Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa
File:                     63502d4e-89a2-30eb-9321-3bea98daae34.roa (raw, json)
Hash identifier:          RikMPFCeRBIS1OlqiA4OGc32teKTKXHHFSiDku+xnYI=
Subject key identifier:   0E:D9:4E:59:AC:E8:92:80:85:56:BC:00:24:B1:71:39:75:E3:61:53
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD1E3DBF250380B0D4AF40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:1e:3d:bf:25:03:80:b0:d4:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=36686fac-6a8c-4ca0-95ca-acb8fc0f4737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:90:a7:5f:d8:5b:56:e3:f8:7c:04:cb:62:
                    f4:db:26:74:1a:6c:d0:23:15:17:8e:02:6c:42:07:
                    f2:7f:3a:f8:91:89:c9:aa:4a:0a:cb:35:bc:bc:a9:
                    5b:ed:b8:b9:37:04:af:a2:61:45:b0:1b:40:78:d8:
                    7e:ad:f8:4a:47:23:a1:b0:ce:94:67:5c:72:2a:52:
                    f1:d3:a5:6e:00:ef:a9:66:62:69:8d:17:6e:3c:6e:
                    51:e4:49:8b:3b:6b:d4:82:c1:78:68:f8:96:1d:7a:
                    7f:84:96:42:b7:61:ee:0f:52:e2:a4:b9:ce:e4:be:
                    78:86:df:9f:68:47:9f:32:e8:2c:a3:24:68:40:d8:
                    ac:be:e5:94:c9:58:da:2e:2e:60:82:f5:33:90:20:
                    40:95:a5:58:0f:aa:6b:0b:37:a4:bb:dd:82:56:c5:
                    31:f9:30:ea:ab:2a:c5:80:e6:e4:d4:73:3e:76:f9:
                    86:49:0b:a1:53:fa:fb:10:8f:7f:a4:d3:9b:59:f6:
                    d6:70:a6:ba:05:6e:92:a4:ca:be:b2:33:ba:39:dc:
                    ca:bb:27:8c:52:1a:99:27:b7:ff:74:f6:cd:b5:99:
                    75:a6:51:03:aa:f8:6f:d8:47:08:b5:6d:71:78:79:
                    f4:86:3c:d1:2f:7c:a8:7e:bc:cb:95:01:b3:76:6b:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D9:4E:59:AC:E8:92:80:85:56:BC:00:24:B1:71:39:75:E3:61:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:25:e0:f9:51:60:15:2e:4a:3a:65:9e:7b:63:b3:06:56:67:
         b5:d7:bc:f6:85:f0:c4:f3:d8:84:78:fb:88:01:64:e5:5f:61:
         69:dd:4b:6e:34:66:45:2e:e1:14:4b:ba:6d:e6:26:59:a5:79:
         d6:d3:9d:21:6e:b0:64:03:e9:a6:81:be:95:3e:d4:83:f7:58:
         ba:0e:6b:20:cf:e5:1b:18:cc:09:ad:fa:84:76:7c:55:f7:b2:
         ee:50:a2:c4:16:5e:eb:85:f3:03:cf:ff:93:bd:71:8a:a8:ab:
         3e:87:51:25:33:25:a8:9b:1c:f5:f2:ac:9d:01:d6:fd:6a:6e:
         7b:1a:49:13:46:b4:c4:06:63:e6:2e:7b:0d:47:b9:d4:da:03:
         59:60:a7:57:c3:99:1e:48:fd:71:a3:77:bd:d8:7e:23:e7:f0:
         0a:9a:e1:91:8c:3e:a3:cf:34:bd:0c:bd:4f:3f:bd:6c:1b:77:
         7b:94:17:9b:6a:1f:4f:1a:1e:80:51:9f:0b:1e:71:f6:52:23:
         ab:a6:5d:bd:e7:24:dd:77:be:64:6d:45:96:93:77:1f:d3:7d:
         ec:01:a0:d0:c7:47:d5:17:80:9c:73:d9:4f:b8:e8:6d:09:be:
         db:5c:5e:7c:20:6d:a0:8c:b4:ac:89:56:4c:39:10:17:64:81:
         49:ba:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:02 2025 by rpki-client