Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50fff698-5339-3211-b313-eab7c12666b4.roa
File:                     50fff698-5339-3211-b313-eab7c12666b4.roa (raw, json)
Hash identifier:          ZW+cZkElhZEucKemld7OZbCnj6t9EcDuVRyax+gJZcI=
Subject key identifier:   EB:2F:F6:57:5C:26:F4:9C:3C:30:43:7F:A1:43:03:0D:B3:D7:3B:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC945EDC096FE64EFB300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50fff698-5339-3211-b313-eab7c12666b4.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     46646
IP address blocks:        65.49.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c9:45:ed:c0:96:fe:64:ef:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=be342d14-84a8-4dd4-8493-d021d5b95804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:47:37:21:b2:59:eb:0a:ca:af:dc:51:80:
                    47:65:b7:e0:54:3f:cf:37:4c:3a:a4:a6:7c:85:25:
                    50:35:d4:81:3d:db:85:5d:c2:7c:3b:28:fd:9d:3c:
                    eb:d8:e7:eb:bc:b4:dd:c4:fe:26:e4:65:75:82:85:
                    16:07:43:93:1d:0d:19:a0:14:cd:d8:1d:88:3f:41:
                    3e:0d:78:19:5b:0e:17:34:37:07:80:37:a4:13:9c:
                    1b:e2:90:c6:5e:47:3f:1c:09:9a:b4:9b:f6:1c:22:
                    13:d0:fe:10:16:c9:5c:f4:a5:aa:39:4a:4d:49:87:
                    66:8f:5c:97:10:72:58:18:d3:eb:23:1d:b2:bf:05:
                    e6:76:74:05:84:7c:91:e9:81:36:80:fa:24:3d:48:
                    01:fc:2e:5f:04:20:8b:1f:7c:66:18:a5:89:5e:96:
                    13:b3:4c:47:b6:7f:57:ce:c0:bc:e3:ff:5d:cd:08:
                    a9:5b:11:ff:dc:1e:95:af:37:ac:6d:86:30:d6:a3:
                    fc:cd:d8:81:69:d3:d2:d1:df:9a:32:aa:3a:fb:e9:
                    b6:31:3d:e1:dd:13:cf:6c:ac:33:0c:fb:eb:c5:90:
                    1b:b3:c8:8b:47:bb:51:97:8b:22:b0:7a:bd:e5:e7:
                    35:86:02:16:3d:16:65:98:99:fc:54:ea:d6:5c:d8:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:F6:57:5C:26:F4:9C:3C:30:43:7F:A1:43:03:0D:B3:D7:3B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50fff698-5339-3211-b313-eab7c12666b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:02:03:d4:a5:07:f6:23:78:62:22:1e:7a:44:b6:6f:af:65:
         c6:d6:62:7c:b1:1c:14:13:b5:17:ce:ff:ff:5e:b8:10:39:85:
         ef:52:42:2a:08:4e:9e:69:9b:a0:9b:93:be:7a:c6:70:40:94:
         59:b2:f3:35:07:07:98:17:28:be:d7:c5:5c:90:e5:10:4a:7d:
         7d:ad:3a:70:4d:0f:01:f8:52:73:16:ae:de:4b:dd:8a:13:c9:
         b5:67:8e:69:48:50:dd:e0:3d:ed:a8:38:d2:74:69:e6:93:ec:
         7e:dc:4c:70:35:53:3e:77:d4:3d:a5:3a:4f:27:6b:e7:29:dc:
         4c:08:31:73:a1:d2:26:7f:9f:6a:01:13:86:19:74:3e:47:fb:
         67:34:92:3e:84:27:1d:fa:8e:e7:e3:0e:7f:cc:17:d6:f0:e5:
         19:6d:96:cf:bb:db:a4:f0:5b:a1:33:f2:9b:df:62:11:db:72:
         8e:6f:1b:58:63:86:9f:02:bd:63:99:9b:7a:a3:03:f5:aa:fc:
         c7:19:72:c2:a5:59:89:fc:52:84:56:eb:ba:9c:1c:69:ca:7a:
         4e:e4:5b:69:64:0c:7e:73:81:ab:2c:55:66:5d:59:06:c6:53:
         c4:5d:66:bc:0d:2c:ba:12:66:de:94:0f:c7:ae:ab:8e:e3:d5:
         be:d9:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:49 2025 by rpki-client