Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53f1bce3-1980-38cd-84b2-c92e91cd7ab5.roa
File:                     53f1bce3-1980-38cd-84b2-c92e91cd7ab5.roa (raw, json)
Hash identifier:          S2uH+9zLJ3hb4v5WyEmGto5Kjft6rkwhbbj3kCNlrz8=
Subject key identifier:   7B:A9:70:CD:EB:A8:DE:09:EA:93:DD:8F:44:6C:97:75:1B:87:51:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD69B05BC403439ED7080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53f1bce3-1980-38cd-84b2-c92e91cd7ab5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d6:9b:05:bc:40:34:39:ed:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a8d8f9fb-38db-44ee-ba0d-2b6ba977a064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:8b:a5:e6:01:88:3a:6c:b5:e1:35:a5:81:
                    95:0b:15:91:f0:8f:fe:c0:57:75:20:b3:ef:f9:48:
                    63:3e:b6:61:1b:1e:f8:d6:86:92:10:65:df:a2:af:
                    a4:71:cb:33:8e:d1:69:ea:7c:6d:d0:a7:21:2c:e3:
                    f1:84:63:a3:46:e4:19:a6:b2:29:70:16:a1:ac:37:
                    0c:4d:45:db:7a:26:2e:3f:b4:48:d9:a8:cc:93:00:
                    23:77:61:4e:d5:01:74:c2:28:c7:ba:d5:35:d3:7d:
                    c4:1c:a3:b3:96:26:03:1c:f6:fe:ce:3c:ff:d9:f5:
                    34:76:28:a1:e4:65:1a:f3:f3:49:dc:69:44:fc:d4:
                    dd:ab:63:61:8c:14:a2:82:50:f5:3d:dd:95:7b:b9:
                    54:6d:cf:df:c1:d2:88:77:66:50:63:16:68:94:38:
                    a3:03:fa:9b:61:9c:8c:78:e0:41:47:e4:45:02:1e:
                    67:d4:24:5e:eb:13:39:72:b5:ec:93:40:8a:5d:5b:
                    38:55:7e:22:53:28:5f:cd:f9:af:64:46:33:1b:fe:
                    b7:78:ab:66:88:ed:1a:95:01:41:1d:6c:b9:0d:be:
                    8b:47:26:ce:f2:9e:ee:a5:2e:94:5c:01:2b:49:1a:
                    03:41:3b:ca:57:23:9e:1b:a6:70:dc:63:79:67:5e:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A9:70:CD:EB:A8:DE:09:EA:93:DD:8F:44:6C:97:75:1B:87:51:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53f1bce3-1980-38cd-84b2-c92e91cd7ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:af:1a:d3:0e:cc:98:5d:ae:13:19:3a:42:00:08:80:a4:
         67:cb:35:19:63:2c:fa:eb:b2:aa:b0:2b:2b:bd:05:d6:6b:e5:
         ad:9a:9f:85:7b:d2:c8:a6:6b:9a:d1:27:e9:ec:cd:f5:9e:2b:
         2b:5b:df:1d:d1:70:aa:50:85:a9:cd:9d:f3:4f:5a:7e:05:8c:
         e7:c1:91:fe:ff:df:ba:6e:62:ef:30:7e:19:00:ae:fe:74:b0:
         83:96:79:4b:6f:1c:f6:40:a4:a5:cf:d0:38:e8:da:28:ea:b7:
         79:e4:2f:d6:c0:04:55:32:e0:3f:5b:ed:21:59:e2:cd:3c:f4:
         7c:0f:2c:d0:5d:31:81:0d:d5:5c:f3:f8:c6:c4:28:6a:50:db:
         af:4b:3a:74:1b:d1:8e:d1:89:0b:60:f2:7b:21:16:e3:c0:4d:
         64:34:53:ba:4d:c3:e4:6d:0c:ec:d1:d1:b2:b6:1c:58:6e:4c:
         74:40:97:41:4d:11:00:40:77:93:82:b9:52:d7:33:54:4a:2c:
         90:2d:09:5a:d4:97:92:23:a0:62:eb:f2:5d:03:97:26:f3:44:
         a4:df:45:1c:81:4e:4a:29:ab:49:77:a9:49:1b:d7:ff:a7:b5:
         9f:d9:92:db:01:50:4e:25:df:44:3f:c8:3e:0f:9f:ef:4e:7a:
         de:a2:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:31:29 2025 by rpki-client