Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b66296d-5b21-3fc6-b7c2-fd23d48178a5.roa
File:                     3b66296d-5b21-3fc6-b7c2-fd23d48178a5.roa (raw, json)
Hash identifier:          fqR8ssL3PyhdSHOv1hY2thtK2nq09QW9W1soUxzcqO8=
Subject key identifier:   65:51:90:5E:FA:16:5E:33:5E:E1:E5:49:F3:E3:FC:5B:6F:22:EF:14
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E010E3B0E66C8EE31C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b66296d-5b21-3fc6-b7c2-fd23d48178a5.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     11255
IP address blocks:        184.105.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e0:10:e3:b0:e6:6c:8e:e3:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=337e9951-6ff5-492e-90ae-11e33f3e17d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:97:77:70:6f:48:ee:8f:6c:d4:7c:af:74:
                    cd:83:0b:4e:d8:75:93:3a:c5:15:cb:7c:bd:56:39:
                    10:0d:13:4d:51:b3:dc:38:09:21:eb:2f:c1:d3:e8:
                    25:c4:fd:20:d7:c6:5e:64:cb:c8:d7:93:81:60:f4:
                    0d:dd:e4:c9:a6:94:38:2a:48:cb:22:6b:5e:bc:3a:
                    ab:2a:d5:b5:18:2f:6a:9b:33:f4:6e:86:bb:2d:40:
                    bf:a6:a4:ef:cd:18:e9:0c:35:06:91:c3:8d:81:b5:
                    ad:8c:64:d9:66:07:9c:ce:f6:48:99:3e:e8:49:1e:
                    bd:f2:fc:87:ed:b0:9f:10:8e:8f:1d:30:4d:80:70:
                    77:c2:bc:c3:ac:53:37:ee:8b:24:95:18:0d:2f:2e:
                    39:ed:30:11:67:cf:05:31:c3:a1:06:4c:3f:02:77:
                    d5:7c:09:fb:ca:4d:54:93:88:38:de:52:50:13:ae:
                    0c:2b:cb:ab:87:be:65:1c:42:88:6e:03:26:6e:f8:
                    f9:83:85:2a:79:4e:57:b7:df:79:9d:26:36:e1:2c:
                    1f:79:02:24:0b:12:79:19:da:f7:af:f8:6e:14:8a:
                    96:82:bd:57:d7:63:56:bc:89:d5:33:00:3a:62:01:
                    84:84:e4:8b:aa:a7:71:09:ab:1a:a3:8c:b5:ce:f0:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:51:90:5E:FA:16:5E:33:5E:E1:E5:49:F3:E3:FC:5B:6F:22:EF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b66296d-5b21-3fc6-b7c2-fd23d48178a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:e3:99:fd:2e:9f:56:b0:6d:cc:d8:48:0c:bc:9b:7f:96:
         3b:5f:9d:23:6f:6f:0d:81:cd:aa:c1:7a:be:61:85:db:c0:5a:
         ac:3e:02:60:27:77:ab:6d:6e:e4:96:80:f9:5a:f3:2b:2f:84:
         bb:da:1e:00:1c:50:cc:02:fa:6a:6b:f3:13:91:09:14:46:37:
         96:7e:17:35:67:df:a8:ca:1e:fc:08:9d:19:b8:33:22:38:b9:
         22:3d:3a:23:c3:26:25:9d:bc:bf:70:a9:6c:48:58:40:58:6b:
         e6:13:90:61:9b:65:8e:d5:23:1c:94:c4:8d:ac:63:19:62:96:
         4a:c5:5b:19:b6:d3:b1:98:47:4d:b0:36:fc:ea:08:29:b8:5b:
         27:bd:d3:1b:b3:54:2f:44:fc:b9:88:41:75:0d:80:77:f9:10:
         24:ae:61:2d:e9:9a:8f:4a:b7:32:3c:2e:d9:0f:a0:6a:8a:d9:
         16:fa:0d:b1:47:35:98:a2:c7:01:9f:eb:fb:9e:c2:8c:3b:b2:
         f0:83:2f:6c:56:f2:20:39:12:25:64:f3:db:40:24:21:e9:f9:
         5b:ae:1a:9d:0d:23:8b:21:c4:a5:12:81:c2:b2:5f:4e:29:64:
         ee:2a:5a:66:59:62:56:26:41:96:05:23:fb:9d:3f:9b:f9:1c:
         05:82:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:30:16 2025 by rpki-client