Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bfd1471-ff19-3eb7-b311-f6d44e0fc1c7.roa
File:                     7bfd1471-ff19-3eb7-b311-f6d44e0fc1c7.roa (raw, json)
Hash identifier:          6YibNGKpOdBpnFOh/p2GqmobCo2caJtY/+7K7Rtfg4E=
Subject key identifier:   DF:33:E8:86:67:27:08:E7:BB:66:73:82:87:BD:90:8B:2E:BB:FA:6B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD272CDDC419E987471040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bfd1471-ff19-3eb7-b311-f6d44e0fc1c7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:27:2c:dd:c4:19:e9:87:47:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6e01fdc4-4e83-4acf-b809-a455f4267c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:3e:95:c8:f0:29:3f:86:c2:6d:19:22:8f:
                    8b:0a:2f:50:6f:82:48:07:80:b9:56:19:9f:9a:f9:
                    51:2e:28:f8:ed:f0:57:55:3a:38:62:9c:21:31:7a:
                    0f:7f:62:3e:3f:40:94:37:f6:8f:57:36:33:86:a1:
                    64:8c:16:16:da:4d:2c:28:4d:e8:b4:5f:92:5f:a0:
                    cb:28:73:43:b1:88:a2:9a:01:4f:35:86:fa:d6:3c:
                    01:73:96:7c:84:42:ef:28:5e:c1:02:2f:99:f3:f0:
                    56:bb:9d:74:43:e1:2d:d3:44:7b:70:d1:99:a7:fb:
                    63:24:74:33:c6:79:a1:54:61:fe:25:26:d6:1c:fe:
                    0b:cd:f1:74:3a:ea:3e:f8:cf:ef:c4:72:be:fd:7c:
                    73:26:aa:e3:4c:cb:0a:3b:9c:44:19:8b:0f:e0:b0:
                    d6:3f:a9:a6:8e:ed:b1:91:57:04:d6:8f:8c:5a:f4:
                    b7:c2:a1:f7:f3:6a:2a:2e:c1:18:cc:b9:ca:c5:a4:
                    63:ea:ff:bf:a5:bc:83:f7:8e:12:bb:67:95:d5:6f:
                    4a:68:db:79:7d:3a:cf:43:51:4f:e6:84:55:70:ed:
                    86:89:a9:b7:e4:38:77:b9:4d:78:42:39:b8:b0:6b:
                    be:c5:b8:44:81:1c:b8:95:5f:fa:a8:2f:f7:8e:d0:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:33:E8:86:67:27:08:E7:BB:66:73:82:87:BD:90:8B:2E:BB:FA:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bfd1471-ff19-3eb7-b311-f6d44e0fc1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d6:48:5f:4c:8d:d4:21:a8:cd:7b:e5:d9:f2:8f:d9:ba:a7:
         8e:28:e6:49:ae:e9:f5:0f:54:dc:9e:23:3b:83:60:b8:9c:e1:
         f3:85:72:f4:b3:44:a9:5f:fd:9c:95:ab:62:2d:3c:83:cd:8d:
         e9:68:20:62:e4:ee:00:d2:15:76:9f:76:9d:7e:d5:f9:7a:dc:
         cc:be:a2:dd:5f:6f:4b:00:fd:80:44:77:7c:7f:9e:a2:66:b5:
         df:82:0b:2e:9e:83:5d:80:37:49:53:f2:93:0c:6f:a1:2d:4e:
         11:cb:f8:4a:55:d6:94:ec:26:99:f1:29:1e:86:3b:08:39:b0:
         68:5e:3c:ee:ec:6e:4f:65:63:a1:19:be:bb:ee:bd:ee:60:b5:
         0f:52:25:07:f4:f4:61:52:fe:f7:90:28:d8:6d:40:c2:5e:46:
         98:68:2b:38:7c:13:03:0f:ac:7c:e7:78:34:1d:ac:9e:ff:68:
         c9:f1:8d:ca:6a:90:1b:22:17:de:14:50:a7:3e:53:d3:b6:9e:
         69:92:96:18:62:cd:af:f9:7f:2d:bd:b7:6c:ee:8a:78:97:58:
         69:42:89:5f:72:6d:66:ea:46:f9:72:e2:3d:e4:bb:8a:1f:24:
         d3:8a:1d:a0:78:6c:2d:bd:4e:33:be:6c:0e:21:62:30:a4:33:
         0b:27:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:49 2025 by rpki-client