Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa
File:                     6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa (raw, json)
Hash identifier:          zbDirf9Vhqo5PLTWm2y5AVsUCHQOykQApfnm57f5gl0=
Subject key identifier:   2C:89:67:39:36:D8:76:7B:5D:2E:3B:7D:54:B5:AA:8B:46:03:16:B1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DFA94A305EDFA7FBC7C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     398885
IP address blocks:        65.49.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:fa:94:a3:05:ed:fa:7f:bc:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=5d8d721c-c14a-4584-b9b7-651772ff35db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:cc:d4:00:a8:57:23:c3:c6:8c:24:31:e7:
                    7d:a2:1f:1b:40:d3:7f:57:2d:9e:21:15:ec:d2:43:
                    6b:11:63:ac:9d:f7:e7:2f:79:04:08:39:d5:b9:a3:
                    8e:70:14:b9:11:7b:1d:27:59:ea:a3:d0:a4:7c:73:
                    73:9e:b4:f2:ca:b2:1d:b4:27:b8:12:be:0d:1f:40:
                    57:ba:65:1f:de:03:5a:33:d7:d5:d7:94:bf:50:5a:
                    c7:ed:4e:3e:45:1c:3d:39:81:f7:58:8b:27:16:fc:
                    09:c7:eb:7e:14:cf:29:7b:90:32:e7:1e:22:7d:f9:
                    cc:a9:53:72:e5:5f:d3:d4:42:89:f1:be:e2:a4:09:
                    6b:af:c5:ac:e9:82:7c:9e:68:21:be:6e:43:d1:fa:
                    93:d6:91:fa:d8:fa:eb:30:6f:22:41:d4:2c:90:b1:
                    2d:8a:6e:69:e3:27:5d:e9:b4:07:42:fd:d3:dd:71:
                    25:37:4c:65:6b:45:04:da:4c:d9:56:8b:39:35:c4:
                    b5:9f:5f:0f:5b:a2:21:98:93:88:fe:0a:31:03:3f:
                    79:06:f2:e3:96:a8:cb:e7:3c:18:85:d4:77:cc:c2:
                    12:25:e9:c1:9d:81:91:9d:2f:55:52:06:65:da:bf:
                    54:c0:4f:cb:2f:a9:fc:52:86:39:6d:22:a8:db:6e:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:89:67:39:36:D8:76:7B:5D:2E:3B:7D:54:B5:AA:8B:46:03:16:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:5f:2e:4d:7b:9d:db:86:a6:74:5a:30:b2:35:88:99:05:
         eb:e7:65:5e:81:32:ff:05:3a:2d:58:99:72:aa:d9:b3:df:b4:
         bb:99:05:f9:b2:94:31:83:1e:5d:71:d3:3a:a3:c4:3d:7d:fb:
         56:1b:a9:f6:f9:7f:cd:eb:cf:43:d7:02:d8:11:46:71:cf:06:
         80:62:f5:ab:44:3f:dd:53:be:c6:65:4b:bd:ad:7d:2a:bb:8d:
         77:ef:78:ca:f2:03:ef:76:50:8a:af:5e:12:44:60:66:27:8e:
         4f:b6:51:3f:ca:0f:36:71:ae:47:6b:f0:c0:f2:96:76:6b:cf:
         ad:ed:24:3b:cb:5c:d2:93:5a:54:b6:a5:b8:3f:c4:df:93:d0:
         f2:21:f3:17:2c:f9:59:3e:f0:68:1e:93:dc:7e:e8:52:7f:67:
         20:63:df:94:68:9d:e0:74:73:51:1d:63:d9:95:dc:a8:bb:0d:
         54:e9:c2:3f:0d:db:da:f7:55:c1:7a:0d:58:43:64:11:b7:e4:
         15:76:00:b6:e2:24:35:dc:67:33:79:d0:f2:11:ef:ce:03:e9:
         5d:8c:37:44:fc:2a:73:62:a2:9f:3a:bf:39:eb:41:ac:7b:69:
         89:b0:27:4b:45:03:2c:a1:19:72:9f:2c:04:b3:7e:45:86:e4:
         e1:43:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:40:19 2026 by rpki-client