Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50b8efe7-8ba3-3e74-8741-2fc38c5b5602.roa
File:                     50b8efe7-8ba3-3e74-8741-2fc38c5b5602.roa (raw, json)
Hash identifier:          A/1du7JoDkw9/bLdDr7SlEQLlSV4Htjq9twyJA81wp8=
Subject key identifier:   A4:15:48:11:2B:D9:0F:5C:9B:24:5B:06:2A:79:26:3E:7C:09:4B:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDCF4CFFAFF7B472D78900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50b8efe7-8ba3-3e74-8741-2fc38c5b5602.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:cf:4c:ff:af:f7:b4:72:d7:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=77111b4a-6bcc-4124-be6e-9e456e416e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:72:c6:ef:d5:25:93:72:93:ae:0e:6d:2a:2d:
                    37:ec:4e:db:a6:58:a6:04:dc:b9:0a:85:76:a2:54:
                    38:bc:83:c0:30:90:2f:4c:96:34:c6:17:af:fe:0d:
                    47:a9:e6:3c:3c:79:4c:30:da:81:6c:c1:bb:00:9d:
                    45:80:a2:13:4c:b3:0a:bd:8b:26:9a:f5:1a:6d:75:
                    46:06:dc:21:00:f0:93:f4:86:e8:be:e5:b3:c0:09:
                    ff:48:4e:af:85:e7:3e:a6:99:91:80:14:a0:7e:0a:
                    1f:b2:43:19:e8:13:51:96:42:19:c6:10:8e:91:c4:
                    e4:41:06:34:5a:b0:1e:cf:67:de:2c:6a:1f:04:b1:
                    7a:a3:74:8c:b4:1f:9c:ef:0e:e8:20:ce:cb:83:a2:
                    a4:bb:71:b0:d0:74:71:25:22:02:7c:4e:44:a1:17:
                    02:d9:d6:d8:4f:de:89:85:c5:31:18:5e:8d:05:ae:
                    40:aa:21:a6:24:c8:0b:0a:cc:21:9e:5a:71:d4:bf:
                    58:7f:6a:5e:6e:4a:ee:88:95:eb:5d:95:65:9b:25:
                    ed:4d:2a:0b:69:1c:0b:bd:6e:92:9a:57:0d:c5:8e:
                    89:6f:77:82:45:95:85:ad:5a:fe:37:01:5f:80:ef:
                    ee:96:4c:05:1d:c0:da:16:f6:16:d7:2e:22:03:26:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:15:48:11:2B:D9:0F:5C:9B:24:5B:06:2A:79:26:3E:7C:09:4B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50b8efe7-8ba3-3e74-8741-2fc38c5b5602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:32:a5:9b:fe:4e:b8:8f:63:cf:4b:7c:76:5d:ba:41:f1:40:
         78:ef:a8:bf:14:3f:60:98:b6:ed:fb:06:99:c7:2d:93:58:2b:
         6d:0c:91:57:51:fd:e0:fc:4a:7a:0f:94:c1:f4:b8:7a:b5:ad:
         e6:fe:e1:8b:44:ab:8f:50:c8:82:1c:44:1b:1a:8b:a1:b8:37:
         de:6f:2f:bd:af:98:f1:3c:a1:00:ef:3d:f2:68:89:f2:d3:c6:
         3e:48:00:16:04:76:c6:1c:2f:43:d7:ee:a6:6e:c9:d0:93:f7:
         1d:b2:18:63:f5:93:19:5b:6a:b8:ec:f7:a2:66:f0:10:17:2f:
         85:6a:64:7a:4c:0f:ee:9c:cf:1b:63:37:57:00:9d:ac:73:69:
         0f:64:8d:1a:39:d9:ea:bb:ec:a8:ff:e0:16:97:02:c3:ca:ca:
         1e:94:cf:e9:86:89:fa:c8:64:2a:dc:56:c2:51:ec:48:3b:8a:
         59:a8:49:26:f8:e6:6f:2f:a8:4e:e8:0d:e0:ab:ef:99:f7:2f:
         a7:e8:b1:12:ea:c5:d2:03:82:1e:92:74:60:33:f8:41:fc:63:
         3b:6c:49:be:6b:02:b1:f1:a3:de:c4:d8:dc:e3:f9:b8:6c:7a:
         54:70:37:18:9e:82:ba:18:96:54:88:06:98:fd:ec:94:ac:58:
         12:12:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:57 2025 by rpki-client