Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/f24d3cbf-575a-3f2a-9b62-92fd0380abe6.roa
File:                     f24d3cbf-575a-3f2a-9b62-92fd0380abe6.roa (raw, json)
Hash identifier:          yo1PAKChYmF97+5wtXlChs4be4h1Jw/M0mKPn22PRhU=
Subject key identifier:   50:65:EC:72:AC:27:F9:BE:74:2B:A0:20:EA:84:AF:D5:08:4F:4F:D4
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F4328584BB2F82C4F1FA979FCC5622000
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/f24d3cbf-575a-3f2a-9b62-92fd0380abe6.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     40065
IP address blocks:        64.49.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:2c:4f:1f:a9:79:fc:c5:62:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=6a68b83b-9534-4ad7-a9c5-6b0ae5b784ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:14:e9:a7:1c:1e:32:50:f0:55:32:d8:e8:
                    b9:43:45:f4:dd:50:f7:79:f9:4b:ae:98:9b:ba:71:
                    d8:be:60:b9:8e:88:22:85:ab:d4:f7:2c:ab:8f:cb:
                    da:a8:f5:c3:f8:2f:0d:c6:03:b5:65:48:fa:a0:13:
                    b1:83:3d:7b:d4:90:1a:de:5e:59:79:c2:1f:d0:33:
                    fd:64:00:72:0c:11:8f:89:38:52:90:13:5d:af:ba:
                    2a:84:21:0e:ab:32:3b:d0:b7:d7:5e:eb:87:0a:dc:
                    42:00:fa:b7:cc:1c:a8:a1:ac:1c:f4:12:0f:42:a7:
                    0a:4a:64:ec:8a:ed:b9:e2:7c:3e:fa:45:8e:4f:ca:
                    de:42:2c:c6:87:d8:a6:42:be:69:d6:1b:56:f9:82:
                    94:f1:24:0d:b5:b3:f0:0e:32:07:da:1f:e2:80:8b:
                    f5:4f:76:2c:78:e6:b4:27:b8:52:38:ed:ab:cf:bb:
                    fd:d5:4b:3d:62:c8:e7:5d:b1:16:97:2d:62:21:18:
                    0c:c3:63:c3:7a:b1:26:b7:a4:f7:c3:7f:d4:34:49:
                    b5:d3:ba:9e:57:1c:6b:53:5a:bb:80:f7:7d:90:64:
                    50:a2:ef:70:03:9f:f4:b7:8f:55:80:dd:1b:73:ed:
                    5b:e2:50:e4:70:73:53:0c:33:a2:7e:69:6f:fb:13:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:65:EC:72:AC:27:F9:BE:74:2B:A0:20:EA:84:AF:D5:08:4F:4F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/f24d3cbf-575a-3f2a-9b62-92fd0380abe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:67:61:e0:4a:91:ac:6e:92:66:01:12:c5:59:3d:40:2e:cf:
         a1:c0:d6:8f:16:af:a2:df:63:dd:f6:29:74:18:37:d2:e1:cb:
         5f:13:a1:41:0f:48:7f:d5:80:50:07:d8:8b:32:1f:b7:49:1a:
         42:26:e9:9c:05:69:7e:2f:d3:a4:b8:83:26:3f:b4:3b:17:8a:
         cc:ee:fa:7e:df:f7:df:ea:fc:1f:e6:d9:0c:b1:0b:f6:dc:28:
         47:6b:2e:48:86:88:7b:00:03:07:a8:d7:db:be:72:a7:ca:72:
         af:88:1d:21:27:f9:ec:26:77:bd:05:67:82:2f:14:ad:30:fb:
         7c:19:08:92:fd:13:d7:53:51:18:62:c0:fa:c5:ea:7f:b3:9a:
         e5:1a:8e:9e:64:60:3d:d9:66:25:19:24:de:cb:0b:5c:a2:85:
         93:66:3c:01:e6:bc:1f:29:b0:d5:c8:b3:5f:e6:17:a4:e9:5c:
         55:3d:37:13:2f:04:91:44:46:5f:ba:8c:ca:79:5c:17:f5:6a:
         64:ed:76:19:a7:e7:a1:94:76:07:6e:1b:b9:23:7b:74:1a:9f:
         2a:20:f2:c4:4d:84:2a:92:ad:77:12:ef:e0:86:31:75:c3:40:
         c5:43:ac:46:ea:43:e4:21:5d:8f:7f:65:c4:64:78:98:6c:e7:
         11:f2:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:14:20 2025 by rpki-client