Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
File:                     f15a33ca-7a2d-307f-98ec-5856967563b3.roa (raw, json)
Hash identifier:          b83oLiFeyBRVLjcoWQS4toFvfsfb17JIWrfqQl97Nek=
Subject key identifier:   CD:DB:10:AC:63:58:5C:01:92:C5:22:B6:B4:CB:5D:D5:30:09:EB:12
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584AECC14906D744A0035480E180
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     54574
IP address blocks:        65.49.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:49:06:d7:44:a0:03:54:80:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=990e54c6-de59-4d56-992f-c1161e0169e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:fe:a4:79:89:7b:9b:8b:f0:05:96:dc:7a:
                    89:b1:3b:62:d4:59:94:d4:02:15:36:cc:89:15:9c:
                    13:29:df:d4:e4:ed:26:9c:e7:93:dd:9e:ec:d5:fe:
                    7a:c6:23:ea:09:09:8d:66:66:84:8e:5e:6d:5a:b9:
                    1d:c0:21:a0:e2:8c:be:5d:a6:3c:40:de:af:8f:f9:
                    d0:06:20:7a:1d:43:c9:23:bc:cc:0a:ca:91:bf:45:
                    06:a8:49:3c:75:b9:ec:1b:f7:77:4d:c2:3a:a4:a1:
                    8f:21:2b:04:df:ed:62:9c:a7:ea:22:1b:24:c5:54:
                    86:6e:3f:21:8c:db:94:6b:8a:62:70:22:6e:aa:d8:
                    6b:b3:88:49:0f:89:28:36:d6:0b:c5:b2:3c:d7:16:
                    3c:2a:89:46:b7:b3:79:31:42:3d:e9:1f:9c:59:cd:
                    23:84:3d:92:2e:2f:a8:37:18:70:d7:3b:67:99:f1:
                    c5:43:69:aa:93:18:69:5b:2e:62:14:1f:96:0d:24:
                    04:c2:33:23:b3:a7:35:db:df:1a:a1:5e:ac:94:0e:
                    0f:28:86:10:ae:92:2c:4a:d3:70:bc:ac:3c:b3:bc:
                    e5:db:58:04:47:a5:6f:25:f9:b6:5d:78:c1:bd:f6:
                    f8:6f:c6:c2:52:c2:94:b2:40:9c:89:bb:e0:ea:41:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DB:10:AC:63:58:5C:01:92:C5:22:B6:B4:CB:5D:D5:30:09:EB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b6:bd:ab:fc:8c:80:e2:15:51:14:ca:69:00:0b:c3:54:ec:
         7c:08:42:b5:14:42:c0:94:58:de:0e:33:74:16:ba:de:e2:01:
         81:6f:96:19:73:4f:18:13:d0:fd:c8:91:ac:ed:dc:d4:2a:ec:
         52:27:5e:fe:56:24:56:b9:c9:a6:4c:29:65:99:a4:58:92:6a:
         4f:78:e2:4e:4c:9b:f0:c4:a5:c8:c0:38:da:5b:b6:bc:dc:8a:
         8b:21:2c:d5:5c:21:38:0b:84:d8:b5:66:0d:24:72:97:37:cd:
         c3:e9:85:64:1a:1a:18:d2:de:34:e9:e5:34:eb:83:e3:b5:b9:
         0e:0b:6a:d2:6f:4e:b6:6f:cd:37:82:d6:5d:89:78:c1:e1:47:
         23:2c:6e:ac:9a:87:ae:2e:ff:85:00:0f:e8:56:47:8f:c9:a4:
         bc:ce:01:57:3c:fb:c5:7a:ef:04:51:82:f2:5f:93:6e:4c:d5:
         a4:4f:ac:d9:76:be:14:aa:fd:84:38:b0:c6:8e:de:14:9e:2a:
         07:0e:18:3f:1b:da:1a:11:5d:ab:ee:96:e2:d5:92:e8:ee:47:
         82:e5:95:62:81:14:22:2d:99:33:7f:61:cb:d7:f3:ee:5c:8a:
         10:50:da:75:09:a8:b8:47:9a:14:b9:1c:e9:37:6c:b6:6b:60:
         19:d6:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:28:40 2025 by rpki-client