Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50e6aed5-4fe3-330f-925d-1d850a7eae1f.roa
File:                     50e6aed5-4fe3-330f-925d-1d850a7eae1f.roa (raw, json)
Hash identifier:          4qObN8kqZnm5fJNR5i5PHG2PX2li7i3E3vqR3mewxpo=
Subject key identifier:   E0:D2:BB:AC:9B:A6:47:6C:2E:D5:F3:78:8A:78:C8:6B:F1:55:C1:2E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD25E7A293EC718D581700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50e6aed5-4fe3-330f-925d-1d850a7eae1f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:25:e7:a2:93:ec:71:8d:58:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2be5cf18-69ce-4a67-9afd-800c930cf604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:c6:2d:34:4a:a6:e9:06:dc:2b:c7:4f:59:
                    d8:29:54:56:0b:cb:ce:0a:6b:1a:ef:04:7b:b3:a9:
                    15:36:6f:f2:7e:eb:6f:49:a3:9f:03:54:15:68:88:
                    8e:d5:81:e7:72:bd:3e:16:bf:c3:6a:fe:96:5b:4c:
                    e7:14:8a:14:fc:fd:62:20:63:19:8f:70:3d:cb:94:
                    66:ce:0e:f7:7e:70:2a:c8:d1:a8:51:dd:3a:c6:53:
                    fb:32:f7:ec:44:f7:a5:ee:d7:e6:0d:30:40:f9:46:
                    0f:0f:51:13:36:cf:02:8a:17:8f:6c:7e:00:59:d7:
                    41:fe:0c:c8:59:0f:06:2e:9b:85:9d:c1:3b:21:b1:
                    91:31:10:35:d4:35:98:aa:f9:04:a1:c5:23:bb:95:
                    b1:94:3d:84:0d:fe:fb:3c:52:94:f3:f9:e3:06:62:
                    bb:92:85:87:61:0e:04:11:d6:17:1d:ba:82:02:bf:
                    23:d4:bb:b2:f2:09:73:23:b7:52:99:4f:79:f7:af:
                    5e:72:65:ef:6d:7c:26:c9:dc:4c:c4:c3:6f:10:e2:
                    37:d9:96:a7:1e:4d:88:af:e3:2c:1e:c9:48:ba:d1:
                    7b:05:fa:2c:54:81:dd:3f:a6:a2:28:d9:98:a9:54:
                    9a:06:5b:aa:97:02:63:00:5f:2b:15:b2:5a:9a:05:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D2:BB:AC:9B:A6:47:6C:2E:D5:F3:78:8A:78:C8:6B:F1:55:C1:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50e6aed5-4fe3-330f-925d-1d850a7eae1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:17:0f:49:d2:bd:4a:07:e0:7e:c4:e2:bc:65:12:98:18:b6:
         be:95:9c:f5:a9:87:3a:57:73:cf:82:92:bf:53:2a:b8:68:9b:
         7f:86:32:04:97:26:57:b8:52:f8:42:43:00:68:e5:2f:a4:b2:
         9e:11:79:5e:28:ab:ae:95:0d:66:0e:eb:95:c8:78:8e:a0:d2:
         d2:06:8c:cd:50:30:69:7d:9c:22:18:03:54:07:97:17:17:c6:
         84:60:b6:b8:78:26:97:77:72:4a:ad:77:12:5c:a8:a3:03:16:
         90:cf:00:56:7f:2c:b6:4d:de:11:ca:ca:b6:15:ab:6c:7a:20:
         e5:23:9e:b7:fd:91:25:84:22:44:09:d6:b9:2c:64:49:c0:e9:
         1c:8f:83:1a:89:74:35:a8:cb:5e:c7:77:b1:c4:d1:78:76:ee:
         07:f8:be:31:87:74:db:e6:00:36:46:59:a6:19:26:96:d8:50:
         b1:93:3b:1f:94:b4:47:9e:cc:62:43:bd:01:8b:ad:62:a2:dd:
         f1:2e:92:ad:02:dd:47:d3:2b:32:1f:78:23:de:93:71:f8:80:
         70:5f:50:81:99:64:ae:17:a8:f8:e0:f0:42:1e:fc:b9:21:35:
         6b:e7:3c:e9:40:92:9e:ae:5a:5e:58:7a:64:af:0f:6d:07:00:
         92:a9:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:21 2025 by rpki-client