Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa
File:                     77360824-da3b-363f-b777-38165a764b5a.roa (raw, json)
Hash identifier:          sRL7Pz3CcVcSIs9hgGIaiLLUQSsKh0/u0RGXihfT4Ow=
Subject key identifier:   5F:C6:5F:8C:01:67:19:9C:9F:EC:5B:2F:DD:6B:7D:1D:71:F8:25:B0
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B72C1F24B5366CA18562D6540
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     21433
IP address blocks:        170.248.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f2:4b:53:66:ca:18:56:2d:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=3b91362a-ab31-40de-8283-2fd5db8f489b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fe:85:2d:04:ae:f2:e3:d4:56:09:e6:f5:6d:
                    c1:9a:9f:1d:f0:3d:f4:c3:08:67:8c:92:4d:aa:8a:
                    01:62:c5:7e:02:f5:dd:90:a8:b4:5a:59:4f:df:7b:
                    3f:b0:c5:70:21:d0:ae:f7:74:56:56:57:86:5d:1b:
                    6a:5a:7e:c8:b1:08:f7:00:5c:86:9f:a4:f2:73:fc:
                    e7:db:5b:fa:a0:2f:2e:d8:c5:08:68:2d:3a:16:b0:
                    7b:49:12:ca:19:67:bc:9d:49:2a:68:a6:c4:36:93:
                    65:c0:eb:1a:98:a8:92:ed:ec:63:00:ac:0f:57:5d:
                    ee:22:7b:5c:ae:25:18:73:eb:07:a0:73:68:cd:0c:
                    d1:c9:1e:9b:67:d0:14:db:72:5d:c6:da:19:f0:d4:
                    a5:92:9f:ab:54:47:f4:cd:9e:b2:94:54:34:25:8b:
                    51:67:58:65:b1:ea:b7:5c:93:e4:05:91:bf:ae:52:
                    f8:60:3e:74:33:1a:42:e6:ab:2f:d7:e2:52:99:04:
                    af:66:86:2b:61:df:2a:64:bb:44:0c:ce:11:3b:74:
                    30:ce:ae:97:f7:ae:7c:06:fb:97:1f:c6:0f:38:3a:
                    ab:04:a9:1f:fa:6b:e5:fd:e0:9b:97:36:11:b5:8d:
                    32:c6:b0:50:76:40:a6:98:24:c9:3b:bd:a4:7f:5d:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C6:5F:8C:01:67:19:9C:9F:EC:5B:2F:DD:6B:7D:1D:71:F8:25:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:17:ff:8e:b7:83:15:96:92:92:c2:1e:56:55:93:83:7f:
         51:75:a6:60:97:a3:bb:65:cd:dd:67:a6:0a:d4:ad:2c:fd:39:
         88:5f:4e:8a:e5:c3:6c:46:ce:c8:48:98:77:b1:3a:82:14:49:
         17:41:ac:4f:e5:e2:f4:85:3c:eb:2e:8e:57:31:8f:67:b5:59:
         52:07:a0:31:95:cc:86:bb:88:28:f7:d6:a6:d1:c0:50:b7:a8:
         4c:33:dd:56:15:f9:5e:bf:46:28:54:a1:92:43:62:37:68:c7:
         4e:5a:64:1c:eb:c1:85:d4:37:22:a6:94:8d:a9:f8:02:2c:e9:
         61:ab:38:2d:3b:90:dd:29:ec:bd:87:26:03:9b:fa:f8:6a:2c:
         90:7a:42:fc:66:5e:f2:f1:6b:d1:92:a8:1e:4a:70:45:6c:7b:
         1e:82:e6:29:85:ec:0a:af:26:ba:cb:98:6a:b8:69:16:7d:d2:
         c6:5d:26:7e:52:4b:d3:60:d6:37:d9:b8:ca:32:8d:6c:f8:f9:
         21:bc:1e:8e:0d:7f:de:d0:b8:7f:6a:0e:58:d1:8f:c7:02:28:
         6e:71:98:a8:ec:32:2b:03:6d:2c:0c:0b:24:8d:a4:8f:39:d7:
         ad:b1:e5:af:3f:2b:e6:d0:e9:29:0f:e6:34:be:56:0c:c9:96:
         2a:68:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:51 2025 by rpki-client