Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638c3df4-c01f-3069-9bcf-ab65927843e3.roa
File:                     638c3df4-c01f-3069-9bcf-ab65927843e3.roa (raw, json)
Hash identifier:          2nZAcjfJkqmHzVmBWd6x3Xca8rsDBS3kftTDNbrfaEM=
Subject key identifier:   C4:49:F2:D8:E3:B6:9E:12:BF:BE:91:A5:6F:BF:93:FC:F3:C8:17:F3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE946EC1F50D0F1B25058
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638c3df4-c01f-3069-9bcf-ab65927843e3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e9:46:ec:1f:50:d0:f1:b2:50:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e01a69ab-96cc-4caf-b32c-83d1a13ee080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e4:c8:82:63:b6:9f:59:9f:9a:b3:78:5c:9a:
                    ea:3c:57:d3:b5:63:09:bf:79:46:66:e6:1f:8d:cf:
                    ca:b0:2f:83:12:16:f9:b0:5c:90:c7:e8:15:e0:7e:
                    bf:7e:d6:31:fe:35:bc:30:4e:78:ad:76:74:6b:41:
                    34:2d:c3:85:97:41:96:33:81:5b:b6:eb:05:fa:ad:
                    29:23:be:0c:9f:3c:e7:d1:7d:32:67:1e:fb:ba:62:
                    a1:6f:41:fe:fe:11:b0:a8:29:09:3b:75:80:c5:00:
                    a1:f6:2f:bd:21:9e:2a:e2:fe:0c:f4:31:31:55:77:
                    6c:c6:49:0e:d3:ef:43:35:5c:ef:26:57:2c:2a:5f:
                    51:e3:bd:3a:29:23:15:d6:22:dd:34:35:81:ac:7c:
                    06:d3:39:99:a7:6c:61:22:ba:5a:be:bf:55:38:27:
                    c3:5d:ac:93:1c:3e:57:48:9e:32:a6:ad:41:4a:80:
                    de:f9:95:52:83:85:a1:72:f2:66:2f:a0:74:5a:23:
                    a0:fa:da:33:d6:a1:68:2a:6a:1d:ba:8e:da:56:8e:
                    fc:39:9d:57:72:c8:5b:52:30:60:c8:36:be:e8:c9:
                    dd:40:0b:89:85:17:69:7c:aa:3a:95:70:01:d3:11:
                    fc:6e:06:36:ff:5c:46:40:66:39:81:f7:ac:07:70:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:49:F2:D8:E3:B6:9E:12:BF:BE:91:A5:6F:BF:93:FC:F3:C8:17:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638c3df4-c01f-3069-9bcf-ab65927843e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:59:cf:77:d1:08:a9:91:59:cb:89:8e:07:ad:13:97:a7:94:
         6f:19:b4:87:28:d5:6f:71:99:d3:fe:0c:d1:d9:fb:88:5b:0c:
         f3:85:4a:95:48:ce:6f:6d:54:6f:23:3a:47:61:a0:90:0f:5f:
         80:f0:6e:fb:6c:91:64:a8:ca:16:9c:be:bf:59:08:f1:cc:b5:
         ff:0a:26:8d:ba:ff:29:86:6b:32:12:ff:c8:24:77:75:06:9b:
         84:c7:f3:ce:74:f0:7a:da:fd:6c:be:18:18:b4:97:81:b3:a2:
         b3:ff:9f:d0:87:1f:8f:0b:12:4a:2b:63:d3:f4:e1:90:5a:e9:
         cf:66:b4:77:5a:11:27:6d:dd:d3:3c:80:28:d2:c7:ee:3b:e6:
         7d:ab:c2:17:ef:95:8e:7a:51:26:aa:fc:aa:fd:21:fe:32:3d:
         62:d3:29:ec:d2:bc:17:0d:ed:ce:58:66:5b:af:6d:01:a1:21:
         6c:90:51:9a:a5:7a:8a:02:68:12:64:b8:7f:b4:35:1e:6b:cb:
         dc:69:b6:5e:dc:86:86:f2:ea:45:d8:b9:b0:63:e9:62:26:47:
         aa:e2:4a:e1:46:fe:71:1d:99:55:cf:db:37:a0:03:85:b2:da:
         5a:50:75:a1:33:b5:0e:09:29:6e:4a:9a:51:a9:22:0a:58:ad:
         17:1b:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:39 2025 by rpki-client