Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f531aa3-78f1-3f4f-bf6f-1168708beba9.roa
File:                     7f531aa3-78f1-3f4f-bf6f-1168708beba9.roa (raw, json)
Hash identifier:          lFQPzfykFdJx8ltiDV7PTkiq3y5epxulIvVLdyemNZk=
Subject key identifier:   29:BA:6F:CB:B3:1A:89:BA:70:3F:A3:D1:02:7B:7A:F2:E1:61:8D:D9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD11F3F1E50AC655A63600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f531aa3-78f1-3f4f-bf6f-1168708beba9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:11:f3:f1:e5:0a:c6:55:a6:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ffa5274d-346d-452c-b35d-a76143be52f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:31:77:c4:0f:04:76:de:98:1f:2e:ed:4c:
                    7f:17:41:fe:c1:19:3b:71:5d:cb:c1:eb:ef:dc:f5:
                    7b:7e:c9:18:da:32:ca:12:20:22:75:f9:d7:ce:56:
                    61:c4:e7:46:00:8c:3a:57:99:d2:77:0c:9c:01:fa:
                    83:e8:65:42:08:06:20:dd:fd:d4:4a:9f:86:54:64:
                    7c:50:75:0b:ef:a0:4a:ea:1a:07:af:cd:65:ba:13:
                    99:26:fd:16:13:6a:02:d8:13:24:cc:c5:a6:4c:93:
                    ed:53:ea:7e:06:38:39:dd:4d:58:5f:b2:2b:46:ad:
                    8f:2d:9a:fa:35:9b:0a:47:1c:26:84:6c:1e:42:70:
                    cb:ef:d0:0f:d5:c5:34:8d:f8:8c:2d:c9:dc:d9:e3:
                    b5:0f:4d:f6:c4:10:8a:38:ec:1d:8c:78:91:1f:a4:
                    bf:75:b6:3e:fd:1e:a9:48:84:37:d5:51:4b:6d:5f:
                    0a:80:92:18:77:b9:f3:43:5f:64:3f:98:84:5f:5c:
                    f2:37:9c:af:5c:07:da:8d:19:03:72:c2:67:92:55:
                    12:c5:d5:67:ec:1f:ec:79:9f:0a:9e:96:04:8f:c9:
                    64:8a:5e:18:c3:4b:fb:03:a0:0d:d8:0d:be:52:54:
                    fa:60:61:9a:bb:41:be:f0:32:67:31:c5:5a:db:d3:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BA:6F:CB:B3:1A:89:BA:70:3F:A3:D1:02:7B:7A:F2:E1:61:8D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f531aa3-78f1-3f4f-bf6f-1168708beba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:31:52:4d:7c:4c:51:84:c4:d2:a6:ec:1c:ab:fb:da:9b:fa:
         d6:a4:62:ee:5f:1d:1a:1d:54:f1:75:99:bb:79:46:21:cc:a7:
         61:43:49:83:ed:40:00:81:43:b7:70:0f:04:de:3a:bb:52:2d:
         26:da:fb:37:c1:52:06:fd:84:04:f6:dc:e3:bc:a4:b6:cf:ac:
         25:b5:44:7c:88:b9:42:23:3c:15:49:96:6b:a1:24:ab:38:c9:
         01:e1:b9:1f:58:95:a3:c2:87:9c:10:3c:03:35:f5:04:59:8d:
         64:f3:b0:ca:bc:c1:20:8a:9c:37:f0:85:00:33:da:24:df:ad:
         c2:db:41:32:57:56:81:a8:a6:2b:b2:32:32:e3:e1:c2:97:b5:
         fe:1a:4b:d4:30:d7:ed:48:62:5d:5b:e2:c7:96:75:2a:d9:4a:
         97:43:2e:ba:b8:ce:e8:79:33:77:4b:3d:66:5d:58:c5:7d:9c:
         1e:6c:c3:4c:ce:91:f8:84:f3:ce:8e:bc:9e:cb:6a:f1:02:d3:
         a6:44:eb:ee:2c:93:5d:eb:0a:3d:93:34:f7:da:57:a2:2d:0a:
         93:17:e8:06:15:fd:32:eb:70:ea:c1:1a:66:ce:ff:72:1a:aa:
         aa:3b:50:ad:9c:eb:78:c7:52:46:06:58:63:66:fa:e0:09:83:
         dd:af:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:54 2025 by rpki-client