Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05d71d91-bae9-3c41-85d6-d258bdff23b5.roa
File:                     05d71d91-bae9-3c41-85d6-d258bdff23b5.roa (raw, json)
Hash identifier:          hzDmUl4nAI9dr3Yx23HEkqoZH66aoFQxu4rijfdXafM=
Subject key identifier:   47:AC:EE:B0:25:40:D0:35:1E:31:B2:A8:47:3A:BF:B0:5C:55:E1:7D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7B811279B476D42727200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05d71d91-bae9-3c41-85d6-d258bdff23b5.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     14979
IP address blocks:        184.105.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:b8:11:27:9b:47:6d:42:72:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=89b7b0e6-3ed5-49b2-b333-97549063f0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:b0:ad:43:8d:c1:a3:52:9b:7e:15:c7:e2:
                    70:04:d6:f8:4a:1f:2f:2c:10:ff:e8:9c:7d:91:bf:
                    c5:c5:74:f6:9f:01:a1:fb:98:1a:cf:3f:38:da:91:
                    de:e0:f1:1a:45:f9:6f:82:aa:da:ef:44:fe:ce:d7:
                    cd:3d:05:56:97:f9:45:30:82:70:41:83:28:40:12:
                    5c:c2:f1:58:63:88:07:58:f1:4d:44:04:21:74:9e:
                    92:ca:9e:e1:2e:18:d1:4e:68:9f:43:00:c3:c9:c6:
                    d3:ff:7c:fa:51:0a:2c:ab:25:fe:3c:0c:77:0e:b2:
                    28:4c:3c:10:d0:f4:a3:ba:c3:12:ed:14:18:fe:a7:
                    c4:a3:a0:07:99:0d:9e:80:44:e6:f0:a4:90:af:22:
                    1c:83:ce:23:d4:c4:99:54:ba:b6:80:0d:73:91:30:
                    6a:bf:f5:6c:cb:1e:9f:70:12:f3:3f:aa:38:eb:b8:
                    bd:f5:11:7d:00:0c:52:35:49:74:dc:05:7c:1c:b0:
                    39:eb:91:57:9b:7b:c5:9b:f4:ae:03:21:b5:80:ff:
                    26:03:4a:d8:b8:a1:e9:7a:50:fc:02:66:79:f0:42:
                    41:6c:22:4d:4d:ac:99:08:c2:0f:6f:d6:06:e8:6b:
                    db:33:6e:4c:8d:8e:09:a3:bb:9b:b1:b3:c3:b4:6f:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:EE:B0:25:40:D0:35:1E:31:B2:A8:47:3A:BF:B0:5C:55:E1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05d71d91-bae9-3c41-85d6-d258bdff23b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:f1:fe:36:fd:f9:15:94:b1:38:cc:b2:b5:00:f4:b8:fe:54:
         09:8f:3f:20:e9:cb:c9:b4:84:49:e0:1c:2f:2f:11:e7:d5:b7:
         bf:06:0f:30:5f:3c:6f:6f:da:87:b2:ba:40:ac:21:ca:3d:d6:
         02:7b:48:4b:ed:0b:07:4d:7c:b2:f4:bb:93:71:d4:4d:8e:52:
         bf:ed:57:27:8e:1a:bf:f4:ba:1a:66:c3:a8:91:24:c3:b0:19:
         68:b1:86:20:8b:76:ac:de:fc:8f:d1:15:42:09:d6:08:42:b8:
         2e:c5:84:d4:52:95:a3:cd:3c:11:c4:26:7b:eb:d3:41:f5:51:
         64:5e:53:4b:46:f1:4d:ba:5e:ae:6d:60:3a:5a:67:19:ff:0f:
         08:c8:58:df:e4:97:1d:bb:b7:e1:be:e5:df:5d:1e:fe:98:4f:
         df:a2:df:55:a8:35:a6:ed:89:7f:27:fa:ba:7f:fd:d8:7d:8c:
         57:38:33:41:db:be:66:e2:ec:f1:33:12:99:23:89:d3:9f:18:
         3a:53:8e:44:20:4c:64:86:bc:63:9c:7d:f0:0e:ab:af:21:1f:
         be:1e:a9:7a:49:69:06:b5:8c:19:9e:b9:69:19:74:29:8c:4a:
         91:f9:7b:6c:48:29:ff:08:62:fb:87:13:f9:a5:83:94:29:4a:
         a5:f0:8b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:24:02 2025 by rpki-client