Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54ba652c-70fc-3bc4-97ca-bf77b277ea5d.roa
File:                     54ba652c-70fc-3bc4-97ca-bf77b277ea5d.roa (raw, json)
Hash identifier:          TAqpQx7KRMggljvuBAXEJ7R9APJlnuOd7b9Gl+jD0d4=
Subject key identifier:   91:6F:ED:95:BD:77:2C:F3:F5:C4:79:91:22:0D:9B:7E:43:F3:9C:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDCD252612BAB61AC87200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54ba652c-70fc-3bc4-97ca-bf77b277ea5d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:cd:25:26:12:ba:b6:1a:c8:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=040bd36d-e25c-42b3-91fb-8bd34ed7ee26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:bc:46:c7:d3:4a:b6:e2:2e:5f:27:2d:94:
                    9e:f2:1c:2b:6f:e8:1b:de:22:c3:60:72:de:4a:f6:
                    d2:b1:d5:ee:ff:95:44:1b:bc:b7:3f:98:1e:3f:95:
                    af:92:56:77:04:8a:98:24:b6:4f:82:e0:b8:56:08:
                    8a:ab:3a:36:83:cf:ab:05:0f:79:54:41:2c:13:44:
                    6e:78:1f:bf:82:b2:ab:d1:0b:fc:a0:5f:68:d0:bc:
                    c3:c8:37:43:0d:e8:0d:d6:b8:51:85:a0:b3:ba:2f:
                    7b:b4:10:07:a4:f0:3e:e8:69:72:71:83:2c:6e:96:
                    50:d3:03:77:4b:02:b7:a0:ea:64:f3:a7:49:58:66:
                    28:53:d4:cd:3b:b1:60:05:c1:ec:5d:d0:25:94:0b:
                    2b:0b:a8:d2:23:7c:11:63:54:f0:ee:9d:9c:91:aa:
                    9e:8e:52:65:67:f7:f8:e0:5f:ae:af:6a:a5:91:5d:
                    1f:78:d5:99:76:0e:01:7e:dc:a5:ca:27:69:cd:96:
                    88:ad:c3:13:7a:69:f5:44:81:6e:66:90:d7:3c:0f:
                    61:f6:7f:64:2f:e3:5a:21:a4:6d:4b:7b:77:2c:ea:
                    c6:07:b9:2b:0a:7d:9d:66:aa:f4:81:aa:97:a3:b1:
                    10:5b:8c:b8:76:4b:81:27:f8:58:89:ca:52:d2:e7:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6F:ED:95:BD:77:2C:F3:F5:C4:79:91:22:0D:9B:7E:43:F3:9C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54ba652c-70fc-3bc4-97ca-bf77b277ea5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:d6:d7:a5:d6:b6:10:2e:46:a6:c6:b7:0e:ad:16:a7:d9:
         37:48:0a:96:65:71:d9:80:4d:4f:99:a3:8f:51:a5:53:2f:c7:
         c2:4a:f2:21:8b:fb:94:44:82:ca:69:ad:a9:11:8e:aa:df:bb:
         f3:50:2d:dd:83:5a:2c:09:be:10:81:84:b8:20:5c:86:19:21:
         3f:76:56:05:e8:1f:31:3e:c9:57:c4:cf:e1:bd:bb:fc:a4:ec:
         45:65:5e:14:be:e2:0b:4f:bc:34:35:fa:b0:63:ae:6d:0a:e0:
         31:d8:76:bb:1c:b4:8b:af:13:f4:3d:65:88:ee:db:f7:af:79:
         04:80:11:e7:ce:ee:82:c6:47:e3:4f:ac:cf:c3:12:09:91:83:
         66:d7:25:a5:2c:03:2f:af:c2:70:6b:9d:19:6f:c3:e2:09:d0:
         8b:a0:35:41:fe:b5:ad:17:e8:ec:d0:78:a3:16:a1:0f:07:19:
         9a:77:1d:3f:95:ff:bf:16:ac:90:4d:de:fb:51:11:08:36:42:
         37:d4:84:33:ef:db:9f:55:08:56:eb:21:df:f5:96:d6:01:eb:
         81:e7:a9:68:52:9f:cf:c7:ec:a8:e2:35:4f:65:31:02:29:31:
         4d:c3:e2:49:4f:75:8b:b7:5a:d6:4b:25:43:7d:9c:38:e5:50:
         5b:f2:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:32:55 2025 by rpki-client