Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/524092ee-e7ce-3e74-bbf6-b9711a94e4f9.roa
File:                     524092ee-e7ce-3e74-bbf6-b9711a94e4f9.roa (raw, json)
Hash identifier:          m7Sop0gvdne9OA/j83ozhNei4rq83SF0FJlE27BsOGQ=
Subject key identifier:   46:6A:CE:D5:97:30:E6:AD:44:0F:A2:D8:7A:07:6C:D9:85:2A:6A:D9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B6FF73598FBA2A10E9C292980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/524092ee-e7ce-3e74-bbf6-b9711a94e4f9.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     54502
IP address blocks:        184.105.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:35:98:fb:a2:a1:0e:9c:29:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=05636bc9-ae92-45a6-be22-b012f44241c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:29:ed:92:92:3e:ca:d8:c4:ce:4b:76:fa:
                    20:d1:55:06:ec:0c:3d:cc:9b:a8:40:68:4a:d4:bd:
                    94:31:3c:66:ec:1e:16:04:80:45:03:d8:6d:77:36:
                    ec:65:68:1f:c6:7b:d5:b0:bb:60:2f:26:08:7a:6a:
                    c3:99:85:41:3f:89:a6:b4:ca:4b:22:11:92:21:eb:
                    65:eb:ad:e9:b0:f6:9c:bf:87:66:d0:b5:59:e6:38:
                    ed:7b:89:33:37:30:9a:e2:c0:e0:35:da:1a:d4:7b:
                    26:b7:8a:23:50:84:ce:4d:a8:81:a0:f7:4c:44:d6:
                    dc:d2:31:35:0e:72:d0:69:fe:2b:71:e8:22:99:60:
                    3b:18:fb:07:48:25:a1:a4:d6:0d:71:ec:fb:f4:cc:
                    35:6c:06:40:88:34:9b:49:55:93:b3:c9:cf:58:02:
                    3b:84:be:13:97:51:30:15:b7:84:dc:69:08:07:48:
                    43:62:01:98:36:7f:68:96:eb:e3:0f:e2:eb:20:f0:
                    b2:30:14:e0:1f:57:00:d1:fc:59:1e:70:b6:11:28:
                    7e:51:94:98:ee:56:92:f1:16:51:8f:22:67:df:e8:
                    03:5d:44:7d:4c:26:5b:b6:8b:2d:ba:fd:a0:d1:af:
                    b9:d4:c1:50:5d:c9:fb:b2:2b:30:a1:72:d2:df:39:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:CE:D5:97:30:E6:AD:44:0F:A2:D8:7A:07:6C:D9:85:2A:6A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/524092ee-e7ce-3e74-bbf6-b9711a94e4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:99:f8:2c:eb:46:b1:26:6d:eb:93:dc:7e:f7:cc:e1:3c:80:
         9b:fd:04:d6:fe:d3:94:9f:69:28:bb:b8:38:00:01:6b:f3:a8:
         da:9e:84:b2:74:7d:a9:1d:29:8f:55:64:69:3b:44:0d:a6:77:
         b9:89:83:01:ad:b1:9a:87:e3:50:42:c8:28:5c:e9:e4:18:97:
         b2:a6:e6:06:fc:14:55:ee:60:3d:f0:63:1b:88:c0:dc:51:0b:
         d0:a0:ea:af:48:86:02:ba:96:1a:82:68:32:fe:c2:54:75:34:
         34:8c:d8:ea:59:52:06:6a:0d:18:ec:ce:64:0f:97:a4:cc:5f:
         dd:ec:79:b8:f9:4b:3e:c4:72:e8:8c:a7:00:6f:17:4b:1e:c4:
         0d:e8:f1:cc:bb:cd:23:17:5c:e7:b5:1b:80:6b:7b:e7:73:31:
         96:b4:28:3a:83:cd:f1:1e:bc:e3:9a:6a:a9:31:8f:b7:fc:ae:
         b8:4d:1a:fb:e8:23:93:ac:47:ec:30:5a:db:35:4f:9d:da:dd:
         74:ac:93:2f:1a:04:4e:8c:fe:ce:d8:2a:30:ae:f8:c7:e8:1b:
         4a:8b:b2:67:dc:44:68:36:98:6e:83:2d:93:28:65:b0:a8:41:
         0a:7d:84:76:47:ad:e3:cf:9c:49:8b:7c:3e:ea:19:38:01:83:
         c1:61:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 19:32:34 2025 by rpki-client