Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa
File:                     76ade4c3-aecd-39e9-bf4a-819928a81695.roa (raw, json)
Hash identifier:          F+LVdrjIO8CY+iBtFRaX33EgxESf/Wldmf03T4gZs+o=
Subject key identifier:   A6:59:DE:93:EF:7E:88:2B:55:9B:9D:2F:EA:05:49:78:FB:28:8A:A1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD11570A4DA0BDE58B580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d1:15:70:a4:da:0b:de:58:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=45ba9fe9-3280-4846-b309-45058d0e827e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:07:24:ea:6b:ad:a0:a6:b7:71:1b:b7:94:
                    f8:d4:96:9f:3d:00:53:c4:1f:78:45:67:49:f8:8d:
                    6a:e7:19:24:05:4c:bd:4e:d9:fa:57:57:a1:97:2a:
                    93:58:df:7e:4b:8b:f3:57:1a:7e:6c:71:eb:0d:0b:
                    ea:f2:44:1e:e4:6f:86:60:d2:a8:43:ea:19:4e:b7:
                    14:3f:7d:51:63:98:06:db:9f:a2:a7:02:04:a4:e9:
                    6d:cb:6f:88:b7:81:c8:c3:df:4a:b1:74:82:14:07:
                    0f:87:99:21:17:b7:88:63:69:82:91:45:ad:8b:bf:
                    da:f0:5e:6c:e0:b7:fe:df:0c:db:ad:94:63:07:d1:
                    8f:2a:d4:db:36:6b:f5:25:2b:86:e7:db:43:ea:71:
                    a1:fd:58:74:0c:ac:63:fb:9a:4e:48:69:ca:9c:1d:
                    fa:03:70:55:55:90:79:29:b6:11:82:6b:f3:d0:64:
                    a4:57:86:f0:a6:6f:75:31:e5:2c:54:1e:4a:e9:00:
                    69:82:c2:e8:e0:aa:25:31:61:11:25:90:f4:8a:15:
                    72:d8:f0:e5:57:ff:b2:17:6e:5e:ed:eb:6c:9f:4e:
                    44:fa:f5:62:4f:92:e8:f0:a0:08:4e:f8:5f:3f:09:
                    9c:2f:61:1b:cc:33:01:39:fa:81:89:9f:17:e3:8c:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:59:DE:93:EF:7E:88:2B:55:9B:9D:2F:EA:05:49:78:FB:28:8A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:34:79:a7:31:b4:bd:8e:89:14:05:a1:df:66:c8:b5:79:
         49:e9:e1:36:7b:ac:a7:21:2f:9e:52:b6:5b:cd:ba:66:66:9d:
         c7:ea:1d:61:79:e8:6f:6f:61:51:37:f2:ec:ce:f0:7e:ed:2c:
         b6:e8:14:5e:59:35:60:05:ba:fe:7f:67:99:83:f0:6a:6f:ed:
         a1:e9:9e:39:91:41:c9:78:ee:d4:0d:c7:16:bb:e5:df:a0:21:
         11:ad:82:c7:48:16:26:b1:40:5c:b9:18:1e:8c:b5:bd:83:89:
         4f:41:55:e5:f0:36:e0:85:96:5a:d2:3f:fe:a1:dd:00:3e:66:
         f0:ef:8b:e8:4d:99:40:50:9a:8d:f7:7d:d2:a7:3b:79:2d:25:
         ee:fe:0c:2e:14:c3:1a:ab:9a:2a:f1:f3:18:65:a5:24:02:99:
         1e:e7:ac:5a:51:25:4d:20:2c:be:1f:ed:1f:62:06:8b:57:8d:
         a7:dc:5e:f5:70:2a:6b:16:52:64:ce:88:fe:ac:95:00:bc:18:
         76:51:b6:d0:33:ae:a1:dc:af:63:74:c7:37:68:f8:9b:d5:9c:
         72:e4:a2:cb:78:8a:9d:2f:1a:d0:69:ce:8d:7f:93:34:43:2a:
         4c:c0:73:06:0a:f7:cc:3e:62:bd:48:f5:73:7c:9f:7f:32:b4:
         e8:cd:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:10 2025 by rpki-client