Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa
File:                     8121e307-0662-3011-9f73-836d87b97545.roa (raw, json)
Hash identifier:          ZRsrPtiyKcQ4EYOP9Y3gA8TkFTVShxrD3JsZEV41i1c=
Subject key identifier:   FF:AE:1E:0F:6D:A3:F6:F4:07:D9:EE:FA:D7:74:A4:21:DD:5F:19:C0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE42A50900E9B93027D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e4:2a:50:90:0e:9b:93:02:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=33e4aed7-d5f6-43e6-a038-1cc584b0674a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:24:76:71:1d:ce:db:0f:11:c7:ed:1b:4e:99:
                    a2:92:4f:9a:c5:1e:08:b1:d4:85:a9:0e:b0:c5:12:
                    c8:91:dc:f9:3f:c8:d5:22:c1:0b:a7:e6:31:cb:ea:
                    6a:bd:97:fa:62:77:4a:2a:e8:76:eb:51:05:67:58:
                    71:0b:cf:63:59:78:3f:33:3a:88:4d:0a:7c:eb:5d:
                    b6:c7:1f:53:ed:ed:05:9d:5e:c9:71:01:94:74:11:
                    c8:a0:88:11:30:c0:93:8f:e9:43:f7:cb:bf:f0:99:
                    f6:ac:49:5f:76:8d:4f:55:bf:6e:fd:a4:fe:30:94:
                    f2:80:ef:46:6c:d8:ab:f4:31:ba:a5:4b:ea:da:9e:
                    bd:26:c3:65:4a:c3:a1:d8:45:ed:92:50:9f:07:9f:
                    d8:b0:ea:de:c2:1b:b5:77:32:73:e2:7f:1f:83:42:
                    1b:d6:2b:51:3c:0d:7e:77:36:1a:93:48:ad:b8:45:
                    e5:f8:07:a7:b1:67:0e:db:be:30:12:14:6b:46:fd:
                    19:ce:be:06:1e:99:e9:12:29:89:3f:4e:51:b6:1c:
                    20:e9:9d:a8:f6:a8:ad:15:52:3f:cc:6a:89:58:53:
                    bf:09:d0:4f:4e:5e:99:e6:79:4c:56:9a:dd:c0:e4:
                    5c:bb:c6:7b:06:28:a9:8f:06:be:79:13:4a:b8:97:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AE:1E:0F:6D:A3:F6:F4:07:D9:EE:FA:D7:74:A4:21:DD:5F:19:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:2b:9e:ed:83:5c:a8:e1:b4:14:f6:19:30:5b:f0:fb:32:
         80:ba:2e:ae:13:7b:1d:fa:23:e8:ed:17:50:64:78:a9:20:3d:
         6d:e1:6e:af:10:c3:2f:f1:00:7c:92:a1:aa:95:2a:c5:54:fc:
         e1:5a:76:1a:94:e6:03:e0:a9:e5:d3:84:cf:d2:e2:68:6b:8c:
         24:1c:23:fd:6c:75:16:e9:94:e5:43:45:10:5e:df:a0:56:51:
         00:43:7b:99:28:4c:8d:c9:df:9c:44:06:13:f3:09:96:37:53:
         05:df:b8:f0:28:2d:b8:29:e8:9c:a0:fe:a6:71:3b:65:ae:6e:
         b1:cf:3e:4d:23:70:39:0d:7e:77:87:30:58:e2:ec:02:b3:43:
         2c:5f:5a:5f:75:86:f7:e4:a3:c3:1f:9c:8e:e3:ab:d9:77:48:
         55:8e:0f:a2:e7:fd:41:69:30:0d:cd:3a:fb:10:fe:a8:36:f8:
         1b:af:cf:90:cd:23:e9:d5:94:01:9a:ba:33:75:fb:bf:be:88:
         6b:b4:1e:bd:f3:c7:b8:89:b2:73:23:e4:62:51:d8:20:cd:60:
         ac:27:41:a4:ef:74:7a:ca:4a:be:2f:71:79:71:c7:ee:e1:8b:
         13:4a:2e:dd:8d:38:25:8a:b5:ab:60:67:19:20:1f:e5:2b:69:
         40:db:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:06 2025 by rpki-client