Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa
File:                     31d11128-7316-3ee2-8bcd-d753890928ec.roa (raw, json)
Hash identifier:          hODFWWta5joUMIui3TDtmlzWhmEpHw153iQnPsWMH9M=
Subject key identifier:   EB:50:A3:CD:C0:D1:19:AE:B9:EB:5C:32:91:E7:1F:B5:E3:C3:88:07
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD15BE52B525B50D80FA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:15:be:52:b5:25:b5:0d:80:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=afd428fe-8f5e-48ab-abee-8dd2a18588c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:bf:88:2a:ee:af:d1:40:7f:9a:87:33:e8:
                    3b:c6:3a:27:04:df:ba:90:ce:be:ca:69:36:54:d7:
                    a4:ff:af:1f:e2:2e:74:a7:5e:41:73:3a:5a:68:ff:
                    b0:01:a4:2c:0d:7f:73:4b:65:d0:32:30:43:5c:ca:
                    9a:d1:be:e9:24:d1:91:11:35:bc:e9:02:18:a7:1f:
                    2a:7b:db:2e:5c:5d:21:e4:fb:7a:f9:38:54:e2:a7:
                    38:2d:f7:3a:87:ec:58:c9:50:ae:1b:d4:a6:dd:ac:
                    47:e8:96:90:0d:2c:51:bc:81:f0:30:62:0b:56:47:
                    73:ad:b0:98:a3:cb:c9:4f:14:fd:b1:a0:c7:5c:fe:
                    2b:e0:3e:f8:97:14:9a:c0:b8:21:d1:37:c0:7c:2c:
                    e2:1b:8f:ab:ec:86:92:be:9a:7e:87:0e:58:88:5b:
                    31:7a:4f:46:f3:62:ed:ff:fd:2f:a3:2b:ed:f3:e1:
                    84:58:de:af:d3:c1:6f:69:d7:bf:53:e6:1f:ab:2f:
                    cf:8e:ac:ee:a6:9c:e3:15:b8:31:c7:67:85:e4:a5:
                    3a:9e:e3:ad:b6:1d:a9:c8:7a:c8:2c:c7:d0:e0:f4:
                    de:4b:37:d7:7c:2a:f3:fd:c0:8e:3e:08:c4:0c:2b:
                    56:66:a0:c8:71:b4:f7:3d:ce:a1:b0:6f:9a:37:6e:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:50:A3:CD:C0:D1:19:AE:B9:EB:5C:32:91:E7:1F:B5:E3:C3:88:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:92:6a:cb:25:5e:3c:0c:4a:9f:fd:8a:22:d2:72:e6:aa:b5:
         e4:06:19:e7:74:d3:f8:18:04:9c:8b:ac:6b:ce:a4:9e:56:94:
         fc:42:f7:95:89:5e:7d:5d:96:d4:89:c3:e8:d8:4c:e7:42:df:
         a0:ba:56:39:59:62:57:89:9e:1b:6a:10:1d:6b:01:52:57:46:
         9f:a7:76:c6:a6:14:a9:a9:19:ed:f0:a7:24:e5:b3:9c:25:aa:
         1e:33:5a:95:fa:6b:26:90:74:f9:6b:13:d3:92:7a:e6:e2:c0:
         a6:d8:f9:bf:78:20:b2:1c:5f:67:2b:9b:30:3e:10:6b:77:2c:
         73:c4:97:cc:e6:c1:5a:18:a1:2e:73:cc:ac:92:95:1b:54:b4:
         44:b0:77:67:d2:88:5d:58:51:fe:d6:da:ce:d3:03:76:9b:8d:
         43:5b:24:79:4d:be:a8:bc:21:6c:f9:a1:75:5f:54:a6:ef:17:
         42:17:48:dc:c0:32:45:b1:64:36:89:78:a9:fa:95:72:bc:b6:
         a9:8d:1b:42:da:16:f4:15:71:54:08:33:ce:97:38:6d:02:d7:
         32:21:88:0e:87:58:e8:82:94:06:a6:f5:39:5d:1b:cc:f1:1f:
         26:b0:d0:ec:5b:82:ca:c9:11:e1:7d:cb:ae:28:83:85:0f:ee:
         b2:2a:33:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:30 2025 by rpki-client