Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa
File:                     2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa (raw, json)
Hash identifier:          qL3Sau5sJQs1ZH4Jb1HeyZtoT18QrcWO6bvn4tr725w=
Subject key identifier:   77:F4:B3:9D:75:C5:16:24:7E:F7:2E:2C:68:13:07:89:B3:18:00:EA
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584BAA9798228C8304F9C1AFF100
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     24753
IP address blocks:        64.49.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:98:22:8c:83:04:f9:c1:af:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=78724694-578a-43d9-8b8a-3257b1504eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:00:c7:44:0e:d1:19:22:fb:d1:5a:88:53:
                    b3:d5:01:cf:fd:66:3f:da:d8:77:0c:05:bd:49:a7:
                    2b:6a:9d:b5:03:8f:76:c6:76:5c:09:1e:af:f2:4a:
                    d9:62:c2:7d:f0:1b:9a:5d:86:12:54:4d:c3:ef:a1:
                    70:df:49:af:6f:9d:e6:7f:1b:4a:0a:09:13:35:02:
                    a6:d2:9e:bc:31:d4:57:22:52:21:7e:73:2f:02:93:
                    eb:09:62:e4:66:97:37:a0:b3:3d:e5:8c:57:d3:da:
                    66:bc:f6:2c:07:13:01:ec:dc:9b:ee:9b:94:bb:06:
                    8c:91:a0:9e:ee:08:35:7c:fe:6a:5f:62:fa:2a:a2:
                    3b:e3:21:f5:08:e4:9a:ce:0e:d4:be:6f:42:4c:a5:
                    07:bd:f4:64:4f:a6:82:e3:56:e7:48:63:ba:68:02:
                    cf:f7:44:21:e4:7a:ac:d7:7a:1e:45:8c:04:53:3c:
                    8f:e8:90:14:c8:d2:9f:f9:9a:8a:52:f8:0e:32:0e:
                    85:93:bb:06:2f:75:e3:39:b8:5d:a6:3b:0e:08:16:
                    44:3b:c2:7a:b0:08:c3:ab:3d:e6:4d:b8:a5:e2:73:
                    88:44:91:a9:1b:a6:dd:0e:e3:3e:d1:70:d0:f9:17:
                    5d:89:aa:05:63:5b:01:12:e4:f8:20:cd:55:da:21:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F4:B3:9D:75:C5:16:24:7E:F7:2E:2C:68:13:07:89:B3:18:00:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:1c:87:73:c4:39:15:a9:ad:fc:a3:1e:b3:29:00:c5:cc:c6:
         5c:8a:24:0e:45:94:01:1d:46:89:02:e5:ed:f6:96:c8:31:27:
         26:f8:f3:da:bd:12:d8:27:e0:7c:28:a7:61:f3:4c:cd:c7:e3:
         87:97:17:1e:ae:62:f3:6d:cc:7c:85:2e:13:5b:f3:ec:f3:cf:
         af:7c:0c:55:cf:48:6c:3a:c3:0a:98:d8:4a:82:5b:c4:bf:c5:
         55:e3:0c:c0:3d:c3:1c:21:6f:e5:a0:1b:15:47:de:4e:d9:74:
         e3:b8:b8:a3:d3:93:d5:a6:80:98:45:cf:73:90:dc:f3:38:2f:
         fc:1c:99:f9:87:49:6b:34:62:a3:6c:ca:f1:95:46:80:7f:12:
         9b:bb:4e:94:30:63:d2:6b:2f:74:4c:5b:43:4a:05:5b:74:97:
         99:15:dd:78:c4:69:48:01:37:27:6c:40:d7:b9:98:40:89:c0:
         f2:47:0c:3f:36:bd:ed:cb:9b:bb:58:5c:ee:52:84:04:a6:6c:
         4c:10:0c:43:df:49:e6:a3:9f:c1:0e:84:7b:fe:fb:fb:16:60:
         44:16:ae:d8:e8:c4:b4:66:7a:46:61:39:a8:e8:ff:e8:c9:03:
         d0:dc:da:d0:27:8c:36:62:12:6a:e7:da:64:05:c4:82:f3:5c:
         9b:ae:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:04:55 2025 by rpki-client