Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d688c313-2094-344a-8853-68b13918e28d.roa
File:                     d688c313-2094-344a-8853-68b13918e28d.roa (raw, json)
Hash identifier:          hhB2UrVkPP9jtbj7kQJ+EEXsMm4zvYUucD4+1Up311U=
Subject key identifier:   A0:CF:75:F9:3D:E8:03:9D:FF:8A:19:A9:67:10:8B:90:AF:27:C1:A7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDB27A6F5EEB8F3550500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d688c313-2094-344a-8853-68b13918e28d.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     54288
IP address blocks:        65.49.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:db:27:a6:f5:ee:b8:f3:55:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=bbf4028a-c3cc-4e04-b546-0615db067a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:16:51:8c:32:09:16:28:8b:95:56:21:47:
                    7a:78:19:75:d9:3f:73:48:ab:2b:c5:60:53:2c:3e:
                    09:f3:56:cf:94:80:c5:20:5c:aa:49:01:46:df:b4:
                    5e:1f:99:af:6c:87:99:62:16:64:94:cb:f4:fb:41:
                    f9:eb:ad:13:af:18:81:36:7d:9a:dd:81:d3:a5:44:
                    d2:db:51:54:8b:9f:de:8b:5a:bb:e8:41:32:59:78:
                    69:a2:60:6f:1b:b2:6a:32:db:0f:2a:45:0e:f5:93:
                    5b:50:39:db:95:72:a7:b7:e6:98:94:1f:ab:56:4b:
                    9a:0a:bf:3d:5b:a2:56:74:a0:71:ba:76:99:8c:2a:
                    06:32:fd:6d:a8:c1:fe:45:87:38:33:a9:f8:28:a5:
                    b4:66:49:dc:23:a4:83:53:47:5d:99:a9:ba:c6:fb:
                    88:66:18:e9:cc:8d:fa:0d:12:a4:4a:16:b4:e4:80:
                    64:63:13:70:fb:b9:64:8e:28:bd:1d:84:95:c3:8c:
                    33:af:88:53:60:bc:ba:63:34:ea:1d:ec:48:11:2f:
                    fd:26:47:65:18:d8:d7:cf:53:40:04:ff:2f:ac:f7:
                    4a:4a:ba:77:b9:17:98:e9:85:03:f9:45:40:67:64:
                    79:b6:f7:80:d1:62:29:42:ed:63:46:91:2f:be:5f:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CF:75:F9:3D:E8:03:9D:FF:8A:19:A9:67:10:8B:90:AF:27:C1:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d688c313-2094-344a-8853-68b13918e28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:02:45:4e:db:41:e2:61:33:57:66:f1:eb:97:15:7f:ef:
         f9:bd:23:6b:75:75:fc:f4:d4:cd:eb:79:3b:cf:2c:11:c5:37:
         66:fc:4f:af:a7:76:c5:7d:49:4f:5a:41:09:ab:b7:ee:ed:36:
         60:20:30:9c:f8:4e:71:50:05:65:b5:fc:be:bd:e7:68:b2:9f:
         7a:93:84:7b:5a:43:4e:df:27:93:79:8e:9c:a1:ea:73:18:de:
         89:c1:eb:6a:a7:0e:36:81:13:7c:35:0f:1b:41:59:12:e8:96:
         25:05:9a:11:f9:71:2c:b4:7d:d1:df:4a:6b:c0:72:27:ea:77:
         bd:e4:52:49:05:72:db:54:e4:5d:52:61:c2:70:94:0a:cc:b5:
         f2:90:da:4d:b3:a3:72:ad:ac:5f:7a:aa:12:fa:c8:95:f8:b6:
         a8:37:2a:b2:51:51:3f:86:46:07:b8:b3:12:96:00:52:f4:29:
         6d:da:75:46:00:4f:dc:f8:34:36:94:90:27:69:f8:31:cc:26:
         e8:55:0d:a7:56:c1:7e:23:be:8e:a9:e8:77:d1:ee:fe:ae:fd:
         82:e0:c3:db:e4:ab:36:da:22:19:59:fc:60:78:c9:72:49:f3:
         2a:06:60:41:b2:72:ce:e8:fa:18:5e:3d:17:d8:fc:ad:a7:97:
         9a:a8:54:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX9snpvXuuPNVBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YmJmNDAyOGEtYzNjYy00ZTA0LWI1NDYtMDYxNWRiMDY3YTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtQWUYwyCRYoi5VWIUd6eBl12T9zSKsrxWBT
LD4J81bPlIDFIFyqSQFG37ReH5mvbIeZYhZklMv0+0H5660TrxiBNn2a3YHTpUTS
21FUi5/ei1q76EEyWXhpomBvG7JqMtsPKkUO9ZNbUDnblXKnt+aYlB+rVkuaCr89
W6JWdKBxunaZjCoGMv1tqMH+RYc4M6n4KKW0ZkncI6SDU0ddmam6xvuIZhjpzI36
DRKkSha05IBkYxNw+7lkjii9HYSVw4wzr4hTYLy6YzTqHexIES/9JkdlGNjXz1NA
BP8vrPdKSrp3uReY6YUD+UVAZ2R5tveA0WIpQu1jRpEvvl/DOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKDPdfk96AOd/4oZqWcQi5CvJ8GnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDY4OGMzMTMtMjA5NC0z
NDRhLTg4NTMtNjhiMTM5MThlMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCuAkVO20HiYTNXZvHrlxV/7/m9I2t1dfz01M3reTvPLBHFN2b8T6+n
dsV9SU9aQQmrt+7tNmAgMJz4TnFQBWW1/L6952iyn3qThHtaQ07fJ5N5jpyh6nMY
3onB62qnDjaBE3w1DxtBWRLoliUFmhH5cSy0fdHfSmvAcifqd73kUkkFcttU5F1S
YcJwlArMtfKQ2k2zo3KtrF96qhL6yJX4tqg3KrJRUT+GRge4sxKWAFL0KW3adUYA
T9z4NDaUkCdp+DHMJuhVDadWwX4jvo6p6HfR7v6u/YLgw9vkqzbaIhlZ/GB4yXJJ
8yoGYEGycs7o+hhePRfY/K2nl5qoVGQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:40:03 2025 by rpki-client