Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bb2e5f5-9fc5-3ad4-96e8-a246daa7a6a5.roa
File:                     7bb2e5f5-9fc5-3ad4-96e8-a246daa7a6a5.roa (raw, json)
Hash identifier:          49ZtAKUu+4dICIF7NdySVKA4xH+uN1mfjBOBmUrsifI=
Subject key identifier:   6D:3D:F7:A1:72:97:03:89:B6:3B:A3:63:5A:84:79:6B:D8:E1:CC:B5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD56EED1C467A0D0FED80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bb2e5f5-9fc5-3ad4-96e8-a246daa7a6a5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d5:6e:ed:1c:46:7a:0d:0f:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=fec6d5e3-69be-426f-af5c-997c730b9238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ae:b7:2d:96:58:9f:87:c4:b1:c1:f7:73:29:
                    9b:e3:51:b9:9b:ca:32:f2:89:b3:a6:3a:13:6b:1e:
                    36:f0:b0:0b:0a:72:b8:2d:7f:63:ae:ed:24:69:9a:
                    2b:95:57:3c:d8:08:6c:73:3c:62:4a:7f:94:32:8e:
                    9d:8a:21:7a:fb:9e:ed:e6:ff:ee:cb:4d:25:74:ed:
                    74:3a:7f:08:d1:88:f4:71:28:df:35:6d:72:1a:b7:
                    ac:5c:b3:2d:4e:a9:d4:7b:1c:40:72:5e:82:6f:19:
                    ac:16:e2:ec:17:0a:73:f2:e9:ad:d3:79:cf:ee:a2:
                    c8:34:4e:46:d8:fb:aa:b9:74:04:ee:7b:a6:9b:5c:
                    24:d2:88:1b:96:f3:7c:71:f4:b0:91:3e:ce:e0:f4:
                    6d:a0:2d:3b:b9:37:30:48:3d:7f:14:a2:7a:12:99:
                    08:35:18:e4:06:ac:b0:fe:ee:73:f3:1a:e8:2d:38:
                    58:41:14:7f:5a:cf:85:73:86:6f:84:8c:8f:10:e2:
                    c0:1a:d8:6d:5f:b8:86:60:a4:c5:46:8c:26:a0:e5:
                    c0:53:93:79:06:b0:b0:6e:ab:dc:eb:b4:28:61:80:
                    9e:23:04:dd:78:d7:40:9e:3e:86:9e:76:68:ec:72:
                    c5:24:ee:9e:0a:9f:6e:c2:66:0f:b3:cc:48:a0:43:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:F7:A1:72:97:03:89:B6:3B:A3:63:5A:84:79:6B:D8:E1:CC:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bb2e5f5-9fc5-3ad4-96e8-a246daa7a6a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:b1:6e:73:56:3b:57:6f:54:5d:75:c1:48:40:5d:e3:c6:
         68:b2:0b:70:24:53:c2:42:32:26:1f:05:77:27:c4:75:de:cb:
         ca:09:aa:54:05:c7:15:8c:c7:62:9a:30:80:e4:58:5a:30:09:
         ab:09:52:45:4a:ae:b4:30:fe:c4:bb:56:3a:d7:3e:3f:78:5a:
         c6:e0:29:29:6c:2d:aa:3a:8c:f3:bc:89:76:e3:bb:ef:ed:3c:
         87:7f:c3:c1:b9:10:f4:14:71:99:23:24:2f:5c:04:24:31:42:
         05:11:fb:23:53:e9:85:90:58:e9:df:81:48:fb:78:eb:ee:ca:
         84:47:37:e0:9b:b3:d2:a9:e7:57:8f:55:bf:c4:b3:56:a5:17:
         20:cc:71:c4:fe:0f:c6:e4:16:8d:3f:65:44:4c:ab:91:6b:fc:
         07:8a:1c:91:19:1f:4e:2d:6f:4f:20:2a:b6:ef:67:3d:d9:71:
         78:24:f7:bf:92:73:b4:cd:b7:ff:6a:35:42:d6:81:50:63:ec:
         f7:08:5b:b1:37:df:b8:32:7f:3c:e5:a2:15:9e:df:8b:94:35:
         04:85:63:f8:7c:69:4c:e2:56:6e:5a:c8:b6:bf:f2:2c:52:a6:
         d1:c1:7b:98:08:fc:90:af:27:c8:fe:ab:5e:ef:86:23:a3:26:
         86:6a:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:28:13 2025 by rpki-client