Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cac47292-6b0e-3312-879f-12aa496cc8e9.roa
File:                     cac47292-6b0e-3312-879f-12aa496cc8e9.roa (raw, json)
Hash identifier:          1sbWaqJOkxFKLwAwRXjUEk7CWTIKPfIUMuNrTQmVEA8=
Subject key identifier:   B4:82:B4:4F:31:4A:C7:A8:44:69:CB:84:99:8E:DD:8D:21:E1:10:41
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7BED4971133878BE78340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cac47292-6b0e-3312-879f-12aa496cc8e9.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     63186
IP address blocks:        184.105.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:be:d4:97:11:33:87:8b:e7:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=43810cdb-2cd5-495e-8cee-b49b6e08d0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:d6:7b:dd:83:fd:2f:7b:b6:2c:be:ae:8c:
                    d7:89:9b:7a:3e:83:96:7d:d8:7f:2c:b7:e3:a4:45:
                    a0:d2:9a:1f:b8:9d:4b:a0:93:5d:2a:30:50:b4:2a:
                    f0:7a:22:1e:5f:59:35:1a:57:7d:f4:ca:1a:86:56:
                    43:8e:30:3e:0a:9e:84:cc:03:b2:84:1e:16:c3:d7:
                    cf:48:09:5d:b2:ce:76:82:f6:7d:d4:2d:69:39:8d:
                    43:ab:27:b6:d4:dc:b5:5c:68:33:e6:56:bf:c6:ca:
                    d2:77:ab:1e:ac:71:01:16:54:2f:3e:6e:38:e4:d0:
                    f4:fe:c1:53:9e:36:69:81:5f:af:6e:49:71:11:ef:
                    80:a3:2a:9e:05:dc:43:aa:42:f2:e7:20:8e:29:5f:
                    e8:43:6b:37:53:e9:b8:02:d4:1c:5c:e8:32:16:62:
                    f4:78:17:51:30:20:8b:02:d1:d7:43:ff:10:ac:7b:
                    64:cd:24:fe:0d:26:82:1b:d3:f7:c2:f5:0d:f6:e0:
                    55:5b:0b:d2:45:b8:d0:be:8b:8e:86:33:b8:62:83:
                    d6:fb:7b:f4:4d:65:00:00:d9:71:da:86:2f:3a:82:
                    b4:1c:23:c8:33:ef:82:a2:5e:68:d5:a6:75:1b:fa:
                    de:84:32:be:3a:22:2b:08:09:b0:25:00:88:26:63:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:82:B4:4F:31:4A:C7:A8:44:69:CB:84:99:8E:DD:8D:21:E1:10:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cac47292-6b0e-3312-879f-12aa496cc8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a2:b5:3b:72:71:be:36:1e:11:b3:52:0d:7d:89:c7:b1:dd:
         34:9f:00:44:81:c1:2b:e9:43:75:26:91:a3:ff:bb:87:7d:8c:
         a8:e7:c7:14:ee:64:2c:36:89:20:82:42:d5:e0:12:a8:ed:33:
         e2:dd:79:1c:e1:7d:a8:d3:65:15:7c:c6:7c:91:98:d9:e8:99:
         22:59:17:d8:fb:61:de:76:89:3b:1a:cc:c7:15:cd:3c:17:d4:
         59:2a:db:c0:2f:96:50:81:7d:97:d3:eb:cf:60:10:5b:bd:bb:
         9a:8d:68:18:27:85:07:70:b9:86:8d:6b:c3:52:cc:d5:d5:ec:
         f1:10:15:ac:4f:1e:db:85:71:3b:36:3e:44:35:e3:c8:b6:fa:
         7e:b5:07:0e:8c:e6:5e:dd:31:ff:7c:87:fd:b6:14:b1:26:4b:
         f5:4a:e6:e9:bd:e9:25:47:ce:59:51:d2:5e:f3:4e:f3:45:ee:
         50:b4:2a:da:90:f7:70:59:94:ad:d9:8f:56:3b:11:f0:72:98:
         f4:95:3c:11:34:df:92:a2:46:ec:df:3b:0f:9f:cc:69:a3:9e:
         53:22:a2:f8:84:94:d0:0c:29:22:fe:29:df:2c:3b:ca:43:73:
         65:fe:08:6a:6a:65:84:f6:0f:75:f6:c4:a7:60:07:b2:e9:49:
         fa:88:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:24 2025 by rpki-client