Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54bf87d8-ba25-362c-885f-ebf777c92754.roa
File:                     54bf87d8-ba25-362c-885f-ebf777c92754.roa (raw, json)
Hash identifier:          mKNodszZVHaXsJgiUbcILzUz/Ia0B6SSZFMYQsziASQ=
Subject key identifier:   FE:71:B9:72:29:69:3F:9F:81:59:FD:BC:04:BD:03:35:DF:B7:FC:F4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD19B86237646FF1C10500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54bf87d8-ba25-362c-885f-ebf777c92754.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:19:b8:62:37:64:6f:f1:c1:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=281ad9cc-d679-4422-b6a3-6c01ab6b1d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0c:ff:65:fa:af:5e:3a:fb:7e:c5:4a:6c:f2:
                    71:27:7a:9c:6f:b5:1f:50:e3:91:bb:d1:aa:52:c9:
                    0c:0c:fa:37:92:a4:6d:8c:73:9f:f9:b3:7b:99:fe:
                    9c:15:1c:fa:be:6b:26:61:e4:49:76:21:4f:3e:a5:
                    ea:35:8a:c5:07:ee:84:69:69:92:dd:c1:ce:a9:c0:
                    2b:6e:b4:49:1a:0e:6c:73:37:39:dc:7f:b6:bc:f0:
                    50:a0:c7:ab:ed:be:ea:c0:d3:cd:98:70:2e:0e:1a:
                    cc:69:5e:ae:bd:27:5c:d2:63:1d:d6:1d:25:9f:5a:
                    5d:71:10:91:17:04:ba:6d:e5:a3:05:cd:57:c3:41:
                    f7:9e:8e:05:9a:2d:bd:f8:8c:bd:3c:9b:d2:d7:2e:
                    6e:82:b8:10:67:3b:c8:37:d3:0d:62:b0:1d:a6:c0:
                    5c:ae:56:3b:7c:0a:a6:b3:e6:91:20:d9:97:47:90:
                    d1:2e:87:06:cc:c4:ca:29:ad:91:12:48:0e:d5:f8:
                    16:cd:2e:99:3d:31:d3:48:f2:11:1f:d7:45:a1:90:
                    25:06:18:ea:46:49:4e:89:42:49:8f:aa:1e:f1:a7:
                    22:4d:06:e4:d0:1a:bd:1c:19:6b:61:5d:bb:a3:36:
                    b8:90:77:02:1a:01:d8:a1:6a:e2:f3:99:0a:c3:61:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:71:B9:72:29:69:3F:9F:81:59:FD:BC:04:BD:03:35:DF:B7:FC:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54bf87d8-ba25-362c-885f-ebf777c92754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9c:66:19:08:85:27:9c:c5:0b:bf:be:15:dc:00:63:87:7f:
         3b:d6:d2:95:77:16:a7:17:ca:48:ee:1d:2e:a3:c6:1b:14:58:
         15:05:6a:d4:85:1f:65:fd:5d:ba:8d:9b:5f:5f:32:b3:1c:68:
         2f:6f:b6:ce:0d:39:15:9c:9a:5d:e6:e2:c7:d6:54:0f:25:29:
         ee:ac:35:dc:0d:69:36:f8:5a:33:a4:e4:48:15:6b:5e:a6:7b:
         32:06:6b:fb:59:7e:ba:1f:bb:10:ed:27:60:be:ae:1d:85:51:
         d6:a0:72:4b:57:14:08:4d:80:f6:33:9f:bb:14:25:f4:26:00:
         85:ec:de:5d:6a:4e:73:d9:92:f5:fd:4d:43:5d:27:73:6b:65:
         00:51:53:6f:4e:d3:db:c3:f0:e5:c8:50:f1:b2:14:7b:56:00:
         56:7a:3a:da:e2:10:5a:5e:22:4c:1b:46:28:96:66:73:4b:eb:
         40:03:9f:92:ce:43:ee:4f:b2:a3:78:bf:c0:6c:15:29:19:66:
         7f:40:f8:b8:3d:5d:c7:35:41:0b:db:8f:07:0f:60:5b:ca:f9:
         30:54:c8:04:aa:c0:90:9d:cd:be:88:2d:cd:ee:2e:7c:4d:fb:
         3d:2b:a6:c9:be:7e:7f:c9:9d:24:c1:ac:2d:a8:3a:de:59:b0:
         d0:37:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:05 2025 by rpki-client