Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56d38edc-6206-3a86-8cbb-c997db7ab927.roa
File:                     56d38edc-6206-3a86-8cbb-c997db7ab927.roa (raw, json)
Hash identifier:          JXaM94s3K3p8zEbfeEYY31asB12ndre2NyGTOOnqecM=
Subject key identifier:   3E:D0:14:6E:5D:A1:1D:D1:D9:67:C3:D4:1D:03:25:3F:EB:51:DD:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE057309DD03B6884031E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56d38edc-6206-3a86-8cbb-c997db7ab927.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        198.45.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:05:73:09:dd:03:b6:88:40:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b34a4f17-32ec-4108-93ee-ab214a3e23da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:8d:db:21:db:85:29:45:b2:00:b3:8b:5f:
                    0b:be:7a:c8:45:62:11:49:14:ce:c7:21:62:8e:aa:
                    be:6c:c0:ff:d9:32:3c:ff:df:1f:92:08:02:e9:6a:
                    3b:ce:33:8d:23:e6:df:f3:f6:a9:e3:d3:a0:c7:97:
                    b9:8c:8b:a1:c0:45:a8:de:3e:d6:db:29:71:d9:be:
                    a9:c4:f6:26:4e:d1:58:5c:23:c6:c7:fe:cb:da:c4:
                    68:57:ce:9c:42:a1:41:8d:9a:4a:2a:da:af:33:45:
                    5e:35:0a:9d:ea:23:6b:e8:a6:32:d7:b3:3b:df:16:
                    db:84:83:e6:c4:14:ff:33:37:2a:ae:d2:ca:1f:84:
                    a5:52:6b:8e:26:6d:4d:08:ef:07:1f:88:ad:c7:74:
                    bc:e3:ee:33:6f:45:d0:8a:03:0c:49:6b:70:3b:32:
                    a9:f6:f2:e1:0b:a7:29:a5:75:61:e5:b9:f5:ae:88:
                    a1:b6:f5:dc:be:4b:70:39:b5:f1:3e:f5:0d:74:5b:
                    c1:d3:35:0b:cc:02:9a:67:0f:23:28:86:00:10:d9:
                    2c:de:22:18:98:16:4d:1a:6b:88:f7:6d:97:a2:e8:
                    92:3a:f4:31:29:a7:42:67:c9:c6:97:26:91:23:1e:
                    4c:3b:13:e8:bf:af:69:dd:f1:61:ca:9d:a2:9b:80:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D0:14:6E:5D:A1:1D:D1:D9:67:C3:D4:1D:03:25:3F:EB:51:DD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56d38edc-6206-3a86-8cbb-c997db7ab927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:82:33:67:63:c3:a3:89:d8:1e:33:98:5c:02:6c:be:95:80:
         c8:28:f1:c9:36:53:cc:ec:e8:98:42:27:0a:9b:0e:8c:c5:39:
         5b:ad:0b:c1:41:81:8b:41:cd:02:6b:cf:dd:95:f5:f7:90:90:
         85:f2:f7:1a:49:4e:79:0a:04:ae:cf:0e:96:89:a4:e6:8f:be:
         f5:a3:02:ad:ea:e5:b7:b1:03:77:a6:99:b1:a6:ec:42:0e:09:
         0e:a2:51:21:c4:81:b4:b9:86:03:1b:37:a3:a2:29:5a:c4:c5:
         b4:ca:ee:bd:ce:7b:fc:e8:33:c6:49:d3:03:8d:3e:42:27:71:
         e6:30:d6:cd:a8:41:20:28:ab:ad:26:3e:dd:53:a8:2b:e3:da:
         08:25:31:b8:4c:6d:9f:0d:60:40:fb:7e:54:60:0e:73:34:b9:
         d1:7a:ed:56:34:af:66:53:64:1c:10:2b:5a:51:95:e7:60:6b:
         b6:73:47:75:17:7d:11:05:25:4a:db:71:65:81:81:c5:18:70:
         3d:90:30:bf:12:99:2c:b3:1f:8d:b0:94:25:27:84:ff:fc:fd:
         16:26:8e:3c:4a:fe:08:af:40:e6:a6:c6:8a:c3:d5:d7:77:57:
         c8:8d:19:2d:54:1b:c9:07:a4:0c:45:a5:3c:9f:eb:ca:9b:2d:
         c8:a5:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:21 2025 by rpki-client