Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07a49228-fea2-3427-9ab3-e87461327a76.roa
File:                     07a49228-fea2-3427-9ab3-e87461327a76.roa (raw, json)
Hash identifier:          S9/vnlZcdLk7IHesEVZZZh+Wfcujpf1MHJMSnKZHaY0=
Subject key identifier:   B2:E2:82:08:26:ED:DF:5F:04:77:79:14:3F:82:D4:EC:07:DD:B9:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E21F42EEEF6F8BD5D600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07a49228-fea2-3427-9ab3-e87461327a76.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16830
IP address blocks:        65.49.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e2:1f:42:ee:ef:6f:8b:d5:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=c2e824d6-7abc-416f-a9bb-cf44559403ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:d2:82:db:f0:ea:ad:fe:30:f5:95:0c:d7:
                    e8:eb:1a:9a:71:c1:5e:6a:ba:ec:24:6e:44:1a:ab:
                    bb:ec:4b:16:53:9a:d8:97:43:f2:fd:6b:f0:03:86:
                    e7:b1:42:dd:c0:38:04:f6:3d:2e:3a:c3:b0:45:d1:
                    07:2d:b5:49:78:39:55:25:b3:6c:92:b1:79:6e:c0:
                    4c:6b:7f:44:a2:b9:a2:df:a1:34:c1:a6:14:fe:13:
                    33:81:ef:17:fd:85:8e:a0:63:06:4c:29:74:3d:da:
                    c9:0f:4e:66:32:f2:dd:cc:51:ee:ab:6b:9c:97:62:
                    30:a0:e2:8d:d3:53:4a:2d:75:a4:48:fa:06:f2:12:
                    42:c7:18:63:a4:fa:90:e7:5f:fa:d1:62:bb:ca:d4:
                    5e:10:0c:4c:a0:31:24:58:32:18:4a:d4:c7:51:51:
                    5d:88:71:e0:ca:06:f9:d7:ec:11:ff:9d:20:a4:10:
                    cf:60:49:a2:98:28:25:f6:c8:05:45:e1:90:75:6f:
                    bc:fc:59:af:6b:98:56:17:a1:c0:1d:6f:4a:a5:5f:
                    d3:da:55:25:02:41:be:d2:7a:a3:8b:fb:16:20:87:
                    9f:b3:a1:38:b0:88:8a:c5:0b:b4:32:3d:70:a2:65:
                    1b:12:28:43:ce:9a:bd:fd:74:d0:2c:1d:87:c2:2d:
                    1d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E2:82:08:26:ED:DF:5F:04:77:79:14:3F:82:D4:EC:07:DD:B9:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07a49228-fea2-3427-9ab3-e87461327a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c0:aa:b9:e7:a4:9f:a1:72:66:18:f5:ba:ea:66:ee:9f:17:
         29:67:b1:6c:08:0b:b4:5a:5c:99:1d:33:cb:51:07:a6:9d:f7:
         6c:3d:0e:1d:ba:3f:8a:9d:f7:b8:81:85:ae:6f:9f:41:b3:a8:
         00:e3:81:09:8e:6a:18:0e:ff:a1:a1:5a:d4:e1:19:21:af:43:
         0d:a5:c8:6a:db:ee:77:ab:04:d5:10:4d:04:b3:d9:a0:7a:3c:
         7e:34:97:be:65:07:9d:83:b7:26:1f:8d:2a:4b:ce:ff:d1:62:
         14:76:46:60:88:5d:65:c4:f5:14:f1:af:74:88:23:81:b3:a4:
         f2:11:f0:17:55:b5:1d:d1:f4:2b:89:e8:a0:e3:53:48:51:d7:
         f9:4a:e2:7f:c2:19:14:db:b1:0e:ed:0e:02:57:b5:77:40:8e:
         d6:90:b8:79:98:7d:42:2b:9a:ea:b1:46:8a:78:f2:a6:8b:a5:
         e0:35:60:1a:37:b0:fa:e3:87:b6:75:28:43:7b:c0:99:64:22:
         bb:d5:3e:c9:87:85:2c:f8:b1:09:13:01:b6:45:13:dd:b7:37:
         13:d5:6a:76:78:ac:ad:c1:f1:29:97:f2:f6:f1:0e:9d:a1:3c:
         cb:0d:9e:99:f0:1a:83:73:61:b1:5e:7f:a7:fb:ff:89:93:4f:
         13:7b:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:15 2025 by rpki-client