Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f7a45dd-14a8-3344-bbf9-125d1647e043.roa
File:                     2f7a45dd-14a8-3344-bbf9-125d1647e043.roa (raw, json)
Hash identifier:          Dp+/ll+ngJpZ/JEBroA1lo5KKvi7ztIjYgsuvFIpPEQ=
Subject key identifier:   E6:61:67:0D:B4:3B:E7:85:1C:CF:15:7E:CF:62:B9:A1:7E:11:30:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDFCEAF09653DE171CE280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f7a45dd-14a8-3344-bbf9-125d1647e043.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:fc:ea:f0:96:53:de:17:1c:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7f0eeefe-3524-4c2f-b4a2-4ac22a9b60e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:67:cb:2a:81:92:86:b1:42:f9:91:3c:c8:
                    d8:9d:92:e3:51:21:91:cf:97:87:99:66:5b:04:ea:
                    2a:ab:db:88:10:4c:9b:9c:b8:85:d4:91:6b:45:e0:
                    85:54:3c:cf:97:8d:25:c4:ba:4a:ff:34:44:3f:36:
                    bb:82:b0:53:cf:76:e3:98:18:d7:a0:22:91:e7:0e:
                    c7:46:69:1d:94:f8:89:67:04:5a:0f:4d:1a:94:0c:
                    05:e9:1d:43:7d:36:cb:4c:a8:e0:9e:a2:91:90:14:
                    22:b5:8a:12:04:9f:38:19:3a:cb:13:a1:3a:d1:50:
                    bd:19:89:96:6f:27:71:49:77:3a:8d:31:8b:52:3c:
                    cb:07:6d:d8:e8:f9:18:cb:02:a3:ba:01:cf:65:a5:
                    11:1e:2f:20:b6:74:61:88:a2:e0:e6:4b:71:d3:1a:
                    b8:05:5e:aa:09:33:0d:a8:b2:6e:88:ca:e6:a6:67:
                    26:bd:71:49:73:4f:67:5d:34:a3:e9:fc:76:91:42:
                    48:8f:ec:b5:ca:b9:8e:22:85:85:01:62:3a:4b:57:
                    b4:5c:f4:3a:d4:8f:05:1d:30:fe:5e:42:53:7b:6d:
                    12:42:e5:12:12:d6:dc:09:7b:76:73:5c:1d:54:5a:
                    36:7d:f7:48:61:da:61:f8:58:3c:76:d0:ec:ec:55:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:61:67:0D:B4:3B:E7:85:1C:CF:15:7E:CF:62:B9:A1:7E:11:30:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f7a45dd-14a8-3344-bbf9-125d1647e043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:01:ae:e6:fd:28:e0:3f:79:23:d4:d9:20:07:ce:fb:f7:e7:
         c9:66:f4:cc:71:86:ba:b4:25:5a:ef:da:e3:f8:b6:37:d2:55:
         18:2f:8f:52:27:f4:2d:0b:32:06:e4:9d:77:0b:52:00:41:88:
         20:35:c2:d9:68:21:56:18:d7:57:d6:d6:54:ef:8e:57:35:f6:
         fd:cb:2e:0b:a3:30:46:d7:d2:03:02:80:85:b3:bd:cb:a5:b9:
         49:0e:0f:b4:97:c5:a4:de:1e:bd:4e:39:a2:8b:09:2b:1d:cc:
         50:d0:8b:ab:1b:39:ea:72:fd:97:05:de:87:3a:b1:55:ca:63:
         8f:4e:d2:15:80:3e:04:7a:cf:a9:e2:70:c2:ce:c4:ae:a8:a3:
         61:b8:5d:dd:49:34:89:69:e3:48:4c:f9:d9:2f:80:7d:ba:df:
         30:c0:c3:17:27:55:fc:05:35:98:db:d3:11:8e:95:2f:86:80:
         9c:ce:bc:21:f2:32:77:fc:27:29:ed:ee:11:eb:60:55:7f:5f:
         27:72:ba:3d:82:f2:f3:6b:40:b3:65:ff:63:1d:03:e3:68:f9:
         a4:b5:48:c6:24:df:ba:29:6b:11:bd:34:d8:ee:3a:ab:18:78:
         86:36:d6:74:ab:33:ac:2a:b4:c0:cc:6e:bc:a2:14:c4:85:f4:
         4a:26:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:58 2025 by rpki-client