Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f4d0686-d481-358e-afdf-d88b8f66d688.roa
File:                     8f4d0686-d481-358e-afdf-d88b8f66d688.roa (raw, json)
Hash identifier:          kgbkA0/QUHToOd1GZfWppd+9UrCPT83pXDOGHpfWP2M=
Subject key identifier:   BE:D3:1F:87:95:D7:3E:D9:0C:AE:7C:76:32:B5:3B:A1:A4:42:9E:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDCF11E7995ACD9B0AD240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f4d0686-d481-358e-afdf-d88b8f66d688.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:cf:11:e7:99:5a:cd:9b:0a:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=07a85c1e-3811-4b36-bd22-8e5b2daccdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:4d:9e:9d:87:ac:03:67:57:1f:8f:f7:8b:
                    27:41:65:9f:c2:d7:9a:af:24:22:0f:fe:c7:42:a4:
                    7f:6b:c4:5a:23:fa:dc:7a:e5:31:92:f4:75:76:7f:
                    11:bc:d6:01:12:97:a7:56:00:41:21:8e:a0:cd:a6:
                    d9:52:73:9c:16:d8:f5:79:b7:f8:36:aa:60:54:97:
                    41:53:fd:db:21:b6:09:00:a1:7e:02:c8:82:c9:c4:
                    a0:bb:cf:69:c8:fa:4a:68:34:15:6a:a2:c6:dd:4a:
                    f5:9b:3a:0e:8f:e5:72:f7:f2:0e:2f:76:05:2b:43:
                    c3:5f:a5:36:52:15:db:e1:df:79:9c:55:79:fa:d1:
                    74:7d:f6:40:85:9a:33:db:d2:1a:06:9b:b6:c4:ba:
                    ec:e8:40:47:7e:94:a6:50:73:30:44:d4:fe:08:fc:
                    f7:76:88:68:45:8f:96:10:de:5f:0f:08:69:e7:62:
                    c3:31:52:8a:1e:69:e0:ce:45:23:16:e3:34:ba:6a:
                    df:3e:cf:46:bc:bf:b8:0f:9f:c8:51:ea:db:b1:cb:
                    74:9e:cc:4e:a1:3f:75:56:4a:f3:54:1a:1a:39:c8:
                    cf:8f:89:c5:73:1a:6f:99:9d:0d:48:f6:47:62:64:
                    30:b3:7c:c1:83:6a:dd:f1:88:11:33:f7:38:2a:8e:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D3:1F:87:95:D7:3E:D9:0C:AE:7C:76:32:B5:3B:A1:A4:42:9E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f4d0686-d481-358e-afdf-d88b8f66d688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e8:1d:eb:c2:42:0d:8d:4b:7a:7a:8b:b1:52:93:d3:7f:01:
         de:a1:e0:e0:3c:e2:ae:03:42:5d:3f:09:c9:06:77:21:ca:38:
         de:d6:16:8b:67:00:e3:23:13:ea:2b:f0:d6:25:88:c1:26:85:
         9f:d6:82:0a:e3:3d:f7:f1:59:e1:e4:8d:a6:ab:a8:a2:5d:ce:
         56:71:0c:54:f8:b3:98:79:b3:a5:97:45:ae:91:3b:aa:cb:58:
         4d:fe:9e:4d:b1:98:4c:99:11:0f:ac:66:36:80:e4:05:8b:ae:
         b6:3f:a8:b4:24:9f:ec:02:dc:95:e5:f2:66:b1:b1:4d:28:7f:
         b0:1b:d9:3b:a0:83:74:91:b8:55:83:ba:38:3d:d7:f2:2d:85:
         12:c3:b8:a4:9a:92:b7:b0:d7:cb:6a:69:70:7e:5a:33:11:ff:
         25:86:50:8d:5d:8f:3f:ca:db:09:b5:20:74:f8:32:eb:d5:4b:
         e7:6e:3a:10:5a:a7:ca:7a:c6:f1:ab:16:e9:47:55:61:3a:f6:
         9d:54:26:12:75:4e:e9:84:83:89:b6:62:d2:10:b7:b0:79:c2:
         d8:ba:a6:e7:6d:98:9f:f3:37:f9:e6:fa:12:9d:b2:03:26:ef:
         b8:96:81:6d:b4:41:90:44:9d:1e:19:8d:11:6c:64:18:27:40:
         27:02:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:30 2025 by rpki-client