Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4712731b-d7ed-354c-805b-1d1f8834ddb2.roa
File:                     4712731b-d7ed-354c-805b-1d1f8834ddb2.roa (raw, json)
Hash identifier:          Ty4UrTtTvj8m3x6LybOb35KGackAoNgoBi9lr6f/cLc=
Subject key identifier:   03:64:0A:0C:87:78:CC:18:AB:0F:21:A0:B8:89:4F:66:DF:5A:DD:06
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD5B9BED1626CA685E400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4712731b-d7ed-354c-805b-1d1f8834ddb2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d5:b9:be:d1:62:6c:a6:85:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9eedf202-5eaa-4704-bb26-6c8edb916bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:5f:ab:68:6c:fe:de:93:93:47:0b:62:78:
                    77:af:57:92:f2:7c:02:a3:5b:29:73:47:5c:a7:55:
                    1a:25:93:18:da:37:9d:9d:de:fe:dc:b9:2b:64:0f:
                    e6:34:2d:c7:41:2b:c7:cb:4f:88:ca:fc:1f:0b:70:
                    cf:f4:3d:78:7f:4a:7d:a1:ed:fc:d0:58:42:13:e4:
                    34:ba:67:8f:fb:9f:11:66:94:29:69:d0:b7:5f:bb:
                    69:d4:0f:5e:da:38:ab:41:ed:c7:1b:8e:9e:21:d9:
                    7f:e0:29:39:c8:e6:3b:c6:bc:4a:5b:5a:80:65:00:
                    80:2b:87:35:6d:be:27:6b:2a:02:20:20:38:81:72:
                    55:ca:73:60:0c:25:c6:93:29:aa:31:61:4e:03:e9:
                    15:23:25:f3:72:ac:5f:fe:2b:13:a1:5e:ea:3c:0f:
                    8f:f7:35:30:4b:79:74:dd:b4:3e:5b:92:ad:d8:1b:
                    21:77:63:2e:d7:84:60:e1:73:ad:d2:5d:ec:f0:6c:
                    b6:8f:20:fb:b1:9c:57:9d:04:06:3d:39:52:db:60:
                    6d:4a:09:51:07:12:b2:c8:01:0e:9d:46:3a:de:73:
                    d5:35:17:c2:0d:0b:7b:49:71:c5:57:c3:46:4e:9d:
                    3d:da:2b:70:07:61:be:8a:a9:4d:78:cb:8a:d5:ef:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:64:0A:0C:87:78:CC:18:AB:0F:21:A0:B8:89:4F:66:DF:5A:DD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4712731b-d7ed-354c-805b-1d1f8834ddb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:51:89:ec:f0:62:d3:da:e3:07:4c:9e:02:ad:82:46:7c:49:
         61:33:0a:35:db:26:94:6f:23:bf:42:97:1f:60:10:c2:1e:14:
         04:5f:5f:98:c6:9c:93:c3:a6:92:e3:0f:a6:ed:72:49:21:48:
         07:50:17:ac:6c:c7:6f:2f:24:64:ac:3e:a5:48:c0:b2:c4:4d:
         29:6b:71:1b:d7:28:36:d6:77:ce:40:9d:8c:a7:4b:0e:1f:fd:
         21:38:17:81:8d:ec:38:0f:30:47:dc:58:e8:9c:83:a1:87:0b:
         da:ef:45:cb:78:9c:2d:7a:15:2e:9d:07:07:10:84:be:84:84:
         d8:a0:bc:c5:da:fd:6e:11:9f:ee:ab:fa:46:f2:a3:88:f1:e2:
         5d:e9:5c:f1:a1:54:15:f8:d0:25:62:f1:4a:f0:f7:e6:6b:26:
         91:74:c7:6d:9a:d2:63:de:c1:df:15:0c:3d:ae:ff:92:8b:c5:
         24:d3:f3:2a:8f:9a:b6:7e:6b:c6:62:5f:b7:e3:d0:d0:ec:5a:
         df:a4:2e:4a:37:00:33:0f:39:0a:24:77:7d:6c:59:0b:54:19:
         26:79:cf:ab:67:f7:24:bb:65:95:35:46:bd:3b:57:ad:1c:9f:
         fb:f4:ef:b4:8f:27:c0:9f:8f:8b:55:56:69:d6:20:6e:c3:eb:
         be:c6:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:21 2025 by rpki-client