Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c612045-db9e-3173-a144-1b3346db1c06.roa
File:                     0c612045-db9e-3173-a144-1b3346db1c06.roa (raw, json)
Hash identifier:          NJ3KFHlKRIaA/6vEP3n6p2ZDIXiI/8jKMs+cPrB/8OQ=
Subject key identifier:   65:F6:1D:2D:47:CF:9B:97:35:7E:82:D0:5A:3E:CF:62:DD:72:6F:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE0137EAA8F8EA888135E8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c612045-db9e-3173-a144-1b3346db1c06.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:01:37:ea:a8:f8:ea:88:81:35:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2bbbcc55-3799-4d20-9177-168dfa24679b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:84:f7:6a:71:2a:6f:05:c1:6b:a1:e2:f8:
                    3d:3f:53:6e:92:97:2c:a5:9c:01:11:f6:b0:c7:73:
                    59:68:59:2d:26:ff:62:f2:d7:70:6b:6c:b6:a3:c1:
                    85:90:27:a2:bb:68:a8:ab:2b:f3:89:3b:a0:11:4d:
                    cf:6d:21:21:26:f4:26:b8:f6:c2:a7:28:be:13:e7:
                    19:45:e7:09:c6:8a:e1:fe:20:fa:5a:8c:cc:9d:7a:
                    af:59:e5:e7:d9:5f:16:d1:9b:26:f2:fc:9f:53:77:
                    c8:1d:27:21:d6:df:f2:d2:07:a9:0f:d5:83:f7:fb:
                    34:b5:46:79:0c:62:6b:47:05:2c:97:9b:b8:6d:cb:
                    b2:b2:62:f2:15:c0:58:b7:b2:5b:32:28:22:07:bf:
                    43:62:7a:52:26:75:90:2e:98:3f:f1:12:9c:fd:11:
                    12:89:e4:97:50:9c:b9:e2:bc:e5:ac:8a:55:60:da:
                    29:de:9d:d3:e7:aa:c4:0d:0f:61:51:55:df:a7:52:
                    89:61:39:81:01:b2:86:01:2b:70:ab:77:31:e6:2c:
                    52:9a:80:e4:6c:05:33:54:78:3f:98:c2:39:e0:35:
                    41:e6:cc:3c:5a:58:50:91:fd:89:23:04:88:6a:cc:
                    da:a7:eb:04:15:c2:f5:8d:b9:d4:b5:be:67:b0:b2:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F6:1D:2D:47:CF:9B:97:35:7E:82:D0:5A:3E:CF:62:DD:72:6F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c612045-db9e-3173-a144-1b3346db1c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c5:c4:98:8c:56:1c:6f:67:fb:ba:b4:eb:7f:aa:c9:61:a6:
         96:5a:98:17:e5:d7:48:2b:55:2f:8c:74:5d:ea:87:c1:a5:9f:
         ec:e5:f1:ce:8c:77:a9:eb:03:93:fa:2b:14:a8:0c:4b:5c:95:
         a4:85:36:2b:9d:6c:da:77:43:a7:cd:19:43:87:49:eb:32:d1:
         92:47:03:ca:a1:d0:95:ff:09:d2:d7:e3:7d:ff:4b:84:b5:ad:
         11:37:de:bf:1b:6f:84:6a:0e:87:b0:6e:9a:c4:81:05:fd:c5:
         2f:e4:77:83:b1:6c:f4:35:70:4c:0b:02:5e:6c:bc:18:e2:a6:
         66:3a:21:94:2d:b7:d1:50:20:ba:50:45:fb:b0:92:af:86:83:
         b1:c6:c6:5e:74:2e:09:2a:1d:e3:a8:76:e8:c7:cc:79:94:2e:
         ef:c7:99:70:91:b0:76:c4:35:c0:a6:ab:54:27:18:f5:59:d3:
         04:fe:9f:91:a7:ec:70:66:68:59:6a:56:3b:9b:50:0e:0f:f3:
         c2:bc:c4:5c:d2:c6:21:ac:b9:fd:e7:6d:41:49:77:bc:d4:ab:
         1d:e7:66:4c:7a:79:14:ba:c0:c4:43:98:5a:c9:bf:d8:e3:0c:
         e4:3d:85:97:a8:65:45:ba:00:f0:ed:71:7e:11:ba:21:9c:dc:
         ee:bc:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:01 2025 by rpki-client