Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b0dd75a-5156-32ad-8c72-3272554d58ce.roa
File:                     0b0dd75a-5156-32ad-8c72-3272554d58ce.roa (raw, json)
Hash identifier:          qQ1n6ww1idL2SRHoR94WwCmirnug/3sr8It0GLOuvKM=
Subject key identifier:   60:E8:CA:1F:AD:C1:AE:0C:4D:64:53:EB:A3:57:B9:33:9A:90:AB:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD386EFC0F989B73F43000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b0dd75a-5156-32ad-8c72-3272554d58ce.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:38:6e:fc:0f:98:9b:73:f4:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6d39f6d9-2fcc-4a5e-946c-d303b35a749a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:3f:7e:0f:0a:38:aa:f9:8d:da:f2:04:1d:
                    d2:9d:c3:ce:db:75:00:9d:61:cf:1f:23:61:f2:fd:
                    64:80:96:da:76:60:2d:89:c0:53:13:d2:98:a2:06:
                    d8:c5:9e:19:54:95:82:77:52:94:f7:b4:e0:d1:e3:
                    06:f4:50:34:64:00:52:98:43:59:82:7f:29:0c:18:
                    3a:98:ee:d3:f7:0d:63:37:c5:a6:d8:85:d9:51:5c:
                    18:1f:c9:f7:88:4f:ae:56:d3:b3:18:12:1b:e7:0c:
                    e3:50:c9:18:66:d1:4d:ac:ce:3f:7d:2a:be:16:f1:
                    7c:71:48:61:8b:3e:89:9f:53:c0:e6:e5:ae:d0:0a:
                    dd:b0:8f:2d:22:91:36:d0:9d:ce:59:f3:31:82:03:
                    a4:62:c5:c6:40:e8:18:36:d1:72:45:86:36:bb:a5:
                    4d:bd:92:56:d3:91:03:aa:06:97:bf:5b:aa:ff:a3:
                    62:cd:ed:28:40:24:a8:8b:50:b6:10:60:e7:29:ac:
                    d6:09:a6:47:29:84:93:07:ff:3f:8b:00:f9:25:4a:
                    43:a9:44:f0:35:20:e5:a3:4f:57:36:17:cc:b5:f9:
                    44:34:17:71:99:da:23:38:af:5a:93:5c:49:b7:65:
                    3f:e4:0d:ff:28:3e:c3:95:8a:af:14:5f:87:df:cd:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:CA:1F:AD:C1:AE:0C:4D:64:53:EB:A3:57:B9:33:9A:90:AB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b0dd75a-5156-32ad-8c72-3272554d58ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:53:85:a6:7c:ff:6b:43:b9:3b:e3:5b:87:84:80:e4:e8:54:
         7d:dc:e9:7a:1d:4a:f5:52:c8:b1:c0:be:b8:65:d3:b1:49:7e:
         ab:f0:78:38:33:40:81:31:d1:19:81:71:1b:6e:6e:a3:d7:3b:
         57:df:c5:09:a3:d8:dd:1b:ef:bf:c7:d2:63:3a:5d:90:91:89:
         5a:b7:ac:9d:a8:96:84:f0:ee:ac:f3:01:83:3c:0d:d8:3b:4b:
         92:91:33:c2:11:69:9d:4f:5d:12:33:7a:95:6b:49:31:b9:74:
         01:ab:04:7b:02:20:34:24:95:17:eb:0b:82:9e:87:0d:86:8e:
         16:51:2f:4b:2b:ac:cf:fc:59:fc:ef:75:a7:83:51:4d:ee:3a:
         3a:5c:48:ce:93:2e:22:05:0c:5a:1a:94:35:a3:32:bb:da:ab:
         6a:4d:21:d1:d6:9a:43:a9:f8:52:57:59:ed:df:9a:03:77:a0:
         cc:8d:0b:77:6b:5f:3d:6e:e5:21:bd:e5:7b:f6:10:be:45:18:
         1c:3b:e1:d8:30:74:b5:bc:8c:fd:f5:6f:47:b1:72:2b:32:ce:
         fb:92:2d:00:c7:9e:16:6e:32:83:7e:c8:f8:aa:2b:42:47:59:
         0f:01:d5:08:4f:65:9d:da:4f:ad:15:c1:3f:0c:44:2a:dc:6c:
         f6:19:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:14 2025 by rpki-client