Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50ca3bd8-aab7-3097-8ea0-893ddba3c15a.roa
File:                     50ca3bd8-aab7-3097-8ea0-893ddba3c15a.roa (raw, json)
Hash identifier:          sLdMgHD377xxH49dq/3EGhjuld/HXdkonrun1DmCJMs=
Subject key identifier:   5C:DD:D8:82:1B:A1:D1:DE:F2:4F:E1:F3:74:07:ED:4E:B8:10:4B:80
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF9192B28D0345D5D23A0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50ca3bd8-aab7-3097-8ea0-893ddba3c15a.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        165.225.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f9:19:2b:28:d0:34:5d:5d:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=fb7278d7-e00d-40bc-a9e9-baa360cb377d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:46:2f:66:2d:44:78:4c:d1:d7:e4:60:52:
                    53:f2:df:50:ce:ee:81:3a:76:a0:b2:10:16:2b:87:
                    be:57:38:c3:8c:af:99:a1:ad:ae:39:ea:79:a0:c8:
                    be:4d:3e:a3:67:af:6a:df:8e:6a:7d:f8:8c:2c:69:
                    fc:90:3f:d9:8b:34:6a:cf:4c:a7:58:46:97:46:5c:
                    18:45:55:f8:ca:57:9c:c7:e8:42:94:69:04:41:e6:
                    98:b4:ee:1d:55:98:db:02:ea:db:48:89:49:ab:46:
                    d3:5a:9e:be:bc:1d:28:7f:11:02:9e:d9:e8:c6:b8:
                    33:c8:d3:4d:2b:d1:62:ec:08:97:7c:5b:68:6a:1b:
                    42:30:c4:d4:a5:04:df:30:08:06:ff:bb:9a:f0:67:
                    40:2f:35:38:41:d0:c0:1c:ba:da:2a:15:99:eb:69:
                    f3:ea:8a:3c:ee:06:00:bd:28:66:c7:0f:17:21:3e:
                    64:ec:0e:ac:61:86:a2:b3:5e:06:08:32:78:d1:85:
                    00:82:a1:6a:7c:c8:cd:10:fd:58:be:a0:b7:f0:5c:
                    3d:4a:23:e3:0f:60:b1:1e:0d:91:1f:25:9d:2b:30:
                    17:5d:47:fd:1b:ba:9d:c4:76:b7:c4:78:f9:9e:08:
                    8e:80:fe:7e:59:c3:e6:4c:38:7a:4c:87:71:a8:12:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DD:D8:82:1B:A1:D1:DE:F2:4F:E1:F3:74:07:ED:4E:B8:10:4B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50ca3bd8-aab7-3097-8ea0-893ddba3c15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:b8:e4:e6:dc:19:36:25:be:ae:de:d6:b5:fd:f6:11:8d:
         9b:53:20:d1:7b:7c:85:7a:42:bc:41:10:fc:3e:ba:29:64:ec:
         bd:77:e2:59:a5:b8:5f:f2:62:88:38:a0:4d:b5:73:51:9e:73:
         95:9a:ed:59:5d:ce:06:0f:ea:ff:30:3d:fd:52:bc:04:be:59:
         56:40:a6:bf:82:6c:3b:7c:1e:45:9b:c3:6c:2e:7e:6c:68:38:
         ab:14:8d:ff:c8:00:ff:23:8a:d4:d5:f8:de:e4:86:ef:d6:9b:
         5a:ee:34:49:4d:94:37:dc:3a:3b:a3:44:56:48:2e:84:9a:5a:
         82:df:de:44:ce:66:7a:12:90:cd:c6:34:cc:56:1e:8a:02:51:
         8c:b3:4b:e0:4c:41:b2:5f:a5:07:6c:3f:3e:45:3f:33:a3:82:
         fd:64:54:59:b5:43:15:39:0d:9a:75:f8:b6:d4:05:fd:0e:95:
         55:f3:43:42:eb:41:ad:6c:a7:1a:d6:1f:c3:b8:24:9b:67:4c:
         5c:97:79:07:f7:91:34:f7:e7:6f:1e:c1:68:5d:67:38:82:dc:
         3f:dc:e3:8a:9b:a0:e4:79:0a:9b:50:27:f5:d5:17:b3:84:4c:
         f5:2c:85:e1:af:e2:c7:28:88:fd:6e:91:cb:2a:01:cc:f5:10:
         f7:65:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:25:37 2025 by rpki-client