Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68466abc-01d3-31d4-ad53-34d74b51e027.roa
File:                     68466abc-01d3-31d4-ad53-34d74b51e027.roa (raw, json)
Hash identifier:          Qzj0jgxDVACwK/fIxRvGAXB6NfCmiGbjogRFBQshyrw=
Subject key identifier:   9C:84:24:60:99:4A:5D:C4:DD:13:50:85:75:2A:5D:C6:FC:27:03:DC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDFFDF2FA8541AC5FDFB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68466abc-01d3-31d4-ad53-34d74b51e027.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:ff:df:2f:a8:54:1a:c5:fd:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=55d9b432-7b8d-4c8b-9f20-cd4ecc2656a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:b4:e4:26:48:3d:4b:a4:4a:f7:9d:3c:c1:
                    93:93:21:2c:e1:21:34:d2:36:7a:7e:2d:05:c7:33:
                    5e:8d:3c:04:a3:1e:79:8a:a4:3a:c5:54:71:a0:5b:
                    7e:a3:6d:e1:c0:00:40:07:7a:f1:ee:f7:36:a2:68:
                    28:fe:43:98:18:58:01:2c:a1:b3:58:2d:20:6e:48:
                    ad:80:8c:c1:d0:9e:13:c0:49:7a:9e:2f:27:a6:2b:
                    67:4c:ee:dd:d6:35:51:8c:fe:6c:c0:89:f0:b4:9a:
                    d9:06:d2:25:20:70:b6:09:30:9c:59:54:6a:2b:f7:
                    c4:10:f7:21:68:71:8a:3f:ab:cf:b3:a9:b8:26:25:
                    c8:60:52:e0:d3:99:80:fc:83:ac:62:d2:f3:b8:7d:
                    82:05:5d:e2:4e:c0:bd:27:23:1c:76:97:f9:2e:94:
                    b3:79:a0:04:e1:be:67:45:66:28:0b:57:e2:67:ec:
                    ff:3c:f3:d1:c2:28:1b:ef:73:0b:d7:9e:b7:b9:e0:
                    7b:4f:5c:29:bf:60:a6:e2:5d:ec:1c:a8:2f:dc:30:
                    d4:de:cc:1f:29:78:5d:fb:1b:b0:30:2b:81:29:0c:
                    31:89:2d:55:68:68:e8:11:f4:0f:ae:7d:15:fd:46:
                    9a:9c:87:5c:73:87:a4:f5:0c:43:e5:d3:e9:9c:39:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:24:60:99:4A:5D:C4:DD:13:50:85:75:2A:5D:C6:FC:27:03:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68466abc-01d3-31d4-ad53-34d74b51e027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:26:bc:bf:fa:99:60:31:b5:9b:ce:42:31:69:a4:e2:e3:5e:
         f5:0c:0b:cf:d0:1d:69:93:0d:c6:c2:26:27:3d:cc:44:ec:40:
         c0:f2:91:3e:cf:df:25:aa:68:af:7e:14:7e:dc:be:5b:d1:58:
         a8:f2:c4:36:91:67:45:79:67:19:49:a1:50:16:cb:c6:52:b6:
         09:6a:df:82:a0:a5:8b:34:71:4e:ed:87:8d:ec:76:ae:ef:ce:
         4e:29:e9:cf:29:4c:ca:e3:25:8c:5b:fb:16:15:c3:7e:08:9d:
         cd:7f:49:2d:98:e3:04:95:48:44:77:f9:7a:5e:27:85:7d:37:
         ca:c0:13:99:c2:ed:84:67:ca:5b:7b:88:36:bc:77:02:45:f9:
         6e:90:1d:45:5c:d9:eb:6c:b2:0e:57:09:2b:79:b9:20:52:c8:
         74:71:25:01:66:01:8b:e6:9a:97:2f:ee:66:88:c2:33:1f:44:
         13:fe:61:88:3c:73:03:0d:b8:71:aa:65:f2:d9:a4:72:10:46:
         ae:2b:e8:68:ad:57:01:fa:e7:e2:5e:e4:ff:39:70:f1:f4:04:
         c9:c9:a4:13:ec:b2:68:ff:39:44:11:19:db:42:c0:0d:ea:ed:
         42:11:81:0c:76:74:32:7e:69:1c:92:71:54:97:a0:4a:74:98:
         3b:b1:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:52 2025 by rpki-client