Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa
File:                     4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa (raw, json)
Hash identifier:          dV+ogT7prJloAv2pqB+JxeuF/mJi9oDlsDkA+vL2sd4=
Subject key identifier:   21:4B:BB:E9:27:0E:25:1E:11:44:8A:44:67:B2:63:9B:4F:75:CC:1A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD714FA3FCF77DFD011C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d7:14:fa:3f:cf:77:df:d0:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b761398d-4552-42b5-8eff-bb8974c8b65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:7f:ec:19:24:48:d9:c3:f0:fa:d2:08:c6:
                    07:c6:3f:7f:86:a0:c0:05:03:e4:54:0c:a7:7b:ff:
                    33:ac:e5:fc:38:a3:a6:b6:43:c7:38:cc:8a:eb:d8:
                    44:87:1d:61:f6:62:d1:f1:fd:a3:d6:81:3f:6f:8b:
                    1e:5d:e7:4d:cf:aa:98:89:92:ba:83:f7:aa:56:08:
                    2b:03:80:94:b8:ed:8c:60:df:de:92:6f:fe:64:27:
                    55:6d:93:61:8d:0c:1d:75:50:e1:bb:7f:af:9b:10:
                    f7:31:f7:8e:dd:8d:d8:dd:eb:08:65:34:29:0f:1d:
                    b4:06:7e:b7:f5:0b:84:17:20:62:05:d4:d6:32:e2:
                    19:83:38:4c:41:93:5a:65:e1:17:04:d4:65:ef:d7:
                    a6:b6:a1:5f:2a:6e:4d:f6:4f:39:d9:f2:dc:57:26:
                    39:96:ca:a5:73:12:f9:ce:1f:3a:4c:9f:58:4f:da:
                    5e:20:d2:b1:b5:e5:22:26:a0:68:74:27:cc:62:13:
                    7d:05:a8:2d:a5:a1:bc:7e:12:33:d6:86:88:e5:21:
                    62:1f:d8:fa:68:1c:c6:f9:da:35:26:21:7b:f3:22:
                    07:bf:96:b2:92:2a:84:55:c2:1a:7f:14:90:37:33:
                    02:f0:ed:75:9a:a5:60:83:f8:1b:94:e2:d5:c0:f1:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4B:BB:E9:27:0E:25:1E:11:44:8A:44:67:B2:63:9B:4F:75:CC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:ce:46:bc:c4:1e:b5:67:62:e3:d9:04:8b:fa:cf:38:15:
         d2:32:6b:10:0a:d3:23:df:69:01:06:be:70:b7:df:d6:d1:29:
         8f:13:ad:0d:87:74:e4:f3:69:f7:a8:81:53:75:65:9a:3d:f1:
         0e:94:ff:90:04:a9:94:be:0d:0a:a5:2c:bc:bd:ea:09:bc:e0:
         87:04:35:df:66:97:ec:b6:c6:98:ee:bc:86:e2:81:ca:3c:82:
         ae:68:3f:3b:b5:ed:e1:7c:f1:5a:dd:48:cd:f2:5e:cb:2c:66:
         de:ef:b4:4e:2a:6d:7a:d1:4d:74:16:5d:71:7d:74:52:6a:4a:
         48:ec:2f:33:8b:fb:1a:03:bd:17:5b:99:e5:1e:42:7e:f3:61:
         42:c1:49:66:74:18:b2:ff:f5:e5:9d:5d:7b:fd:62:08:18:78:
         2f:07:90:5b:ae:ee:84:9b:0b:07:a8:00:22:ce:bc:9d:56:a2:
         19:3a:de:07:3c:28:fd:fb:d2:fd:a6:4d:36:fe:45:ae:95:db:
         c3:12:f1:05:3a:8c:0c:3c:81:aa:26:fa:4c:99:8c:f0:be:86:
         5d:fb:4b:8e:eb:b6:e4:10:58:56:77:ba:dd:70:b4:d6:b2:70:
         51:3e:38:15:6c:ed:21:aa:fd:35:8d:f9:38:91:bb:d5:85:be:
         cc:ff:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:09 2025 by rpki-client