Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b3fb687-407c-33d0-81cd-29e9fb3dc7eb.roa
File:                     6b3fb687-407c-33d0-81cd-29e9fb3dc7eb.roa (raw, json)
Hash identifier:          3ue9IcFrCwV7frPY6I5W25phULu+fxOqpq+CtEvsp60=
Subject key identifier:   59:26:CE:B9:8B:27:1C:19:76:A4:08:8E:6B:82:F3:90:E3:14:4D:42
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE8127BF089DEEC44F680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b3fb687-407c-33d0-81cd-29e9fb3dc7eb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e8:12:7b:f0:89:de:ec:44:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=aa4de304-8eb2-458b-8dba-558e41bc61fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:55:78:4e:8d:a2:e1:05:c9:db:67:5b:6a:
                    07:ce:6e:2d:2e:e7:c6:26:57:ca:52:f2:54:67:64:
                    89:4a:69:15:17:b4:f1:22:6e:50:9e:40:26:a0:57:
                    ae:90:24:ce:f5:dd:19:3e:ee:53:ec:24:d1:f7:57:
                    53:22:c1:71:7e:2c:80:59:cf:1a:ff:7e:f5:eb:18:
                    9b:61:c3:7c:b4:ce:27:11:5f:a8:14:92:33:65:5a:
                    19:4d:db:99:d8:3a:7f:42:ba:b6:fb:ac:ab:5e:0c:
                    2d:0f:4e:3d:a1:44:61:6c:03:25:00:f5:34:f5:71:
                    13:ec:8a:63:aa:d2:a1:3d:ee:7f:74:b1:52:06:1f:
                    42:34:44:14:0b:9e:ca:fb:31:89:a4:f1:f6:d0:0a:
                    ea:6f:93:11:34:2b:33:81:a4:41:0c:65:74:bc:5f:
                    51:f7:9f:8d:7a:e6:2a:b9:db:66:15:c4:ca:43:f4:
                    2a:ee:04:80:d4:ea:ec:63:d4:b8:4d:03:4a:b9:b7:
                    76:ee:e1:14:58:a1:f0:69:58:2d:e4:44:98:b4:ef:
                    00:e5:89:62:5c:6c:43:d9:59:9b:58:08:8f:85:e4:
                    c2:1d:7c:3d:a6:e8:e1:70:a1:92:dc:f9:91:1e:7e:
                    67:a7:33:e9:b4:22:c5:e0:b5:30:32:be:86:00:64:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:26:CE:B9:8B:27:1C:19:76:A4:08:8E:6B:82:F3:90:E3:14:4D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b3fb687-407c-33d0-81cd-29e9fb3dc7eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:2e:1b:63:46:17:a1:c1:c5:3a:d8:1d:97:77:16:7c:37:
         04:70:92:72:93:df:45:5a:3d:6e:72:94:6d:83:37:8c:c2:64:
         14:b3:7b:62:e8:07:5c:bb:ba:77:c5:6f:98:d6:05:59:80:d0:
         67:ff:b2:1a:78:2d:88:c8:8c:6a:ff:93:80:e8:79:fc:9b:ba:
         35:29:44:21:b5:80:75:95:71:c6:54:63:90:a4:a3:ce:8a:ed:
         d4:fe:b2:98:12:3f:a1:93:fe:8f:44:29:ec:d1:c2:36:d7:15:
         7e:5e:17:58:75:12:02:d5:02:4a:2c:1f:5e:15:c6:da:54:d4:
         17:a3:1f:6a:3d:62:ec:03:f1:c8:f1:e4:56:15:4c:ca:8a:dc:
         57:9f:39:03:4f:2c:ec:f8:1d:62:c3:28:1c:ed:0e:b7:e6:5f:
         b3:04:bc:eb:e6:d7:17:90:a7:af:97:a3:89:2f:95:f0:65:81:
         1b:f5:2c:b8:61:3b:a2:0b:12:1b:f3:15:1e:82:cc:ce:7c:d8:
         00:65:98:02:51:82:0d:90:02:37:6a:1f:54:f8:b7:25:94:d2:
         72:94:19:1a:7e:5c:5e:49:49:2a:b2:bb:c0:42:d6:d2:a4:04:
         f5:d4:1d:29:be:19:7e:3d:01:d0:27:e0:7c:12:a9:d1:67:c2:
         4a:a6:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:42:33 2025 by rpki-client