Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8064f14c-b8ea-3143-9570-62c3c6a4da02.roa
File:                     8064f14c-b8ea-3143-9570-62c3c6a4da02.roa (raw, json)
Hash identifier:          GlIxIsRgW4ZdIP6gUKstMyPHCfX6erRhjRNEYVVe2Qo=
Subject key identifier:   D5:C5:F0:AE:BC:C5:55:9D:5D:9D:D5:C0:45:41:A1:7A:20:4A:4E:75
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDF7345C94C4C39B830080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8064f14c-b8ea-3143-9570-62c3c6a4da02.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:f7:34:5c:94:c4:c3:9b:83:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e4816826-c910-44d7-a767-d0c434c14b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:30:2a:c4:50:7f:03:01:93:69:6f:08:d7:3d:
                    46:dd:36:b0:e1:f1:fd:47:4d:86:de:66:79:12:6d:
                    62:f0:9a:8f:a3:03:d3:cd:68:66:d4:d2:7c:64:5e:
                    9e:07:64:cf:9f:cc:20:45:b2:1d:a6:d8:76:01:d3:
                    94:ee:cf:7b:be:36:26:36:e1:5f:28:e4:65:6a:13:
                    98:83:22:7f:32:bb:80:98:1c:8f:97:f3:1c:80:23:
                    69:d3:a4:f7:31:bd:12:15:b9:01:92:03:a7:a9:1f:
                    67:83:0d:39:63:27:bc:88:ef:c8:6c:96:9e:fe:a4:
                    f3:58:7d:18:47:55:bc:fa:51:98:97:3b:6c:d8:f9:
                    e0:55:e8:4f:6e:d3:18:c5:15:3c:83:48:19:72:c7:
                    8c:3b:3b:08:9a:32:db:26:2f:ae:d6:b0:e5:a5:e0:
                    50:a7:f6:22:c6:d9:86:b7:ed:2a:b5:2c:26:85:fe:
                    7d:82:7d:1d:95:dc:8b:2d:90:68:7a:e1:fd:17:c2:
                    74:25:7b:77:9f:e2:23:91:2e:29:42:35:28:e5:99:
                    c7:51:2d:21:f0:1a:d3:d1:26:8a:2d:73:4f:21:9e:
                    cf:f8:ca:11:2c:de:9f:c5:38:ff:9e:7f:a2:1e:d4:
                    f0:ff:0e:56:bf:92:65:23:97:ce:90:9b:5f:85:b3:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C5:F0:AE:BC:C5:55:9D:5D:9D:D5:C0:45:41:A1:7A:20:4A:4E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8064f14c-b8ea-3143-9570-62c3c6a4da02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:81:5e:bb:2e:80:fa:70:b7:d4:bc:ba:85:8a:d4:8b:e3:e2:
         b1:e6:b2:84:ab:b1:71:b7:c6:17:77:8c:7f:c6:01:c0:17:be:
         37:2f:5d:a6:c4:d7:e9:04:5a:de:07:58:15:a0:a1:51:e0:09:
         38:1c:ca:fe:b5:02:3e:67:b9:76:98:92:93:66:34:5e:60:bf:
         71:46:c0:19:50:9b:66:94:80:9b:9d:fb:a2:80:33:fd:6c:14:
         57:b7:ac:25:0a:5b:90:6d:b5:a1:90:45:1d:bd:c8:5e:18:18:
         cb:de:bb:8c:8e:7b:59:bc:bc:28:fa:6f:cb:aa:dc:a3:18:4b:
         2b:20:4a:19:08:23:79:9f:56:48:07:07:82:d1:1b:94:b1:af:
         f6:ad:a4:98:ed:31:33:30:a7:8a:26:82:e9:e6:d0:13:e0:b8:
         17:0f:00:11:7e:bb:22:69:44:59:12:d0:dc:db:db:ec:a5:85:
         26:60:68:ea:8c:4e:91:db:0a:4e:1c:fe:a2:3a:ad:3a:45:97:
         12:12:aa:81:a7:98:e6:0d:ed:a4:fe:1f:fb:2f:a9:93:4f:8d:
         71:01:21:dd:8c:df:2a:6d:b3:72:df:f7:61:b0:d4:0e:1d:13:
         4b:37:e7:ed:d1:cf:58:25:9b:fe:dd:e6:d7:58:c5:c2:77:06:
         fe:be:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:34 2025 by rpki-client