Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ebe49c7a-1ddd-355c-b6e8-225b5c90e495.roa
File:                     ebe49c7a-1ddd-355c-b6e8-225b5c90e495.roa (raw, json)
Hash identifier:          YiGh5ujB6wearmRvY+02wjqSz3iCYe7kPIRNkDcDPt4=
Subject key identifier:   D3:96:DB:56:15:69:D5:33:2D:2C:87:04:9A:65:ED:E6:04:58:08:7B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7EF5D8F1D72657E6005C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ebe49c7a-1ddd-355c-b6e8-225b5c90e495.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16468
IP address blocks:        65.49.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ef:5d:8f:1d:72:65:7e:60:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=933b1359-f1b8-4049-af4f-175ddcae18a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:f6:b5:f8:5e:db:08:cc:a5:04:59:56:9c:
                    a1:64:99:ed:17:b3:ab:c8:e4:1e:ab:fb:60:e3:72:
                    df:8c:51:71:3c:53:3e:28:13:ea:92:ac:27:1c:d7:
                    3a:ea:31:1a:24:14:8a:9c:60:e7:3d:18:0f:ca:34:
                    81:9e:73:5a:f0:c2:25:7d:d3:0b:97:7e:25:44:9b:
                    34:dd:81:21:0e:73:0e:72:59:e8:c3:0f:31:7c:5c:
                    b2:98:bd:00:12:00:ed:8a:7f:64:04:08:0d:e9:4e:
                    fc:8f:30:59:6e:1c:ce:12:1e:7b:7b:f6:4a:a0:26:
                    d7:2b:33:7f:ac:81:f3:9f:b3:81:28:2e:59:47:74:
                    fa:42:08:f7:d2:5f:49:51:f8:7a:3f:df:9b:5c:c0:
                    41:7c:2e:64:69:74:de:7b:11:1a:fc:c0:de:ac:b2:
                    7e:e5:67:21:de:4e:5f:6c:eb:84:ef:5f:8b:96:70:
                    43:d2:cb:51:20:f9:46:3c:9e:02:94:9f:4c:42:2a:
                    5c:85:05:1b:22:f4:bf:40:aa:96:f8:06:79:54:1c:
                    d1:95:c1:ab:e0:fd:42:da:90:89:00:4b:44:1c:13:
                    14:75:7b:d5:29:28:5e:f5:0c:94:63:73:be:d7:75:
                    a9:02:58:4a:d7:3e:3e:09:6f:d3:2d:ed:99:eb:32:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:DB:56:15:69:D5:33:2D:2C:87:04:9A:65:ED:E6:04:58:08:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ebe49c7a-1ddd-355c-b6e8-225b5c90e495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:21:c0:f2:bb:15:81:70:ac:55:f3:4c:ac:81:2e:c1:14:93:
         d7:62:5f:b7:8c:36:06:12:f5:2f:d2:6f:66:90:86:d1:26:41:
         56:a8:f7:71:0f:3d:44:5d:79:4a:00:28:85:d4:0a:ce:d8:ba:
         37:8e:51:09:be:e1:f4:21:7a:81:bf:3f:1f:12:2a:63:61:27:
         32:75:8b:2b:c2:ea:ce:fc:4b:89:05:d4:eb:f5:92:91:19:db:
         18:12:da:9c:01:57:0c:77:a7:04:d9:fa:12:a0:84:56:82:12:
         48:f1:19:7e:64:65:19:77:2b:cd:c9:cd:23:4b:b6:0f:e8:be:
         b5:00:39:1f:52:fa:c6:e5:6c:9e:81:a9:21:a0:82:27:78:87:
         37:8d:c2:65:17:6e:05:e0:55:72:f4:7b:83:47:32:49:9c:3a:
         f0:f6:21:1e:7b:f4:2a:d7:6d:c0:9e:ba:e8:b8:7e:23:ad:e8:
         dd:ce:79:49:45:d7:91:d7:35:b0:53:a2:9b:17:ee:e9:6a:79:
         76:f5:68:a4:c7:10:df:a7:ea:b6:a0:38:bc:de:da:cc:9e:ac:
         b5:6a:49:ba:28:42:35:70:8a:61:c4:6d:46:2a:09:67:41:9d:
         e2:18:6c:4f:35:4f:1a:40:73:ad:6f:3a:df:74:fb:92:99:17:
         6c:bc:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:29:03 2025 by rpki-client