Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a088fb6-6347-3355-96a6-21a175514738.roa
File:                     0a088fb6-6347-3355-96a6-21a175514738.roa (raw, json)
Hash identifier:          aU1q3j7dAwYONCMUtgH/wMrukOhRh8iJTM2Td1xHhfs=
Subject key identifier:   7D:BB:43:CD:B8:49:A5:74:90:45:8F:72:8B:E5:38:F7:52:CC:B0:59
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F6E88B30D636F3505780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a088fb6-6347-3355-96a6-21a175514738.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     207821
IP address blocks:        64.62.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f6:e8:8b:30:d6:36:f3:50:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=50ef0c04-1392-4f53-b1c3-d4619660348b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:d1:a0:78:f6:90:0f:85:22:61:2c:cb:a8:
                    7f:b0:a7:fa:03:26:a4:06:6a:66:c2:b4:16:0b:9a:
                    85:2e:c4:4e:6c:27:b4:52:9f:fa:0c:71:77:b1:41:
                    24:3d:cd:dc:f7:9e:35:cd:41:9a:ac:a2:30:bf:36:
                    42:57:d1:ab:7c:e2:18:43:68:dc:63:ba:a8:90:80:
                    c2:a5:79:61:98:f7:38:17:fc:a2:70:64:87:28:aa:
                    33:55:07:19:77:ee:94:bb:e7:f7:a2:3a:5d:2e:c9:
                    44:1f:eb:8b:c6:15:70:d4:17:bb:ad:ad:31:38:05:
                    82:db:77:ac:6a:ce:55:e7:d9:cb:7f:9b:27:fe:0d:
                    6a:02:17:4e:07:7e:a7:e0:3d:a7:25:4e:f2:c0:08:
                    2e:f1:e8:7a:47:53:97:8a:ea:3d:f7:53:28:ef:05:
                    74:30:d5:6b:5f:c9:c7:3a:55:b3:51:8f:00:db:13:
                    33:c3:01:54:dd:03:7b:af:1b:4a:bb:b8:2e:72:ff:
                    80:d4:01:79:9e:17:25:a8:19:73:37:1c:f5:36:4b:
                    50:a7:26:36:bd:81:18:f3:ed:0f:6e:7f:14:98:58:
                    d2:b2:6f:a4:32:37:55:b7:00:ad:50:3d:90:09:39:
                    b9:fa:57:8b:19:32:c2:14:95:b2:0e:d0:3a:4c:3b:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BB:43:CD:B8:49:A5:74:90:45:8F:72:8B:E5:38:F7:52:CC:B0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a088fb6-6347-3355-96a6-21a175514738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:8c:5f:58:fa:2b:2c:cb:2b:88:05:ce:f6:6b:91:b6:3a:
         53:8c:fa:93:36:20:1c:86:39:63:10:b9:5c:d1:a8:95:09:2b:
         f9:f4:e8:d3:84:6a:8e:84:b3:b4:5b:15:11:40:0d:05:cd:de:
         fe:08:0c:f2:b4:54:75:49:3b:1d:ef:54:ad:c9:2a:ea:e9:24:
         53:f3:8f:5a:10:6b:2b:49:75:fd:ea:a0:90:44:7a:c7:96:e1:
         3e:59:d1:ef:de:7f:6a:05:12:bf:d0:73:06:49:14:93:04:56:
         66:5c:b7:bb:be:14:3b:9e:17:ef:40:c4:dd:cb:8b:ac:18:0f:
         de:f1:1b:4f:e3:50:c8:05:df:08:bf:39:1f:00:89:9a:15:af:
         44:bb:e4:b9:e7:e7:2d:67:78:7c:6c:ee:e3:15:48:9e:15:52:
         d8:36:6a:39:9c:86:6a:2f:b6:99:85:47:a3:e9:00:83:36:b3:
         1a:1c:41:05:43:f1:04:50:96:20:fc:58:01:72:8b:9a:6f:cc:
         7a:5a:ae:a5:40:a4:8a:3a:82:db:be:18:d9:bf:8a:cb:7e:94:
         28:41:c4:59:c1:9f:6a:56:13:4a:4d:1f:c5:04:fe:0d:6e:8a:
         cd:ec:55:9a:75:d2:d4:bc:69:26:45:f8:a0:45:db:3a:d5:4a:
         c6:7a:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:09:29 2025 by rpki-client