Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/287efa53-45f2-367f-bdb8-1366c3c8c5c4.roa
File:                     287efa53-45f2-367f-bdb8-1366c3c8c5c4.roa (raw, json)
Hash identifier:          m/DKxHhTnR3LdmNi2eiNHMECTbSeGIQw63po/ONk/wk=
Subject key identifier:   BC:83:DB:22:76:89:00:47:3A:1C:63:5D:3E:A5:5E:9D:FA:E2:88:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD91B1177495A0278CFE60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/287efa53-45f2-367f-bdb8-1366c3c8c5c4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:91:b1:17:74:95:a0:27:8c:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a8b986c6-83b2-4049-b401-f86851bca6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:b3:fd:fd:72:a8:f2:28:66:bf:4c:84:e3:
                    39:8c:91:ba:12:bd:b6:68:99:08:ee:f0:01:76:8a:
                    75:9f:c1:34:a2:fb:2d:88:c6:55:54:e9:ce:fb:8d:
                    2e:69:19:8c:ed:6e:fd:a7:fa:73:88:7b:b3:0c:1a:
                    f7:5b:bb:d1:5d:c2:44:65:85:b4:d2:b7:df:1e:f5:
                    f4:e5:dd:e5:7a:07:a4:fb:13:ef:ee:97:93:76:eb:
                    d7:78:2e:f0:94:df:b0:cf:83:cb:2e:87:b3:49:e3:
                    36:08:00:7e:70:4a:d5:4d:ce:1b:5d:07:af:f8:df:
                    f7:9d:d9:66:ae:7a:58:34:05:c4:83:a1:03:37:0d:
                    6e:6c:bc:8c:30:c2:69:c0:d8:dc:e5:7d:14:c4:0c:
                    7e:0e:d6:2e:cf:dc:93:59:7a:f6:19:81:30:76:eb:
                    e5:a4:7a:bd:8a:ef:1f:5f:80:a9:d2:33:b8:58:e5:
                    5c:0c:b5:05:d0:8c:d0:ba:fd:64:28:52:44:b0:12:
                    89:1f:75:d8:b9:98:d9:81:0d:43:99:a3:85:cd:f1:
                    d2:2d:5b:35:56:bd:23:2e:ea:ca:79:d3:f9:a6:6c:
                    df:71:9c:21:08:97:dc:43:7f:89:9e:2e:b3:67:8b:
                    6a:8b:99:b0:e2:38:ca:44:9d:ea:7a:27:6c:3d:6e:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:83:DB:22:76:89:00:47:3A:1C:63:5D:3E:A5:5E:9D:FA:E2:88:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/287efa53-45f2-367f-bdb8-1366c3c8c5c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:bf:3a:00:73:6a:b9:d0:85:96:ff:97:18:85:99:ca:4f:5c:
         d9:05:f1:a7:0f:99:cc:25:61:ea:61:78:a6:e3:a9:ed:33:b3:
         62:8a:6f:ea:90:1d:61:69:d4:5d:19:2d:39:ab:a7:91:e4:52:
         a9:56:b0:44:0e:c3:f0:07:6b:2a:7f:fd:60:b5:21:ad:0b:90:
         e8:a0:49:52:1a:fa:53:66:ec:d5:36:5b:ad:6a:5a:48:16:43:
         90:c2:05:a7:f5:12:6a:fe:f5:04:9c:77:33:ca:b2:9c:a9:ca:
         d0:a1:64:f6:37:29:12:97:1d:fa:5e:ab:da:3a:22:21:0a:07:
         c5:4d:13:57:77:46:c8:eb:56:89:8d:7a:ef:0a:54:f9:49:fc:
         2f:a3:ff:ec:68:6c:24:26:f0:8a:63:d7:fb:c6:d9:f0:0f:a6:
         a5:70:83:e2:49:9a:73:f9:74:6d:57:1e:37:b2:71:0f:82:54:
         9d:6c:d4:87:1f:ff:0c:c4:e7:b2:1f:db:6a:63:cc:88:8d:d5:
         f6:c4:64:f9:7c:39:5a:e1:d1:b2:3a:e0:29:8f:1c:f8:b2:f6:
         5a:e1:da:f7:b2:cb:f7:df:ec:4f:95:51:62:ee:de:51:1e:ee:
         02:d2:93:0d:ef:27:e2:b1:29:19:95:46:4d:e0:6d:29:df:09:
         18:92:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:15 2025 by rpki-client