Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26556656-8f9a-3ac7-aff0-5a48edecdc77.roa
File:                     26556656-8f9a-3ac7-aff0-5a48edecdc77.roa (raw, json)
Hash identifier:          LNLGu3yLcxsWuiXaas64i3yr7lg8Sa6KsX05sI9EZ3Y=
Subject key identifier:   2F:CE:45:B5:9D:4E:F0:BA:BA:D2:CF:4C:A0:82:41:38:FA:D4:24:15
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDEBCDAB7C40E6AAA6E400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26556656-8f9a-3ac7-aff0-5a48edecdc77.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:eb:cd:ab:7c:40:e6:aa:a6:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=92340de5-be36-4b29-ae98-8f3bbf1dbdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d6:48:a6:3c:12:6d:a2:a4:b9:e8:a4:2a:a6:
                    a2:62:2d:63:de:8f:80:1d:02:23:63:76:f5:06:1c:
                    e9:11:98:30:58:3e:c3:db:f1:e3:9d:e5:03:97:5f:
                    79:b7:5d:39:5a:71:28:63:16:88:b8:2e:43:c6:11:
                    f9:5c:0d:be:b2:6b:49:7e:dc:78:7f:39:48:7b:1f:
                    e2:89:19:64:03:02:55:07:00:57:8c:e4:ac:d5:a1:
                    ab:bd:d2:cf:58:ca:0d:74:0a:ee:37:7c:62:a5:c8:
                    72:77:27:75:90:de:77:09:f4:b1:95:a4:b0:6a:39:
                    67:25:cb:58:c4:1c:ed:a1:5e:6d:60:bb:80:34:0d:
                    07:5c:46:41:b9:c0:ef:2e:0a:32:12:28:1b:05:4e:
                    25:fd:ff:d5:59:81:23:69:d1:b0:74:e1:29:11:59:
                    e0:3d:8f:d1:cc:b5:2f:db:59:5a:1a:25:61:32:ab:
                    df:b0:c0:d1:1f:d1:52:cc:a7:69:81:39:bf:61:c5:
                    62:9f:f3:ff:6c:4d:2b:2e:f9:29:dc:22:30:e0:31:
                    55:04:29:b3:7f:e7:0b:45:a2:3e:47:64:da:f8:2d:
                    28:03:3a:da:42:3b:21:95:9c:ad:9f:8d:db:6c:d9:
                    49:f0:5e:53:e7:de:67:26:48:e2:29:68:cf:49:4c:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CE:45:B5:9D:4E:F0:BA:BA:D2:CF:4C:A0:82:41:38:FA:D4:24:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26556656-8f9a-3ac7-aff0-5a48edecdc77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:01:1f:85:af:5b:88:4c:6e:bc:40:9c:da:8d:9a:81:8e:f8:
         45:b9:1e:8e:55:7a:6e:28:90:1a:fa:d4:32:1c:f2:07:58:0c:
         96:08:55:1e:b1:b8:54:db:9d:d0:6a:bc:92:37:7d:ea:c1:f3:
         85:4c:ad:f7:45:3f:8b:e6:34:4f:3b:dd:6f:23:41:a9:1a:1a:
         14:7c:74:a9:9b:ad:45:62:64:54:df:b5:f8:21:3c:6f:2f:98:
         51:90:3e:aa:5b:e2:6a:e1:2a:d7:24:03:d6:5c:8e:ae:d5:25:
         30:94:69:7d:a1:64:05:2d:39:d8:4e:3e:ee:df:50:2c:c1:c6:
         75:15:12:f0:f2:46:9c:45:5c:85:70:4f:78:4b:cf:71:4f:91:
         94:01:ee:1e:a8:d8:a4:82:f9:f8:d5:72:6b:7b:cb:d9:d1:c7:
         93:7c:e8:7c:cd:2e:1c:8a:aa:b6:35:f2:58:18:87:43:43:6f:
         5e:e7:3f:0a:5a:c8:01:1d:37:df:a6:ee:ff:39:ea:07:9b:27:
         1a:51:c4:92:7a:7e:7d:fb:fc:b3:c6:e3:5c:59:a1:16:7a:a5:
         d9:63:56:95:b3:71:f5:65:3f:1e:79:8a:34:dd:91:7b:b2:33:
         e0:54:6d:9a:13:00:87:ca:31:d7:e0:0b:87:f2:ef:21:ea:a8:
         9f:fa:4f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:43:10 2025 by rpki-client