Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0adca433-3666-34fb-8f39-bac6eee85a74.roa
File:                     0adca433-3666-34fb-8f39-bac6eee85a74.roa (raw, json)
Hash identifier:          AkaZJ5KDyomi91gAsXE92gnmVstD9zWshtr3CUof1S4=
Subject key identifier:   FF:90:89:64:33:D0:16:D8:D6:E5:F2:48:0F:63:4B:06:F3:90:34:20
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD2E5D5097FBBD0B8DD700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0adca433-3666-34fb-8f39-bac6eee85a74.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:2e:5d:50:97:fb:bd:0b:8d:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=41838367-3b1b-4d8b-94ad-3d9c29de3246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:ed:88:37:03:91:58:f4:bb:34:ac:e0:28:
                    c9:62:d2:a6:0e:2c:c2:4e:cd:45:dc:6e:a9:a8:b0:
                    3c:02:76:5b:05:cf:88:c6:1a:40:11:50:b0:60:84:
                    7b:fa:ab:5f:b9:cf:9a:70:4b:a6:4d:12:7e:6a:45:
                    a2:9c:89:7f:7e:b2:91:29:62:3a:27:93:ba:7a:07:
                    a5:d4:2e:00:f4:78:f9:83:a3:99:0e:22:c3:d4:8d:
                    b3:ff:3d:15:c9:d3:77:a7:20:c9:b9:4d:70:99:4c:
                    e9:7b:60:90:08:58:20:49:bb:57:a1:65:ab:ed:4e:
                    aa:a3:85:52:ac:8d:1d:1e:7b:12:87:6b:a6:4f:db:
                    df:06:7b:bb:19:53:c5:5b:ac:d3:90:a6:6b:02:09:
                    fc:bd:fe:75:c6:a3:70:f9:52:45:98:d6:e7:c0:ce:
                    d9:0c:82:2a:d8:8d:32:6f:fc:a4:08:2d:57:6e:fa:
                    b7:64:eb:a1:12:7e:de:53:a2:68:d5:46:ec:d0:d9:
                    f1:3d:89:05:d4:3d:da:12:d0:60:83:77:30:ca:15:
                    a0:e1:e7:c2:ba:f5:d9:39:01:a2:c2:df:b3:aa:ae:
                    6e:2b:8c:eb:14:c1:5a:44:2d:c9:95:f6:07:0e:0f:
                    72:a2:02:95:a8:a2:96:fa:c3:8d:a4:30:b7:aa:e6:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:90:89:64:33:D0:16:D8:D6:E5:F2:48:0F:63:4B:06:F3:90:34:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0adca433-3666-34fb-8f39-bac6eee85a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:64:2c:b6:40:cb:db:87:4a:c1:4c:44:7b:eb:11:7f:3d:a3:
         c8:f3:72:34:9b:55:c4:e0:0b:b1:88:5c:a1:79:09:82:ab:2b:
         e9:fa:5a:cc:0f:d5:e5:12:81:78:8d:70:4e:d2:e2:43:a4:5d:
         57:6f:c7:08:9e:a1:62:d8:a6:e3:9e:09:ce:f7:ab:58:0b:c6:
         e0:31:b8:94:61:d6:56:31:ac:aa:60:9d:52:4f:b6:19:cb:a2:
         74:2d:9a:d0:f0:c1:4c:9d:4a:88:fe:b3:c3:78:72:6e:46:12:
         eb:81:ae:dc:c0:ee:78:dc:2a:93:5a:df:13:c0:c6:58:03:07:
         fa:3f:c7:c1:ba:2f:14:16:0e:52:29:dc:7a:56:0e:ed:e8:1c:
         8a:17:a9:fe:09:f8:23:17:19:66:1d:d7:f9:90:55:2a:83:38:
         71:f7:75:c9:34:51:36:8b:9b:02:28:22:c3:12:eb:da:3b:3e:
         92:17:a4:fd:1d:91:dd:3a:6a:36:d8:b7:1b:6b:26:a7:6c:b5:
         c9:59:f3:76:0c:12:41:e0:e4:ba:c7:fb:09:8d:44:aa:ba:ef:
         96:12:19:f3:72:78:e1:ae:31:a4:93:a6:c3:94:7e:a7:cc:d0:
         96:56:a9:e3:70:0a:7e:5d:cc:49:97:50:23:cb:38:55:5e:a4:
         f6:93:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:30 2025 by rpki-client