Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa
File:                     9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa (raw, json)
Hash identifier:          GmEI8mmQws3AcKM+Cvyc9myF8cnldI8yV2pNlL1fT+E=
Subject key identifier:   38:53:5D:54:70:A4:7B:93:B1:D3:4B:91:BB:FC:D2:CA:E1:33:0E:4E
Certificate issuer:       /CN=6a38b089-4bb1-4c65-837b-853a9a3398e1
Certificate serial:       010D0C9F4328584BB88D22BD95BEADB8FDF08400
Authority key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     5650
IP address blocks:        64.49.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:22:bd:95:be:ad:b8:fd:f0:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=94d3a075-9625-4f85-b998-fad4ff5426ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:2b:d5:a2:d5:25:1d:ea:41:aa:78:a4:89:
                    5e:d1:ad:e3:eb:0f:93:fc:32:fc:b9:06:55:3d:a4:
                    d4:a2:91:93:54:98:f3:3c:2c:60:20:c8:88:d6:52:
                    66:98:78:05:6d:27:47:6d:b3:09:32:c4:52:e4:36:
                    99:10:28:85:98:43:e7:2f:53:4c:c8:26:80:01:35:
                    58:a0:54:eb:aa:a4:d5:17:a8:2a:a1:20:35:66:53:
                    b6:be:ab:01:6b:93:3f:09:23:78:d2:40:32:4b:31:
                    91:c9:f1:62:26:9a:42:f1:08:38:4f:81:ae:e4:1b:
                    f4:40:4e:8d:1f:e2:fc:26:a6:63:cc:7a:6d:26:18:
                    ec:9e:41:cc:0e:ba:f9:42:43:d8:d9:8f:1d:03:60:
                    52:a7:f5:4e:b6:b6:64:7c:57:a0:64:bd:76:95:e1:
                    69:38:73:36:85:c6:56:99:0c:f6:6d:7c:03:95:73:
                    c6:a4:79:8f:c2:49:8f:d7:fb:fe:97:dc:60:35:86:
                    be:ad:bf:50:74:53:06:0c:0e:92:cb:18:af:c5:ec:
                    5c:5d:a4:31:60:4c:a6:6b:b7:c2:8a:8a:69:c9:e9:
                    f9:12:b8:d1:f9:98:74:86:8d:5e:f5:6e:f1:3a:0f:
                    68:6a:4c:95:ab:d8:9f:28:92:ef:43:4e:09:69:c5:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:53:5D:54:70:A4:7B:93:B1:D3:4B:91:BB:FC:D2:CA:E1:33:0E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl

            X509v3 Authority Key Identifier:
                keyid:61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:70:fa:d6:47:3f:f7:f1:9b:43:2c:1f:7b:11:39:a2:08:ef:
         c0:c3:6c:9d:74:a3:d5:62:4e:b6:3d:15:09:c8:d2:2f:3f:1b:
         26:26:95:a9:2f:1d:a7:1d:ba:c5:bb:1e:f2:07:af:a2:8a:40:
         e7:52:27:c4:80:8a:36:48:ba:58:48:9c:ba:d8:3b:cc:36:8e:
         c7:65:54:e7:e6:91:46:29:fd:50:cb:41:fa:51:ff:e7:b4:5f:
         e1:4c:22:f4:22:4d:24:5f:d4:6c:9e:bd:79:dc:30:2b:72:42:
         e6:f8:f0:13:97:b6:f9:f9:d4:24:7b:3d:e1:97:9f:55:d7:a5:
         ae:30:e0:8b:16:d9:f6:40:a2:e2:bf:1a:4a:39:c3:53:15:87:
         95:39:4e:22:58:68:f6:36:79:6a:4e:a5:c6:01:c3:5b:7b:8f:
         46:91:7f:ee:03:3a:b2:d4:34:6a:f4:37:09:a5:49:ad:b0:db:
         55:69:39:ad:68:60:ef:9a:30:92:de:92:91:4b:89:d2:4d:b7:
         e0:ea:cb:25:18:23:f3:5d:b4:22:c8:86:62:64:f9:41:db:9a:
         bc:23:9d:7f:c9:35:c4:2b:a0:6c:7e:1a:b6:16:55:aa:c3:8d:
         55:00:be:dc:c0:2e:ac:ff:42:e3:df:93:4e:2a:ca:e7:a0:66:
         34:50:24:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:44 2025 by rpki-client