Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b4f866e-e28a-39a9-9c90-46be75ef1073.roa
File:                     3b4f866e-e28a-39a9-9c90-46be75ef1073.roa (raw, json)
Hash identifier:          sZ+Q5Xwn2zoiW7bL+OfYzNUwdQgJILqfsrA8Bnn0UwM=
Subject key identifier:   C8:F0:3A:B1:A7:A5:34:BB:3D:B7:F0:4B:AF:3E:C6:DA:91:9F:D6:65
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDFE32582974C60A8B1940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b4f866e-e28a-39a9-9c90-46be75ef1073.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:fe:32:58:29:74:c6:0a:8b:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e9b9cf20-3766-4086-bc21-6ce8eb2e5011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:d4:1a:a5:95:1a:4c:74:d2:fb:fe:cd:df:
                    2d:68:7b:47:fd:fa:98:e2:f7:40:33:e0:1d:55:92:
                    f2:86:6c:cf:bc:f1:f6:cb:5d:c6:cc:b7:d6:e1:90:
                    ce:0b:0b:d9:bf:33:a8:ed:5e:d9:a2:60:2a:81:ff:
                    59:81:41:70:84:f6:74:2b:83:d8:25:95:f4:d9:6c:
                    b5:0d:c9:58:32:36:dd:14:cb:26:87:df:aa:8a:69:
                    4d:31:16:32:c8:0d:17:af:75:aa:11:73:31:e4:17:
                    67:3e:52:dc:f9:5e:92:24:d3:5e:82:3c:90:ab:e0:
                    d0:df:83:1d:f6:a3:37:0e:89:43:40:35:34:70:c0:
                    85:1c:2c:0e:e6:15:dd:f9:0c:f1:c7:e8:82:18:e4:
                    c0:2a:0e:36:bf:e9:4b:67:49:66:09:65:18:87:c4:
                    3c:f7:23:68:8a:80:d4:99:54:66:87:8e:f7:4a:2c:
                    1c:35:82:53:ac:2b:77:6b:d7:a6:7c:32:84:80:1c:
                    1c:7a:76:6a:70:68:6d:98:06:cd:0d:53:8d:98:d2:
                    83:de:27:71:39:7c:4d:d2:73:2c:dc:a4:53:a2:92:
                    66:91:6e:28:e4:d0:bf:05:ed:82:38:d6:5d:8f:25:
                    78:01:fe:94:fb:58:d7:f5:2d:43:55:01:0d:df:72:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F0:3A:B1:A7:A5:34:BB:3D:B7:F0:4B:AF:3E:C6:DA:91:9F:D6:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b4f866e-e28a-39a9-9c90-46be75ef1073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:33:14:39:cb:26:54:9b:35:f9:51:68:29:af:07:3e:ba:
         6c:a4:67:ba:4d:6a:83:e9:06:eb:d9:9e:0f:51:c7:34:25:0b:
         34:06:ea:99:e7:b8:5e:26:28:db:d1:ed:a3:f5:83:f4:91:dc:
         6c:eb:93:23:ba:a7:45:ef:84:d5:c7:37:1e:b2:48:10:09:52:
         a4:21:46:8b:c4:e9:2c:27:ab:cf:9a:fb:e0:1a:7b:67:41:b4:
         e4:32:88:60:4c:1b:d5:74:21:ad:ab:bf:5c:eb:57:c9:8b:ff:
         1b:4f:b6:fd:fe:9f:26:07:27:00:7d:dc:8f:a0:5c:fa:f3:bb:
         f5:7e:b1:4d:17:3f:d2:b4:02:a9:7f:f8:cd:81:c5:47:5a:89:
         4c:19:af:c6:6c:6f:2d:ba:8b:33:5e:07:62:05:77:b5:f3:a3:
         f2:00:21:87:75:7c:c7:0d:40:6c:65:a7:0e:e2:04:5d:2c:6e:
         77:81:18:e0:54:2e:99:50:7b:6e:ca:5d:44:48:5c:05:05:a4:
         8e:bf:ad:43:43:66:19:28:62:fe:87:18:04:07:d9:2d:83:4b:
         97:53:8b:6a:29:c6:72:38:a0:a3:b9:4e:f6:8e:d6:72:e7:14:
         93:07:67:3c:90:0b:1a:9d:c1:90:29:42:a4:8a:20:cc:5b:ef:
         b5:97:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:01 2025 by rpki-client