Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa
File:                     a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa (raw, json)
Hash identifier:          d/k+co69EME+UQVV2v6DDYvKei+GQ5OE+V8mJySgED8=
Subject key identifier:   31:30:EB:7B:35:99:FE:4A:5C:0F:37:9D:03:92:A9:4C:36:2B:64:AE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB2350C4CE1883C5BC500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     46491
IP address blocks:        65.49.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b2:35:0c:4c:e1:88:3c:5b:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=e4c3f953-5b69-4298-a454-ada020e1964d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:65:67:32:d6:d9:7d:41:c9:78:cf:75:c1:
                    2c:ca:df:16:3b:4f:27:86:c6:45:3a:b0:b2:2c:45:
                    53:15:c4:5e:83:6d:f4:4a:d7:dd:db:7e:c0:eb:00:
                    14:33:70:82:3d:64:d5:ad:50:ce:2c:35:1c:6a:3e:
                    ab:10:83:e3:4d:0a:6f:cf:1d:99:db:65:1e:50:5b:
                    09:1f:52:10:8f:bb:9d:e2:32:b9:26:b1:4d:57:1e:
                    01:0b:51:9b:83:51:fd:20:d1:b9:ed:5d:51:18:62:
                    69:8a:ba:11:de:fe:87:61:7e:ee:db:5e:af:f1:4e:
                    ff:3d:c7:0b:3a:b1:92:29:16:fa:c3:2b:12:d5:d4:
                    b7:2f:8d:62:4f:bd:cb:af:15:56:38:0b:1f:f0:d5:
                    19:eb:66:85:f3:9f:f5:5b:be:7e:f0:fb:9f:77:75:
                    97:18:98:59:6a:61:10:2a:21:77:11:de:c1:ed:aa:
                    9f:b2:0a:ef:94:df:54:a7:07:5c:a6:a6:46:0a:35:
                    50:ea:1a:36:ad:fa:07:44:f5:26:c7:8a:61:b5:f9:
                    1d:7c:1b:a2:57:0d:2f:67:33:2d:73:ed:8b:46:ba:
                    c4:f2:5d:68:7f:bb:91:e9:2e:10:23:6d:95:00:3e:
                    af:26:af:8e:d1:30:86:2a:26:c6:dc:f8:25:cb:1a:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:EB:7B:35:99:FE:4A:5C:0F:37:9D:03:92:A9:4C:36:2B:64:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:48:fe:e3:d1:dc:4f:a2:69:70:02:4b:02:61:23:13:f6:c0:
         d4:7f:5e:e7:a7:6e:cd:92:2b:13:b1:f3:ba:bb:6b:32:94:96:
         12:d2:1f:1e:08:ab:11:25:41:bc:92:5f:cd:f3:dc:26:72:19:
         ba:c1:f9:f8:32:1d:77:a2:81:35:dd:34:db:d3:78:16:75:dd:
         56:a4:22:85:5e:6a:07:17:dc:5a:e1:91:95:b3:d0:b2:19:ab:
         ec:d2:58:c0:b6:1e:bc:4a:73:c5:61:5e:32:ed:dc:42:66:68:
         c3:de:c1:25:28:b6:ba:e9:a9:d3:56:b1:05:fc:a2:9d:00:cf:
         37:ac:a8:a0:09:a7:26:bd:2f:a6:a5:12:83:ab:ea:71:83:8c:
         3a:97:62:f3:6f:1f:32:4a:d8:1d:44:50:71:f3:c0:c5:76:04:
         ab:a6:eb:3c:9e:85:dc:71:b6:ad:3d:a3:df:b2:2d:33:e5:9f:
         13:59:3e:12:af:d5:e1:f9:87:b6:52:75:74:cb:53:cd:08:55:
         fe:70:48:c9:6e:cd:c7:13:f2:51:3e:c8:60:73:d3:12:66:78:
         6e:ec:ed:9b:32:e5:9f:97:09:0c:44:4b:40:d9:d6:eb:27:2b:
         c9:8b:60:1e:89:d8:a9:50:a7:a4:d8:2a:29:9e:6d:4b:02:a2:
         ec:09:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:31:31 2025 by rpki-client