Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d6d03-13c6-3c94-8210-34d3c47880d8.roa
File:                     638d6d03-13c6-3c94-8210-34d3c47880d8.roa (raw, json)
Hash identifier:          KRldl6Xa3zD5GZdN7Xh+XOx6XOe9FPklLdXd5+8JC8M=
Subject key identifier:   63:05:DA:28:D1:A4:4B:A2:E6:1C:A9:D2:84:C2:95:EE:57:65:04:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD03507F4DE6018E35D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d6d03-13c6-3c94-8210-34d3c47880d8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d0:35:07:f4:de:60:18:e3:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0ea4d6e1-3734-49eb-853b-e11c8d9ca7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:16:5e:f8:89:bc:e5:ca:8d:85:a1:cd:15:
                    98:6e:1a:70:d8:32:80:f4:59:5e:8c:57:3b:e1:98:
                    fd:fb:e2:8a:f1:4b:85:17:b4:27:31:96:92:5a:11:
                    d6:40:33:3f:74:d4:70:68:70:75:9d:51:ad:f5:a7:
                    87:d4:81:3a:f0:99:6e:3d:48:d6:94:6f:54:58:08:
                    ff:7a:18:ce:8f:24:bc:5e:90:0b:25:71:c3:1c:54:
                    d5:06:12:94:2d:8f:3d:8c:de:ad:cd:f0:e0:92:b5:
                    a1:fb:19:a4:b6:99:93:95:5c:26:ce:d3:de:01:00:
                    b7:cd:7a:ad:91:cd:3c:13:a1:c7:8c:a4:32:f3:b3:
                    44:81:7b:fb:02:83:4e:2b:4e:7d:4b:09:70:2d:65:
                    bb:e1:03:87:13:37:b9:75:8f:b1:29:34:79:e7:12:
                    cb:8b:b2:3a:46:24:0a:fd:87:83:7a:48:d4:a3:e6:
                    df:d4:60:02:9d:ac:8b:88:53:07:b3:f0:1a:bd:94:
                    86:8d:24:73:3a:6e:96:56:2e:14:ad:8b:d7:1a:f2:
                    97:4b:12:4e:ca:20:a1:87:60:95:cd:9f:2a:7c:30:
                    71:a5:a9:ba:ca:45:86:29:bf:18:ec:41:45:f3:0d:
                    2e:1e:b1:81:6d:16:29:5d:c9:b4:40:53:5e:b6:57:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:05:DA:28:D1:A4:4B:A2:E6:1C:A9:D2:84:C2:95:EE:57:65:04:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d6d03-13c6-3c94-8210-34d3c47880d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f8:c9:1e:04:61:cc:47:f8:2e:d4:ac:dd:e5:ed:46:b1:d1:
         c8:01:75:73:f8:f8:86:11:4e:44:e8:ce:74:ae:9b:92:10:21:
         87:e3:ce:e9:11:6b:2d:d6:57:34:06:d3:f2:06:04:30:78:d9:
         17:b9:99:e0:53:aa:74:05:6a:5c:9b:d2:e3:3d:35:53:11:14:
         84:2e:1a:17:16:be:9b:91:d9:a1:15:db:7d:a6:35:1d:40:25:
         dd:f2:e1:d3:ce:e5:08:fb:c4:b5:6d:ef:d5:ff:97:ba:bd:08:
         80:a5:74:32:b2:c6:c2:df:16:3c:af:90:07:f8:03:2e:f3:29:
         4a:81:7f:af:b3:5f:4f:ff:30:90:8b:f8:18:6d:73:7c:09:9c:
         31:54:d4:84:b7:ae:35:69:27:41:8c:47:d5:90:a7:86:23:6a:
         34:21:76:2a:00:f3:38:65:3a:9e:65:56:f0:aa:97:b8:d4:10:
         b8:92:cb:ad:ac:3f:e9:24:81:9b:ea:0e:bc:c8:d7:ea:2a:ba:
         0e:c4:be:4f:8f:80:fb:59:bf:90:d6:d6:6a:89:e1:7b:95:d7:
         b8:8d:00:ea:2d:ae:b4:3a:58:2c:54:28:a2:2f:cc:85:11:e1:
         47:1d:9a:e1:d1:3b:d6:5e:2d:ce:b2:4b:03:20:75:9b:60:5d:
         f3:59:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:38 2025 by rpki-client