Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f47a6d-dfe1-3b6b-aeb4-fa5fe17bb271.roa
File:                     69f47a6d-dfe1-3b6b-aeb4-fa5fe17bb271.roa (raw, json)
Hash identifier:          zwWai3PZWbIh+XfdhpdDA4EGXdu2iPd/oztrXR4i/Xc=
Subject key identifier:   FF:B9:7E:1A:DE:74:00:A9:75:59:B8:20:EB:E6:A7:F2:D8:95:6B:7A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD1522B3308C0487221840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f47a6d-dfe1-3b6b-aeb4-fa5fe17bb271.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:15:22:b3:30:8c:04:87:22:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f63bc897-363b-4bd9-beb7-d6ca5c3e917b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:c4:2f:ec:7a:a0:de:f6:fc:b3:9a:94:cf:
                    2d:79:00:8b:bf:8a:2c:22:ba:93:15:4d:f0:19:61:
                    b2:bd:ba:3e:83:6f:a6:af:79:2d:f3:d4:79:96:78:
                    6f:a1:ff:e6:04:61:13:c6:39:09:26:44:23:32:29:
                    3c:21:6e:2a:e7:7e:b5:af:74:04:5d:f9:cc:58:f0:
                    fc:42:44:df:b6:35:ed:ff:7f:e5:01:19:c7:9a:12:
                    25:c8:f3:c5:8a:68:92:0c:d9:a3:95:7c:29:90:bf:
                    d0:a3:b3:d1:e9:70:33:2e:e6:d8:5d:51:5a:d4:a4:
                    14:ab:ab:0f:e6:0e:4b:8a:83:06:8c:d6:09:47:c1:
                    cf:47:ea:ad:3c:2a:eb:aa:70:09:fb:80:f7:ab:50:
                    35:fa:bc:22:36:0f:a3:00:0a:a2:d5:34:2c:d0:de:
                    0d:33:0a:bf:2b:fc:72:b2:2d:27:92:07:28:4d:dc:
                    56:78:38:6a:be:45:69:dc:94:48:23:b9:89:cc:88:
                    08:8e:32:14:e7:ff:20:e3:4a:83:26:f7:37:ab:d5:
                    94:1e:01:a1:3c:20:f5:84:19:04:a0:76:94:3b:62:
                    b2:10:d8:b1:4d:e5:2f:3f:93:fc:3d:3a:15:42:67:
                    a1:f3:5f:ae:69:74:00:cf:60:d1:27:3d:18:31:fa:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:7E:1A:DE:74:00:A9:75:59:B8:20:EB:E6:A7:F2:D8:95:6B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f47a6d-dfe1-3b6b-aeb4-fa5fe17bb271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:71:9f:89:9b:a0:a7:a2:d3:de:55:0a:ab:0f:67:10:37:
         dc:85:8b:dd:75:42:a5:0f:1f:fa:28:03:f3:56:b9:a5:b2:d0:
         99:2e:c0:35:cd:23:45:50:77:ad:38:9b:ca:7f:ad:24:a2:b1:
         7e:95:1e:a3:56:81:78:7f:15:70:03:0c:3c:fb:3a:7d:7f:ca:
         01:9d:01:18:d2:d2:bc:fa:53:eb:c3:eb:e0:c7:72:c9:74:54:
         6a:a8:ef:a1:1a:66:49:16:67:16:d3:6c:ba:67:88:b2:37:c3:
         ed:fa:9b:b4:63:b2:34:a7:90:08:44:98:79:4a:30:8d:86:b7:
         3d:16:4b:5f:a6:88:76:06:e7:57:34:d6:11:e6:b2:72:5a:a8:
         54:0a:4f:7b:20:71:ff:7c:8b:c7:cc:76:e4:2f:ee:6f:62:3f:
         df:16:93:3e:6d:ef:f8:dd:73:b3:d6:3e:f2:0f:ae:b5:20:9e:
         27:b2:01:80:39:c9:2c:a1:d7:df:8e:c9:35:4a:dd:37:4d:87:
         55:b2:21:41:e5:45:2f:41:62:c8:28:2a:a3:cf:bd:5b:b3:ed:
         1b:af:ec:16:36:fd:73:92:a8:37:93:cf:ac:bb:e7:f4:aa:6b:
         00:62:e2:96:1b:f2:4d:50:08:cb:cb:19:be:7b:73:4d:1a:d8:
         51:da:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:26 2025 by rpki-client