Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b344852c-5598-346a-94d4-31f24b95426b.roa
File:                     b344852c-5598-346a-94d4-31f24b95426b.roa (raw, json)
Hash identifier:          LNFjrUNhNxKCWykUJAAAcPCSTGH8RzYpBbeG489G2rQ=
Subject key identifier:   55:A7:57:5B:F2:B5:6A:9F:72:F8:09:3E:E9:1C:56:CF:1D:26:F0:9C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E6B79F49630898393280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b344852c-5598-346a-94d4-31f24b95426b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54288
IP address blocks:        64.62.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e6:b7:9f:49:63:08:98:39:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=04cc62e5-decc-4338-8939-523386205d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2c:b1:82:25:bc:cf:ea:fc:6e:f4:f1:cb:80:
                    7c:77:5c:36:51:b7:e5:54:74:73:69:54:63:6d:17:
                    84:88:b1:5a:91:86:6e:0b:ca:ba:5a:df:fe:0a:51:
                    5a:64:c3:7e:68:37:ec:78:e4:96:cc:72:89:b9:72:
                    23:0b:d2:21:7a:b8:05:c0:21:0a:45:9d:68:9d:52:
                    0a:5e:c3:1d:15:ec:66:0d:57:93:a9:49:72:42:95:
                    fb:ab:40:79:a7:64:a7:06:4c:df:da:97:2d:62:35:
                    9b:81:f6:ee:ad:9b:b7:97:0b:ea:54:81:35:4d:b1:
                    9c:26:38:dd:25:72:a3:4c:49:1b:a2:cd:00:9a:51:
                    f4:91:fd:da:f5:5e:8b:88:f3:80:bd:12:54:c3:b7:
                    ff:70:9d:d7:bd:09:22:f3:3f:85:7b:83:ad:b2:5d:
                    71:b3:6a:f9:f9:02:60:ba:17:eb:1c:d3:c9:b6:f7:
                    06:15:84:01:c3:f3:b4:ed:99:79:0c:c5:33:08:3e:
                    c6:09:52:04:d8:a8:be:10:56:12:8f:31:3d:ed:77:
                    c8:3d:a1:22:f6:ee:e8:9c:0d:f7:ab:dc:c5:ab:95:
                    48:2e:f6:79:4b:61:22:b8:9e:24:8f:4c:a2:9c:a3:
                    3e:c3:fc:01:69:55:18:ef:c7:3c:8d:e9:a2:78:f1:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:57:5B:F2:B5:6A:9F:72:F8:09:3E:E9:1C:56:CF:1D:26:F0:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b344852c-5598-346a-94d4-31f24b95426b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:88:37:1c:da:a5:59:a1:b6:de:be:a3:0b:8f:75:16:90:2f:
         c1:f6:54:e0:cc:c6:b3:41:d4:e6:e2:0d:4a:2a:5a:d3:66:f6:
         53:22:6f:70:2c:fb:60:88:e6:53:3d:6c:e3:04:30:63:a9:59:
         3b:e2:b7:f5:65:45:e9:1a:4b:f4:5b:71:3b:ec:75:73:dd:c4:
         60:dd:3b:3b:fd:b3:f3:2e:58:89:b8:1f:f6:02:5c:f8:fd:fc:
         41:26:00:25:d9:fa:2e:c9:12:f3:f8:76:2c:81:18:ea:47:54:
         51:e2:a1:d1:3f:e5:13:06:a2:cd:05:10:c5:2e:47:69:95:aa:
         14:78:79:49:56:77:62:e8:18:79:f7:17:60:c7:93:23:b9:e4:
         37:51:d3:f4:43:fc:49:e4:63:61:c2:b5:5d:71:96:5a:a5:fb:
         dd:3c:d1:8b:72:27:b8:53:30:39:d9:b2:c4:1e:d3:aa:a2:ad:
         db:20:02:df:3b:67:d5:08:04:b9:ac:36:f2:cf:50:6a:c2:4a:
         40:9c:94:b4:70:ff:4e:7d:1b:74:45:09:e8:3d:5d:be:53:b5:
         60:a8:a9:69:05:2e:cb:47:10:3a:75:e4:01:8e:5e:cc:ec:ae:
         71:29:64:14:6a:4e:fc:5e:f4:1b:ce:9e:f2:75:24:95:12:25:
         bc:e1:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:25:41 2025 by rpki-client