Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b22e431-74bd-3f72-af55-5e16cf20744e.roa
File:                     4b22e431-74bd-3f72-af55-5e16cf20744e.roa (raw, json)
Hash identifier:          bsQ8tvyB/ZxG7S1bGQqTqoUtrdspUPyEU4d4KWEw0GQ=
Subject key identifier:   B8:35:17:E3:5C:46:5E:55:E4:4D:C9:06:EB:AE:F3:0D:EE:12:3C:EB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD45EEE4168678E246D2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b22e431-74bd-3f72-af55-5e16cf20744e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:45:ee:e4:16:86:78:e2:46:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ff0eadce-97cd-4829-99ea-b53c8351d2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:7f:cf:a6:94:98:4a:0d:ac:4e:92:3e:c6:
                    fb:d4:66:56:a2:46:d1:b9:6b:51:61:85:8e:8d:51:
                    62:bc:df:be:0b:1d:0a:c9:d4:a9:9e:0d:8d:96:39:
                    6b:cf:ec:b1:2f:ef:92:bf:8e:c6:2d:d4:31:84:09:
                    c0:dc:06:0c:d8:5b:08:9c:1d:03:43:a6:7e:55:a2:
                    b6:09:bf:69:5d:64:a8:a5:e3:6a:77:1a:77:f8:de:
                    e4:d9:09:24:59:46:2b:80:59:7e:10:db:85:f3:82:
                    21:5b:ba:f5:9e:fd:10:aa:84:32:d3:54:ba:de:ae:
                    8b:36:52:8e:17:97:fe:9e:e7:c1:80:c0:68:63:29:
                    89:a4:41:70:4e:17:e7:25:f8:22:11:6b:a5:71:dc:
                    fa:43:21:e6:16:13:0b:d3:52:60:ae:c4:ac:d2:7c:
                    72:2b:2d:8c:fd:25:16:b2:e4:27:b7:c3:3b:5b:35:
                    4c:82:f1:16:fe:e0:57:40:df:10:f9:ed:5c:93:f7:
                    85:1d:5f:c9:41:48:30:8c:37:e8:41:25:2b:4f:8d:
                    48:3b:eb:42:e7:b6:cd:65:37:13:f8:f0:22:13:c2:
                    15:b0:76:55:02:2f:d6:9e:e1:3d:91:5d:d0:d5:d4:
                    7c:62:f0:e7:01:f3:26:cb:d1:a2:26:2b:ee:c2:1d:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:35:17:E3:5C:46:5E:55:E4:4D:C9:06:EB:AE:F3:0D:EE:12:3C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b22e431-74bd-3f72-af55-5e16cf20744e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:e1:b9:b6:61:ba:c9:1c:a8:46:b5:2d:ed:20:fa:fe:0b:
         02:17:aa:af:4b:09:a6:f7:14:b5:ff:c5:d4:e2:70:a8:8c:8f:
         f6:85:f8:02:a5:2a:53:ac:9f:ac:d1:f8:50:d3:ad:a2:d0:63:
         a5:b7:9d:b5:33:62:44:ab:91:f3:ce:c2:14:e4:71:b7:96:14:
         48:5b:11:4a:9d:f2:a3:b9:2f:c2:dc:c2:95:76:d2:6b:12:22:
         5c:00:34:83:c7:bf:17:a6:29:05:aa:6e:0a:e9:77:09:f1:13:
         74:53:89:9b:6d:22:e8:31:39:e0:a1:85:11:cb:81:55:cd:f7:
         bd:ae:cb:61:94:11:91:ad:a9:91:6e:e2:ae:36:aa:bd:e0:1c:
         e6:d7:1a:49:b2:a2:dc:67:6b:e6:3e:1f:b8:35:d3:4d:c4:9d:
         30:e0:5f:4e:53:4f:fc:9e:ba:6f:60:55:db:fa:f2:91:45:3a:
         9c:66:d9:07:05:7f:99:8a:63:76:67:cc:1c:20:d2:12:00:0a:
         13:73:c0:1f:74:87:2b:be:bf:f1:f9:52:87:5e:3f:c8:c1:53:
         6f:1f:d8:f9:23:5f:a4:db:96:f1:b8:f2:23:40:e4:5e:23:54:
         5b:3b:cb:73:86:c6:77:03:a7:d8:9f:2b:c7:be:e6:44:12:cf:
         68:e5:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:57 2025 by rpki-client