Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa
File:                     0e53396b-8611-3d42-ac77-f3f6a383e7de.roa (raw, json)
Hash identifier:          qE+EZaZtwKOZGDBPKYok5E/YlZo8Fo+GgAt6rb4WMNA=
Subject key identifier:   94:19:AA:09:5E:57:95:B7:AE:7D:34:4A:DE:0A:34:22:DA:40:87:11
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BED459FF369B21F174F20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     394996
IP address blocks:        65.49.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ed:45:9f:f3:69:b2:1f:17:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=a2a1b236-60a7-453b-b957-ae1fc5166328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:20:85:92:d6:0c:07:d7:a6:65:bb:d6:e9:
                    89:f8:02:99:3e:17:b3:5e:c3:d6:6d:e7:ad:91:0f:
                    6e:0a:95:c0:cd:fc:97:77:a3:9b:9a:60:9a:39:3f:
                    87:7a:65:38:de:aa:56:01:0e:37:df:59:30:3b:0c:
                    97:63:ba:46:99:b4:a2:20:05:cc:49:2a:88:a0:7f:
                    58:80:4d:18:2e:f4:32:f2:5d:2f:92:84:9c:fa:56:
                    2a:63:9a:36:10:46:72:eb:ad:43:0e:08:cd:22:cd:
                    06:f1:7f:61:17:d9:c1:09:14:cf:a1:fe:39:50:c4:
                    81:61:5f:8c:32:11:4d:d9:59:58:fb:d7:67:b9:da:
                    15:2c:38:b4:7e:9a:ce:0c:02:90:70:b2:24:1b:d0:
                    cb:70:3f:35:81:6c:46:39:af:b3:66:7c:d7:92:33:
                    1b:f7:4f:33:5f:42:aa:f8:58:0f:2b:85:dc:66:76:
                    b7:25:95:38:5e:fa:49:5e:41:15:23:ed:44:b7:87:
                    69:a2:48:74:b9:22:31:f4:01:a7:1d:5c:18:0d:12:
                    70:68:b0:17:fe:59:5f:73:de:af:d5:73:f9:2c:a9:
                    9c:8c:32:fe:28:ea:23:03:7d:cc:f0:dd:d6:99:4d:
                    28:38:03:d9:85:7b:a6:bd:87:4e:a9:ae:e2:e9:c0:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:19:AA:09:5E:57:95:B7:AE:7D:34:4A:DE:0A:34:22:DA:40:87:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:57:83:7a:da:51:1c:6d:ba:30:1f:71:fb:48:75:83:33:42:
         d5:14:13:9f:c4:2b:6c:49:67:34:41:c1:74:8c:f9:1f:37:ee:
         db:b4:e4:a4:3e:a6:61:d5:71:72:8a:56:5d:0b:a6:4f:39:7b:
         3b:23:65:a7:ff:f3:47:f0:af:b8:3c:2c:0e:0c:f6:3f:bb:77:
         23:8f:0e:48:37:62:0c:04:ff:49:7e:24:f1:c8:1c:d2:5a:72:
         e0:a2:9b:b0:27:bb:b1:a8:04:47:82:c0:c5:0c:93:10:85:b0:
         b1:b3:67:d3:5d:ab:23:dd:72:ea:66:8e:f3:3f:6e:11:cf:dc:
         04:63:3b:29:69:df:c7:90:87:22:04:33:49:ed:e6:7d:b3:35:
         68:60:3d:54:64:87:0a:38:d8:59:3f:93:1c:f4:89:9e:5d:0a:
         7e:bd:ef:f9:d9:c1:93:f8:48:f5:b0:25:f9:c1:a2:22:cc:92:
         5d:39:4a:e4:dd:14:3f:7c:f9:ac:ad:a1:55:57:0b:ae:cd:40:
         28:2c:05:dc:d0:5c:a5:82:8d:5d:2a:dc:56:4e:c2:ce:68:68:
         54:53:4e:61:47:99:72:d4:8c:4d:53:ba:70:d4:0f:1d:95:7b:
         78:f3:02:cb:11:38:7e:84:dc:c6:7e:2f:71:cc:c8:79:62:fa:
         eb:67:84:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:07 2025 by rpki-client