Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ccfacae-ced0-3f36-a824-b596deaf938e.roa
File:                     5ccfacae-ced0-3f36-a824-b596deaf938e.roa (raw, json)
Hash identifier:          hM9FJ+2yPftqy2rRnle13o/lGj3nTPUIc2CpTVjDzxY=
Subject key identifier:   10:ED:9F:12:F6:F6:58:51:D9:7F:6B:2F:8D:D1:26:8A:8C:D5:A4:0A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD3D0BAF22E534F1D9D000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ccfacae-ced0-3f36-a824-b596deaf938e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:3d:0b:af:22:e5:34:f1:d9:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=430090e1-c180-4d19-b6a1-a0949123362d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:98:0c:19:e9:15:bf:6f:26:07:88:21:f5:f4:
                    b5:f9:c5:d3:0e:e3:77:50:a2:a5:87:77:b1:b3:9b:
                    df:61:69:6e:9b:47:34:d4:fd:94:de:c2:93:91:dc:
                    61:c9:fa:11:b1:1d:c7:54:12:78:98:a7:ec:fb:1f:
                    c4:49:a8:43:f0:99:fe:4f:be:72:b1:73:d9:8d:c5:
                    34:35:44:c1:8b:d8:8a:c4:ca:de:b5:66:cf:31:34:
                    0c:f3:f0:50:9f:86:e6:d8:2b:28:e0:53:33:ed:40:
                    21:18:ca:09:48:03:f9:1a:d3:16:d4:cf:72:aa:d7:
                    14:67:c0:dc:85:87:af:ce:33:e3:38:53:39:cd:0a:
                    60:9c:d0:2c:e3:22:e6:ec:a6:08:07:c0:bb:42:52:
                    a2:c0:54:dd:3b:d5:63:be:25:44:22:a5:d5:e8:b0:
                    98:ee:f8:29:c5:6c:3a:f8:09:88:eb:6d:d4:bb:8b:
                    0c:2b:f9:1a:7c:b1:89:6b:f2:a2:a7:4d:f7:4b:42:
                    56:24:c8:a5:41:e8:f0:28:90:b4:84:65:51:b5:f8:
                    80:68:1f:04:3d:eb:5d:18:fb:01:f6:42:ba:3d:00:
                    a2:87:ec:dc:f1:fa:8d:26:17:85:93:86:5a:e7:ef:
                    52:52:06:20:1e:cb:7f:6b:1b:17:0a:4d:13:a1:b3:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:ED:9F:12:F6:F6:58:51:D9:7F:6B:2F:8D:D1:26:8A:8C:D5:A4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ccfacae-ced0-3f36-a824-b596deaf938e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:99:06:cc:95:19:57:5f:3b:33:18:c8:af:6e:0d:6a:4d:a6:
         f7:2c:1b:e8:de:ed:c4:e4:2a:87:e1:bb:4a:6c:41:66:94:82:
         0f:90:b5:fa:79:7b:a9:9d:4e:97:27:93:1b:e0:fc:7e:dd:54:
         44:41:c4:8d:59:8a:4b:38:a1:7c:88:48:f1:9a:cc:e8:15:41:
         aa:e8:95:dd:d0:17:b0:bf:84:f1:d7:68:27:16:30:82:a9:49:
         9d:7d:ce:69:38:51:ff:a6:0d:a8:d7:81:3e:63:35:3d:fa:28:
         f1:b4:c1:de:23:79:69:9d:00:89:97:99:99:f7:a4:30:93:59:
         4b:22:c4:b5:69:7a:80:aa:9c:99:77:46:2c:92:d7:27:b4:38:
         1b:33:59:7e:e3:d8:cb:09:df:55:3f:e5:ed:3c:91:87:72:bb:
         e2:40:f4:0b:db:f9:99:49:1c:66:ef:68:4b:51:fb:d3:fe:6e:
         0c:13:e7:d1:21:d9:88:6a:71:08:fb:f9:7f:fa:b2:4b:60:fa:
         b2:33:25:de:11:5b:92:c2:29:f1:32:4c:98:3b:6d:f1:07:79:
         a3:d2:4b:d0:7f:03:e3:b3:59:32:79:06:5e:76:44:6c:f9:f5:
         5e:d0:04:db:8e:96:cf:74:cf:a4:85:a6:6e:5c:20:0a:0c:c8:
         89:c8:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:45 2025 by rpki-client