5e:b5:d5:fc:
                    27:30:d6:9f:02:0b:a6:46:dd:b1:1c:5f:e4:66:56:
                    1e:9a:57:42:6c:fd:86:c6:20:dc:09:1b:29:92:2d:
                    e1:67:42:f5:27:d1:e4:db:db:39:fa:7d:1f:ec:7b:
                    fc:1c:17:cc:8e:ff:aa:11:c2:21:9f:67:91:8e:02:
                    50:f4:9a:34:b1:32:ab:fc:34:a3:af:76:93:f0:b5:
                    39:bd:02:8b:1a:d6:f8:95:fd:8e:16:ba:5d:36:c2:
                    e8:0c:df:0b:96:2f:25:51:f6:3d:e1:79:42:6e:86:
                    3e:69:1a:9b:5a:34:8c:e3:07:71:ff:d1:9d:6e:3a:
                    f5:bd:85:03:65:8b:84:21:6b:eb:2c:4b:60:79:1e:
                    a7:8c:b5:c9:8b:30:e3:1d:64:bd:ab:31:9c:2d:10:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A1:8A:B0:F0:A4:B5:7D:E7:62:35:E8:3F:4C:67:8D:24:87:BD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/adc7b46c-44a7-3c40-b262-aa282a486f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:76:26:db:e2:f0:3d:93:88:84:91:20:93:9d:ea:76:01:6f:
         c2:5a:c2:13:b2:c4:a6:d5:ff:11:72:d1:e1:e7:87:74:39:5a:
         3f:ed:fd:0e:dc:29:af:ff:b7:f5:6d:fe:17:d3:a1:73:8c:97:
         60:d4:16:b1:11:d0:43:23:1d:a7:4f:ce:57:cb:a5:c6:e0:ec:
         1d:b7:b3:5a:ec:68:86:9e:ee:ce:e7:80:79:98:35:06:d5:bc:
         46:55:47:0e:7c:83:5e:bb:25:81:5e:fe:97:40:b9:66:1c:b3:
         39:4f:18:04:4c:b4:c6:3b:63:66:21:5a:af:8b:a4:0e:53:e4:
         72:a5:6b:07:b0:df:95:cc:62:19:5a:6d:79:75:4f:20:f3:53:
         33:c3:b8:e9:49:e9:78:0e:8f:37:f3:d6:24:7f:f9:f4:ea:65:
         d2:b7:d6:a2:ab:f4:9a:5e:91:81:02:8a:97:4b:49:84:b5:06:
         a3:1d:d5:f8:7e:2f:bf:8b:a4:20:8f:41:35:11:84:f7:88:76:
         c8:8d:84:fa:e2:a6:15:d2:4d:65:05:f1:f0:55:5f:8d:f1:df:
         de:b6:34:f5:6e:65:d4:45:4e:ec:88:69:05:5a:ab:57:5b:14:
         47:23:4a:9b:d6:4b:b3:2e:01:cf:d3:9a:9f:ea:36:40:e9:5f:
         66:7f:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 06:16:12 2025 by rpki-client