Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/324bd125-167d-32cd-9347-f993a6369d4d.roa
File:                     324bd125-167d-32cd-9347-f993a6369d4d.roa (raw, json)
Hash identifier:          ZeQH49HiHaDMdZriEv1KJ9K52RKPuACQO4Yblvxr4CQ=
Subject key identifier:   D5:9A:58:98:82:C6:8F:57:FC:C7:B7:7C:3E:91:AC:DC:BF:E9:B6:42
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDFDAD056834083BC3D080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/324bd125-167d-32cd-9347-f993a6369d4d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:fd:ad:05:68:34:08:3b:c3:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9c9d000e-6aa5-4577-ab2a-851098de77c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:00:c3:6f:d1:d7:36:52:ee:23:d9:7c:de:
                    2f:77:89:af:5f:65:d2:d1:93:b0:ae:e8:4c:fa:17:
                    1d:8f:69:19:e0:2d:ab:13:36:93:bc:c1:a1:d7:88:
                    d0:af:97:fd:91:00:b4:22:2b:4d:00:1f:b3:45:cf:
                    b5:8d:11:86:ed:2a:fc:13:00:a9:4b:c1:8e:fa:9f:
                    61:19:7f:80:a1:c2:d4:54:04:19:ae:a7:d7:11:19:
                    e3:01:d8:03:e5:61:f7:4a:86:33:bd:d8:1a:46:61:
                    29:6e:7b:43:63:e5:e9:65:58:d4:5d:83:3a:d4:51:
                    e8:77:03:ae:eb:98:c7:07:52:46:8c:fa:9b:8f:53:
                    7a:21:76:02:fc:98:fc:bd:a7:08:5c:2c:e7:72:c7:
                    5d:ab:9c:e8:63:c9:4a:77:26:ec:5b:d0:14:dc:07:
                    b4:02:2d:7f:d3:47:4e:d8:dd:91:09:7a:36:7a:8a:
                    4a:87:a3:67:e2:1c:5c:ca:08:95:51:f9:da:f5:78:
                    32:ee:ef:3c:76:8c:d2:a4:bd:fb:29:67:43:c9:9a:
                    0d:b4:72:69:54:85:d9:f3:2c:83:aa:6f:7f:3f:65:
                    65:54:28:d7:79:a9:fa:5f:3a:df:43:97:19:72:08:
                    73:96:21:b3:05:73:d1:49:4f:ae:7f:40:4c:63:2a:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9A:58:98:82:C6:8F:57:FC:C7:B7:7C:3E:91:AC:DC:BF:E9:B6:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/324bd125-167d-32cd-9347-f993a6369d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:95:82:74:92:59:a7:57:28:8f:9a:52:c0:36:d1:94:32:6a:
         f6:ef:22:ac:3f:9f:16:19:ed:1a:d2:30:3c:0a:1f:4c:5b:db:
         80:96:b0:98:1c:6b:9f:6a:c7:2e:fd:18:9c:28:bf:25:5c:44:
         ad:80:d0:67:59:85:cb:a1:f0:4d:f4:6f:56:b2:28:52:f6:44:
         c3:36:9f:72:cf:22:d0:82:59:ae:e3:f0:39:1a:6e:68:fb:27:
         c3:c7:51:fc:36:42:55:a6:0a:44:97:30:ce:7b:81:9f:07:94:
         0b:82:db:db:58:5d:07:78:52:37:d9:bc:92:32:c7:ab:fb:7c:
         26:03:25:60:9e:97:78:70:3b:68:0d:77:d6:2b:46:72:6a:30:
         da:99:c1:52:15:3e:27:26:ac:ed:17:65:bf:fb:ee:48:94:d9:
         e0:53:45:b2:4e:32:82:c8:a5:6f:62:a3:5f:cb:a5:6d:62:47:
         e5:df:dd:39:2b:06:ec:c0:12:aa:2d:c3:e9:ea:ca:03:c8:d8:
         f0:36:4c:de:88:af:b6:a6:75:1f:9f:13:f1:63:66:3e:b3:63:
         7e:87:df:2a:bc:a9:3e:3f:eb:7e:0c:79:3d:49:3d:db:5d:75:
         9d:65:6f:ae:0d:6a:8b:ff:11:bf:e7:19:57:a1:c7:7f:58:f8:
         80:53:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:17 2025 by rpki-client