Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36659038-d9b1-3ca5-bbb6-98507d764881.roa
File:                     36659038-d9b1-3ca5-bbb6-98507d764881.roa (raw, json)
Hash identifier:          J4y6yuaXLl4y8HdtCcEoNugwJmY9tG43ywP7wgzZSDI=
Subject key identifier:   F1:E8:C9:C6:19:1F:50:F8:7B:E1:A3:58:AA:B1:13:9D:E6:F7:42:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E119703E8588ED4DC780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36659038-d9b1-3ca5-bbb6-98507d764881.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     12247
IP address blocks:        65.49.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e1:19:70:3e:85:88:ed:4d:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=a25a2a7f-7bd5-4f9f-8fe6-a431e69aee84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:38:71:fb:4a:4b:47:ac:08:7e:5a:05:f2:
                    ad:d1:2e:bb:62:4f:a5:5a:c8:23:78:1a:95:b7:df:
                    ff:07:60:ff:61:5f:d6:1b:3a:7f:22:45:b8:af:37:
                    51:f2:88:9c:d7:01:d0:a7:ae:8f:e2:81:2e:3b:d8:
                    b5:16:f5:0c:0d:94:51:d7:47:2b:1c:cc:f8:0e:52:
                    91:d5:dd:3e:3b:e9:50:ba:b2:03:9f:6d:a9:90:64:
                    40:07:b4:02:24:8b:4b:c2:fb:e1:c3:80:06:90:4c:
                    05:df:8b:be:68:36:91:07:ef:d9:bd:8b:31:32:04:
                    43:aa:e0:d0:d7:64:d2:61:c3:e0:1b:c2:83:6f:30:
                    8d:e0:95:6e:54:18:70:d7:5f:79:78:0e:0d:19:d3:
                    14:4d:6e:a6:b4:17:32:9b:1e:e6:df:27:91:37:c8:
                    ad:b7:b3:2a:f0:96:b5:74:cb:ac:24:64:21:be:03:
                    99:a4:7a:05:19:66:c5:9a:08:ad:2a:d0:05:c7:1c:
                    f3:d1:63:cc:e6:d5:63:bc:38:97:9a:77:0e:50:bb:
                    41:d2:af:7e:76:57:de:0b:18:68:7f:cb:4b:d8:43:
                    65:5f:74:75:42:fe:95:6e:e5:9a:63:0e:e6:c3:52:
                    d2:d4:4b:c9:7a:89:90:3c:d0:84:53:ad:d8:84:36:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:C9:C6:19:1F:50:F8:7B:E1:A3:58:AA:B1:13:9D:E6:F7:42:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36659038-d9b1-3ca5-bbb6-98507d764881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:32:9a:78:5f:5b:bf:26:5a:7e:67:9f:40:0c:89:58:fe:
         88:8f:d3:30:d4:18:3a:c4:89:c8:4f:aa:fd:e0:ac:90:02:11:
         0b:f3:70:cc:a6:92:12:87:67:51:13:74:9d:99:b8:9d:29:33:
         64:c3:9f:c9:5c:02:9f:08:49:16:b7:69:37:f7:6a:53:0e:f9:
         8d:84:0d:10:4f:94:08:c0:fa:01:7c:d8:58:61:4d:6d:b7:cd:
         72:93:e6:fd:3f:2d:da:b9:a1:f5:4c:e1:17:ee:c8:ca:f7:5b:
         43:47:81:7a:fe:ad:7a:61:7b:01:fb:3e:39:be:d0:2f:90:b5:
         f6:ed:b5:f3:66:2d:ca:c2:9c:4c:ca:8e:91:0b:96:50:91:40:
         17:d7:51:02:66:62:64:53:22:9d:48:80:4d:5c:55:4e:4d:f6:
         0f:ec:04:8d:57:12:eb:41:b9:bd:e3:d1:f9:46:ef:1b:99:81:
         0d:4d:82:88:28:4b:d0:57:13:f0:de:8b:cd:33:fa:2b:dc:6a:
         1f:f6:ac:dd:3a:d2:49:fe:6a:9e:25:46:81:a7:bd:64:c6:51:
         97:5f:95:c3:56:d3:78:da:60:46:77:ee:a9:7a:66:e9:28:e7:
         2b:c9:70:00:39:3d:b0:7c:57:34:1e:d9:cd:e1:28:c1:bf:ee:
         c3:42:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:26:21 2025 by rpki-client