Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa
File:                     5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa (raw, json)
Hash identifier:          xTsGNPRTxOkdbk5ggIcz0t8ollh13kDFRHeml1lqpjs=
Subject key identifier:   CF:51:73:17:6A:F5:08:CD:44:10:34:72:83:CD:88:86:5A:C3:B9:9C
Certificate issuer:       /CN=8be3c3cb-836c-410b-a9f9-d19be851c4c1
Certificate serial:       010D0C9F4328584B821CD495D04575E9064251A0
Authority key identifier: A8:5C:E4:3D:DC:8B:3F:16:48:9D:C9:FF:5A:47:72:10:25:DF:B0:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     7238
IP address blocks:        144.198.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d4:95:d0:45:75:e9:06:42:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8be3c3cb-836c-410b-a9f9-d19be851c4c1
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6ce123a1-4cf3-4b20-b580-d62e5379a400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:21:0d:c4:09:06:bb:5a:06:c0:1d:34:18:
                    5f:f9:71:32:aa:97:79:e8:23:f3:3e:bd:33:14:7c:
                    fa:5b:98:f6:08:68:64:9e:92:94:c4:b9:bc:2a:06:
                    41:02:e6:6a:a8:b6:e8:ca:89:1d:10:b4:cb:e7:34:
                    22:e2:98:fb:f5:67:24:fe:89:9f:5c:f3:73:54:a1:
                    7d:be:8a:69:8e:7e:e9:96:eb:92:cb:9c:a3:88:d1:
                    32:c0:f3:15:f2:ed:8e:07:44:55:1d:e3:46:1b:5a:
                    dd:4c:57:64:11:bb:cd:da:56:70:17:b7:3c:45:4d:
                    63:b8:2e:d9:5e:e2:f2:e2:dc:8e:e8:8e:bd:4b:96:
                    b8:24:a3:d8:a0:bc:d3:a3:ad:21:3a:db:fa:a2:e5:
                    58:4c:ac:56:96:e3:35:0d:72:03:b6:bd:59:bf:ea:
                    63:1a:57:f7:fa:3b:ac:24:49:30:13:aa:8d:f3:7f:
                    2c:6a:ce:57:25:44:f3:27:86:96:f9:14:27:b7:f7:
                    10:50:28:4e:b2:b5:5a:7c:91:eb:22:04:8a:6e:cf:
                    d6:e1:8c:b7:8c:a5:5e:95:1d:20:4c:9a:39:33:69:
                    7d:3f:c4:aa:f2:5b:4a:62:5c:62:28:0b:0f:81:db:
                    48:98:f8:dc:cb:6a:21:71:2a:e7:bd:62:fb:be:40:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:51:73:17:6A:F5:08:CD:44:10:34:72:83:CD:88:86:5A:C3:B9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.crl

            X509v3 Authority Key Identifier:
                keyid:A8:5C:E4:3D:DC:8B:3F:16:48:9D:C9:FF:5A:47:72:10:25:DF:B0:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.198.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ac:f0:a3:83:48:1e:e3:85:cd:62:92:65:26:72:63:dc:12:
         34:08:b6:5c:85:6a:fd:c3:ca:63:59:e4:15:70:9f:cc:ae:3b:
         f5:0f:87:c8:ed:fe:fe:61:a1:5c:da:ff:44:03:ef:aa:10:46:
         32:bc:88:4c:16:31:6d:c9:39:81:70:d6:3b:9c:69:d5:ab:34:
         1d:39:7c:48:71:ce:00:2b:e5:1f:75:77:3f:90:01:7a:04:62:
         40:df:be:de:a5:9a:ad:44:aa:3a:fb:01:68:0d:18:44:65:fd:
         6d:4c:0f:45:26:6c:74:52:12:7d:d0:7a:28:d6:bf:df:91:b7:
         47:1d:5a:63:bb:31:4b:05:c6:29:f6:cc:ce:cd:8b:18:fa:c2:
         c3:89:32:50:80:ac:04:4d:42:6c:cf:40:7f:d6:b6:4b:fa:bc:
         5b:16:10:00:70:09:7f:64:f8:60:88:de:f3:c0:cd:42:0e:b9:
         75:8f:5e:98:b5:82:23:5f:58:30:d6:7e:a6:9d:d5:d6:20:22:
         9e:c5:8e:2c:e9:d9:c5:01:aa:fe:0b:d2:72:ef:d2:c5:62:e0:
         80:8a:2d:6d:22:59:6b:91:6f:2e:7a:10:89:c4:ff:d1:7a:e6:
         f2:29:fd:d6:97:87:46:38:36:e5:50:e6:6e:c8:00:85:69:60:
         04:ac:e0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:51:39 2025 by rpki-client