Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3035cad7-12b5-3d5b-a4f3-d66c0d1bd79e.roa
File:                     3035cad7-12b5-3d5b-a4f3-d66c0d1bd79e.roa (raw, json)
Hash identifier:          Bq4xBOdW6V5AM28+eulhJvqzmFfcwquj1i3bLKJ9dyg=
Subject key identifier:   4D:21:16:DD:54:63:0C:CD:B9:0C:90:51:80:0F:A5:D1:F6:F0:85:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD1248837AB449274ADD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3035cad7-12b5-3d5b-a4f3-d66c0d1bd79e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:12:48:83:7a:b4:49:27:4a:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1d2918f9-b681-469f-a1b6-addd584c74b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:af:fc:4b:20:d9:37:75:c6:94:95:01:3b:
                    5d:16:ea:33:8f:be:03:05:44:76:28:d4:a4:c6:bf:
                    3e:4f:c1:af:54:3f:c5:72:07:b2:bd:c0:3e:15:a8:
                    dd:c1:43:8b:2b:b4:02:60:4e:9d:4a:9d:5b:1d:e8:
                    57:fa:6e:ba:42:97:ed:f3:f8:45:c7:b5:38:c7:05:
                    78:c3:de:41:a6:e1:4b:f1:cb:7c:b6:60:4b:99:d9:
                    8c:ec:96:1a:80:ce:cc:91:e8:d7:f9:0c:e3:25:24:
                    79:11:fb:10:c8:95:57:04:26:6d:2c:c5:89:9f:98:
                    ef:c9:14:3f:75:d3:b0:ab:d4:5f:3d:76:15:6e:ac:
                    9e:39:19:48:90:8c:d5:36:24:c3:c5:f6:24:3c:bd:
                    39:61:6f:dd:ab:71:ec:7f:f1:9f:75:a2:f1:9b:ae:
                    ae:65:cd:22:4f:0d:c2:45:4b:39:1c:96:30:1d:e1:
                    57:ff:06:66:09:80:de:3a:d9:d5:7f:b6:d3:52:d8:
                    5b:d8:d1:dd:35:a3:a3:52:8a:8a:a3:16:f5:54:e4:
                    59:26:c4:7a:30:65:5d:d0:c6:2b:24:e3:81:0e:77:
                    bb:ee:85:39:a7:e2:66:d0:84:21:19:ee:c4:52:aa:
                    28:2e:4c:2a:7d:aa:d5:57:c2:87:3a:79:27:02:6a:
                    cc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:21:16:DD:54:63:0C:CD:B9:0C:90:51:80:0F:A5:D1:F6:F0:85:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3035cad7-12b5-3d5b-a4f3-d66c0d1bd79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:d6:94:2f:ae:1b:1b:0d:37:28:1f:55:37:ab:31:4d:7d:
         d2:73:d3:5e:59:83:1a:1d:b1:8a:ba:49:48:43:1d:ca:3f:b1:
         83:93:1a:98:6a:0a:db:9d:e9:c4:9d:54:ae:68:54:65:d2:67:
         ac:a4:01:be:a9:d1:84:35:66:5d:e5:25:cd:36:4a:92:1e:4f:
         43:39:ac:b4:52:f8:0f:88:f4:e5:d4:0b:b3:ef:4b:25:01:18:
         2a:2d:17:97:a5:09:ca:8d:a3:36:4e:49:61:da:28:82:f9:81:
         c9:72:f9:80:8b:79:92:af:7f:6c:0b:b3:57:43:25:35:ed:20:
         79:d1:c1:f6:07:1f:80:f4:02:82:6a:fc:19:91:d3:c4:78:ae:
         c1:ad:1f:a2:0f:e1:1b:b4:45:b6:f1:d2:33:3b:2e:93:7c:e0:
         c4:fa:d2:10:00:e8:e3:06:b0:12:c4:80:8c:bc:7d:49:75:cd:
         e1:e1:7f:65:20:a3:b7:05:38:a4:45:bc:ab:7c:08:e7:80:32:
         76:cc:06:2e:d6:a5:74:0d:f8:61:a2:82:25:ae:1c:f9:1a:e8:
         07:51:d7:5f:89:be:de:b8:e1:ef:f1:38:61:54:65:61:33:10:
         d3:78:3b:25:65:0b:9d:b4:b4:ae:c8:2d:7c:9d:69:9a:28:0e:
         7e:42:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:05 2025 by rpki-client