Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e46bf68-6483-3311-a0c9-7695c9c56c7f.roa
File:                     0e46bf68-6483-3311-a0c9-7695c9c56c7f.roa (raw, json)
Hash identifier:          ozpD2Ye6p3jlIOg2pSIz5XmkHx+3sIVpFLr0k+j64y8=
Subject key identifier:   55:7E:8E:FB:D2:54:34:79:29:93:FC:61:95:7B:2B:0B:BB:ED:88:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD14A4F5F46120B33C5800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e46bf68-6483-3311-a0c9-7695c9c56c7f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:14:a4:f5:f4:61:20:b3:3c:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ae1db5c4-d966-4de0-b87b-9286d490518e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:30:af:fc:7e:6e:dd:22:95:01:de:c7:3b:
                    f8:1d:6b:c0:b6:3f:3c:cf:c2:84:8a:c1:44:6e:18:
                    9e:3b:bb:b0:f8:10:49:9a:4a:10:e1:a4:9e:f0:1a:
                    86:85:fa:85:ba:99:ba:f0:0a:49:72:c5:33:9c:64:
                    e8:ea:df:29:29:32:37:ca:2e:69:19:33:54:37:ed:
                    29:e3:b8:cf:ba:30:30:86:a3:e8:10:cd:5b:3d:c8:
                    cf:4b:e5:e8:80:2b:9b:05:75:1e:5b:81:db:ff:79:
                    f7:38:f4:15:c5:9b:ee:ac:80:17:9b:4d:c7:8c:6a:
                    30:5a:25:58:85:52:13:7f:58:99:ea:43:b6:7b:30:
                    58:a7:08:de:d1:be:4e:5c:bb:88:06:6c:65:b0:a3:
                    eb:65:fd:98:a0:cc:7e:90:0e:07:52:b4:bc:2c:12:
                    aa:0c:f3:55:7a:de:ad:d4:33:b0:ff:b6:e3:6f:4c:
                    27:93:04:3b:db:b1:26:e6:bc:f1:a2:13:8f:0d:ea:
                    9a:a2:6e:87:77:7b:74:d4:1a:2f:53:d7:35:41:51:
                    d1:3f:31:bc:f6:44:b5:ee:4a:7f:02:33:0c:7c:98:
                    4a:1d:5b:80:2a:c4:78:d3:8d:49:6e:d7:b0:a9:a3:
                    68:22:38:f6:f9:8d:ac:3f:75:8c:11:16:58:06:0a:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7E:8E:FB:D2:54:34:79:29:93:FC:61:95:7B:2B:0B:BB:ED:88:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e46bf68-6483-3311-a0c9-7695c9c56c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fb:67:d2:75:18:f9:d7:80:4c:57:7a:59:3a:42:fc:6d:a4:
         71:9d:a1:ee:09:a6:59:57:32:04:58:fc:5d:31:41:2a:c3:22:
         91:11:ef:42:2a:0a:5e:c2:bd:fe:5a:d8:f8:ec:bb:4e:bd:6b:
         c0:0d:75:28:d1:7d:7f:c1:ea:91:2e:d6:b7:90:fd:43:b7:e8:
         47:01:ce:5c:58:64:89:b2:0a:83:78:3e:e3:32:5c:a4:f3:54:
         91:9a:0d:15:24:23:56:0c:c1:69:d0:59:36:9c:94:df:1d:e1:
         6a:13:4c:79:a3:51:0d:47:6a:1f:e8:48:2e:75:43:aa:64:e8:
         48:a1:16:38:88:af:56:54:8b:12:37:2b:fa:74:d2:b7:46:2d:
         25:6f:2e:85:65:06:c9:e1:82:ea:27:ac:b0:10:01:2a:6c:8e:
         91:5c:be:1b:a6:1b:6b:df:75:df:f8:91:27:21:9d:52:da:4f:
         ea:97:73:91:dc:42:1e:1c:58:b4:64:c6:0e:17:42:8c:ee:7e:
         36:19:c3:b4:fb:76:87:0e:9b:f6:69:b9:4d:28:4c:5b:75:39:
         87:41:f3:c3:cf:88:99:5c:b5:20:cc:7b:fe:a8:dc:99:71:df:
         6c:af:9a:29:99:4f:9a:eb:10:9d:ad:3a:84:fa:ad:6b:c0:5b:
         15:a4:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:43 2025 by rpki-client