Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa
File:                     7f7b1408-84ff-37ca-8b92-a380aefab40a.roa (raw, json)
Hash identifier:          2MtS7vcSRsU1qFdR4jH5dBMaGQzB3JucI0kd89dXeRs=
Subject key identifier:   28:51:C6:6F:47:3A:7C:BD:A4:58:3C:5C:A7:D0:53:51:48:FC:AA:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD37DB8AFE45B26DE6EDC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:37:db:8a:fe:45:b2:6d:e6:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=cb7138f9-aa6e-4323-905f-d059ff0fcbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:b8:e4:ad:22:39:6d:a2:75:6f:77:8a:85:
                    36:e4:6f:2d:fd:20:79:b3:0e:02:40:60:3e:c8:64:
                    4b:50:25:de:07:70:80:d2:19:2a:04:de:5b:23:a6:
                    f3:dd:a2:f5:94:f1:e9:c1:b1:f2:26:95:4c:4f:9a:
                    4f:7a:28:5d:ad:70:06:ae:0e:b0:3f:a9:cb:96:26:
                    53:6b:60:e6:13:2f:13:31:fa:c0:e0:b3:02:80:a9:
                    59:73:81:9f:ab:8d:dc:59:30:4a:02:f9:bd:ee:bf:
                    ef:0a:cd:a9:e0:e9:2b:79:fe:86:e6:e9:c9:08:8a:
                    aa:1a:78:93:e9:b0:96:33:ef:4f:0a:2c:21:93:b6:
                    b4:5a:73:06:7d:b4:87:95:f9:73:9a:ef:dc:85:1a:
                    8b:91:21:55:14:f1:f3:99:6a:fe:a9:6f:ea:e0:e3:
                    d8:2e:93:7f:6f:de:b0:30:ea:80:58:bc:c6:98:23:
                    de:44:99:db:da:4b:99:fd:2d:9f:15:fe:c4:d3:58:
                    94:a4:14:64:71:27:8a:a9:b4:d1:d6:63:d2:73:00:
                    73:48:ce:5b:96:7e:86:f4:51:98:08:bb:d3:df:cb:
                    07:b2:ea:77:1c:a5:ab:88:ff:e3:e3:3e:4c:6b:98:
                    75:d4:b5:d1:52:1c:37:d5:01:a2:fa:18:fd:85:0f:
                    e5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:C6:6F:47:3A:7C:BD:A4:58:3C:5C:A7:D0:53:51:48:FC:AA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:5a:b4:f3:6d:d2:ba:b0:8e:c9:e4:d8:11:2e:60:8c:53:e6:
         01:65:ea:8c:0f:5f:94:4a:6c:1c:66:3b:ec:92:7b:58:0b:f0:
         22:be:6f:a7:e3:7a:dd:8a:9a:dd:79:ce:93:da:e6:32:ee:9c:
         3b:f9:9c:30:83:aa:91:f8:ed:12:f6:df:e0:f1:5e:b3:8a:7d:
         85:54:17:12:ee:e8:27:77:a7:bc:62:d9:b1:87:39:04:c0:b2:
         25:fa:0f:2d:c6:6a:cb:e9:da:bf:92:d2:d5:71:43:d6:e8:99:
         3c:86:ca:85:6c:b9:dc:ae:c3:7e:5e:d8:f7:bc:3c:63:a4:5a:
         7a:d4:7a:77:d4:b7:0c:48:75:98:05:21:68:80:70:a5:41:83:
         1e:e7:32:48:42:80:fe:f5:a2:93:b2:80:53:6f:55:0f:4e:c3:
         a3:8a:72:23:09:aa:48:08:5d:a9:c8:64:dc:94:e7:74:df:02:
         68:c1:ca:b5:c4:f0:9a:e5:cb:7b:1f:13:3f:10:df:1b:b7:5a:
         65:11:20:47:9a:6c:c0:6d:2d:b3:07:bf:9a:bf:52:af:43:79:
         3f:b4:24:f2:f4:b2:f8:c0:cd:a4:d2:cf:8a:31:00:ff:78:b4:
         24:c1:9e:9b:2c:bc:10:09:b1:f7:53:ce:12:a2:68:e8:be:5a:
         1e:10:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:17 2025 by rpki-client