Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00fdd59d-4cc0-392f-805d-9de220095a9b.roa
File:                     00fdd59d-4cc0-392f-805d-9de220095a9b.roa (raw, json)
Hash identifier:          hucIMuUpqdlPRHuLu6N8UPNYRWEadwBfYBaFdOj7drI=
Subject key identifier:   A3:47:7E:65:AE:5D:8C:A5:C2:4A:C3:19:97:B8:B1:FA:17:C6:ED:84
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD3F268DF1892A614F9380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00fdd59d-4cc0-392f-805d-9de220095a9b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:3f:26:8d:f1:89:2a:61:4f:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=330fc46f-3d56-4d67-87e9-a1891dd01a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:67:78:55:9e:e6:18:1c:b3:36:87:ee:1d:
                    11:71:12:a3:6d:4e:79:45:51:93:96:9e:eb:66:15:
                    d5:c2:dd:1f:61:e6:a0:94:ed:05:58:c6:6e:5e:dd:
                    53:36:45:12:9a:9e:ee:26:2c:32:65:d7:fe:9f:9b:
                    40:d1:be:5c:b8:1c:06:b1:7e:14:67:0c:b1:5b:b0:
                    59:8d:0f:e0:e3:72:06:c0:41:d6:c2:94:04:84:4b:
                    1d:04:43:23:03:3b:fe:e7:d9:13:66:3e:2f:74:9b:
                    64:82:1c:5b:0f:15:05:b2:a6:73:5f:77:a8:56:13:
                    c7:36:a5:ac:b8:19:a8:7a:d4:c2:e1:1a:2f:8a:2b:
                    db:4f:b1:ee:a0:96:5d:9d:4f:96:4b:bc:cd:45:43:
                    10:4e:bd:3d:a8:24:1a:0e:b8:be:32:c4:16:4a:06:
                    69:9f:13:d9:64:f5:ac:16:8f:ae:b6:84:a1:97:c6:
                    ee:e8:b4:9e:2e:5f:63:7f:a6:39:6d:50:ff:98:6b:
                    74:84:3b:eb:4c:79:3c:1c:9e:fb:10:10:c2:55:bf:
                    32:d3:01:0b:94:52:16:93:c0:22:72:48:69:da:da:
                    e1:fd:9e:71:93:42:e4:54:91:85:38:4a:8b:23:18:
                    45:29:59:ed:d8:78:b8:08:72:2a:ba:31:a4:d1:6d:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:47:7E:65:AE:5D:8C:A5:C2:4A:C3:19:97:B8:B1:FA:17:C6:ED:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00fdd59d-4cc0-392f-805d-9de220095a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:07:e1:d3:c7:47:fb:ce:b8:29:ed:dc:e7:6a:5a:ad:0c:72:
         3f:a6:3e:7c:5e:a1:a2:15:09:af:3e:23:c8:82:54:9f:f1:52:
         fc:ca:9b:1d:28:29:b6:87:ce:7d:99:16:bc:2a:63:69:29:7b:
         60:2c:3d:50:6d:73:45:a3:fb:53:57:d6:38:ef:b2:17:c4:d7:
         08:3d:ae:ba:17:b6:1e:2f:86:12:a6:c3:3b:3f:33:d3:81:47:
         cf:78:d8:59:9b:ed:76:67:18:a4:72:47:9f:8a:19:1d:a4:39:
         03:05:6c:76:c7:5f:58:3a:62:b8:e8:cb:32:5c:f4:9e:59:90:
         f3:8f:73:5a:4a:1a:2f:72:77:66:08:78:a6:b5:1b:e7:8e:c9:
         2d:7c:e3:99:fa:2e:2c:d3:cb:bd:62:eb:04:3c:e8:92:d7:41:
         2b:ed:91:77:ac:0d:7c:30:4a:2e:b6:e4:85:b4:d4:5e:5c:da:
         58:c9:3d:d5:64:bf:07:e8:58:4f:c4:45:78:ab:73:1f:2f:5c:
         d6:80:f7:67:79:7f:86:a3:d5:59:7c:59:46:d4:01:c2:03:9f:
         9b:24:92:6b:f7:36:7d:1a:09:c7:26:57:ac:d1:64:22:0b:96:
         c2:d1:ef:7a:24:6f:a3:81:0f:6e:45:dc:ad:f9:a2:ed:39:41:
         0f:21:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:36 2025 by rpki-client