Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa
File:                     b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa (raw, json)
Hash identifier:          tt2h8+AlwglkBMG6BSR4Bxu6TuwYzEBI1jK0ascOUHg=
Subject key identifier:   7B:12:24:8C:2E:E4:2D:AD:A4:26:E2:3C:DD:EE:14:A2:5B:4C:58:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E33E8D00B568ECD3FDE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     57
IP address blocks:        64.62.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e3:3e:8d:00:b5:68:ec:d3:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=bd754618-d822-42fa-bd7a-29f32329ff68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:7d:ab:ad:5c:d0:d6:6b:cb:4e:f7:84:ae:
                    88:21:6c:f5:e3:66:69:36:c0:e1:1a:33:fc:cc:d9:
                    28:c0:19:e8:37:b4:8e:b7:ae:c5:96:62:91:97:00:
                    bf:ea:d8:8f:2a:c8:73:65:4b:74:bb:24:d2:d5:74:
                    91:d2:bf:d6:6d:c3:ff:e3:73:b9:a0:b8:da:31:d6:
                    d1:63:22:ea:d0:4c:26:c1:69:a4:e0:27:3c:5f:e3:
                    14:4d:d8:34:ec:e6:b8:9b:07:de:ca:8c:74:a8:36:
                    1b:ff:b5:68:3e:3a:11:45:c7:88:59:df:aa:1d:08:
                    24:4d:4c:4d:43:39:f5:f4:4e:ca:bf:2b:16:23:1b:
                    f6:e2:5a:1e:d4:0e:b0:92:26:1f:4f:6a:a9:6f:df:
                    c5:e9:35:f4:cb:2b:a3:d1:b3:78:ad:ee:17:1d:ad:
                    fd:aa:6d:dd:ac:b9:f6:ac:1f:25:95:22:76:fe:f3:
                    e1:de:4c:f1:fd:43:be:71:5c:07:97:86:f3:10:2c:
                    5c:bd:ae:2e:c9:83:62:b7:4e:2e:de:dc:0e:9e:31:
                    d6:bd:ec:a2:64:11:80:c2:e3:75:2f:84:74:33:c2:
                    15:e1:bb:bb:69:5d:d8:b9:dd:a4:7d:4a:3c:c4:4c:
                    f9:9a:4c:6b:08:f1:ab:b5:b5:83:63:ac:e3:4e:77:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:12:24:8C:2E:E4:2D:AD:A4:26:E2:3C:DD:EE:14:A2:5B:4C:58:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b2:b9:f8:c3:d3:16:85:53:0a:fb:a3:e9:fb:0e:58:58:96:
         c7:81:cf:a4:03:78:fb:1e:44:63:c3:0c:93:bf:34:34:97:a4:
         b5:a8:c4:8b:a3:76:57:20:d8:fd:80:6f:30:34:74:ee:2b:fd:
         5c:8a:11:58:72:96:e9:59:a1:f4:99:c4:a8:82:f3:de:42:d2:
         27:35:6e:a4:1f:59:7e:64:e3:53:ed:33:e7:65:c4:0a:66:19:
         4e:e1:08:57:33:11:92:41:e5:8e:a3:a1:15:c1:9d:df:81:3a:
         4c:bf:3f:68:fe:46:45:c1:83:99:ea:28:98:4a:4f:eb:e4:8e:
         3f:98:5b:25:0c:e8:66:7f:d7:8c:80:37:ce:cf:d3:c1:ef:dc:
         37:8a:c6:df:97:7b:13:35:65:40:9f:e3:fb:ff:80:e0:37:e4:
         f6:43:b3:3e:63:cd:07:17:ad:04:f3:1b:70:91:f6:a6:9e:00:
         f9:07:33:96:ec:59:22:d2:0b:09:65:03:b4:cb:c2:17:43:46:
         8e:1e:76:57:ee:c9:02:a8:47:c7:96:75:f7:af:99:8c:fd:87:
         9c:d8:20:3d:a0:08:f2:38:ec:3e:d8:1b:54:a2:fa:34:0e:6b:
         0d:c5:ae:ad:5a:6e:7a:80:42:6d:ac:bf:bc:7a:50:c6:39:9e:
         ed:a5:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:42 2025 by rpki-client