Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa
File:                     7e1fc77f-639e-3273-a5fa-899d78297142.roa (raw, json)
Hash identifier:          2hCc6HpkYnJLRMkSm/huEkBY1VtdBGK5hrArVkGy9PM=
Subject key identifier:   96:1B:91:EA:9C:F5:A7:C5:E9:A5:CC:CE:A4:CA:B1:81:99:BE:0F:16
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE1757B9E7A476F966D7C
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e1:75:7b:9e:7a:47:6f:96:6d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7969658c-13fe-4d35-8bb4-e53e6ef9cdd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:1b:5f:21:0f:f0:65:42:04:25:f2:b6:97:
                    3d:fc:a2:ab:98:8e:e2:ea:7b:95:fe:99:73:88:bf:
                    0c:1a:fd:f7:a5:0c:96:d1:ea:a6:bc:f7:7a:a1:e0:
                    5b:37:c6:15:8b:03:5c:0a:c0:fa:7b:45:71:31:5c:
                    29:ac:1f:5f:36:e4:6f:56:8c:52:97:ca:c8:53:13:
                    53:0d:3d:32:6f:8d:67:ac:ec:8a:38:2b:a7:7b:1d:
                    31:af:75:48:20:31:54:30:6d:58:33:f5:32:aa:f8:
                    d6:6d:6c:7e:2c:3c:ca:81:cb:b8:82:2f:d2:dc:47:
                    6e:70:da:c8:67:4b:14:a7:1b:8e:72:11:c5:88:be:
                    e0:ff:cd:c9:69:ba:b7:60:f3:dd:3a:a0:69:5c:32:
                    a5:52:04:cb:27:60:9f:c6:ca:7b:c4:7d:48:61:54:
                    20:26:47:f3:eb:9f:e2:48:f6:25:73:e5:69:1a:36:
                    32:a7:68:b0:04:01:1d:81:f2:a9:a9:b3:25:94:7b:
                    5b:10:78:4b:e8:89:13:23:64:f7:62:4f:e6:d3:24:
                    c2:a8:82:fc:90:1e:f4:cc:01:5f:c8:72:2b:54:cf:
                    53:1c:36:4c:94:6a:2f:a7:d6:3b:27:01:fc:a8:ae:
                    a8:f9:11:bd:0d:9c:cf:ce:6f:a1:f0:39:0e:25:11:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1B:91:EA:9C:F5:A7:C5:E9:A5:CC:CE:A4:CA:B1:81:99:BE:0F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:aa:be:1f:23:50:d3:b0:ce:e2:b0:58:10:76:9a:07:ae:fb:
         69:c3:95:5e:20:a1:4d:94:62:37:b3:fe:97:bd:70:2e:a9:ca:
         6c:ed:7a:63:20:ff:c9:92:a0:23:e1:5e:2b:8e:32:bd:a0:2e:
         4f:2b:c4:34:6a:31:3f:11:f8:89:08:0b:89:2d:71:0f:6f:2b:
         3b:e9:78:e4:48:8d:88:72:aa:72:22:16:d2:00:79:c0:61:5a:
         18:9a:61:31:f4:e5:42:fd:71:e0:a1:4b:11:8d:8f:fd:b5:cc:
         c0:c1:56:34:c8:0d:ef:10:84:f7:64:4b:81:74:14:91:d0:9a:
         ff:e8:2f:23:7e:b3:29:93:45:a3:cc:2c:96:d6:f7:29:6c:ba:
         93:4b:de:ae:e0:7f:5a:2d:df:83:8e:dc:89:16:ea:ee:20:1a:
         9b:11:35:7b:d3:30:24:b7:30:f0:81:bf:bb:a2:8e:b1:8d:fc:
         b3:7c:be:86:bf:72:e1:d4:59:79:90:72:e9:32:f0:8d:d9:dd:
         26:f2:3c:56:ea:4a:6f:a8:3f:f5:45:32:9c:8a:0a:fe:1a:0f:
         ff:d7:5c:21:ed:fe:d3:34:cc:1d:b5:fe:8d:15:9a:e5:76:2c:
         f2:9b:28:f0:5e:a1:ca:6a:13:ea:0a:95:2d:26:dd:84:3d:44:
         11:f2:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:40 2025 by rpki-client