Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/942ed01e-8cc8-33d0-9cf0-26fd675a6ed9.roa
File:                     942ed01e-8cc8-33d0-9cf0-26fd675a6ed9.roa (raw, json)
Hash identifier:          FAMzc8fl7Ls2xHWun+qpJ+fPFZtl6Vh4WeHPBJmELyg=
Subject key identifier:   1F:DF:17:D1:84:1D:EC:AD:39:A6:7E:EA:0C:EA:99:B5:C6:AB:0F:33
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE04CB00F24F57C19C9EC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/942ed01e-8cc8-33d0-9cf0-26fd675a6ed9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        198.45.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:04:cb:00:f2:4f:57:c1:9c:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f4de98d4-717e-484a-a011-dc75724e3db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:15:46:d9:25:f9:a2:2b:ae:4c:39:6b:8a:cb:
                    d1:43:df:70:4a:71:50:e8:53:f7:09:51:50:b3:58:
                    1e:07:f6:71:dc:de:6e:50:5f:cd:0b:64:71:11:dc:
                    13:58:e1:93:80:f5:23:17:a4:8c:6a:43:d5:af:d9:
                    9a:8b:a3:fc:fb:9b:2c:23:a5:d3:fe:cb:8b:1b:64:
                    92:cb:86:c7:f4:f3:5e:00:90:d2:b4:e7:ba:48:da:
                    db:63:ca:4a:a6:11:31:4e:82:a0:72:a9:8f:1a:c4:
                    6e:0b:94:e8:14:9f:8e:75:c4:58:c5:2e:18:e8:5e:
                    44:8a:3f:b3:78:79:7a:20:fc:51:a4:76:79:96:f1:
                    e9:a5:07:65:66:33:42:96:47:cf:a6:e8:00:2b:fa:
                    86:45:60:22:b0:89:a5:b1:99:75:44:4c:de:49:af:
                    55:7e:0c:0c:c2:81:5b:10:73:0f:8d:dd:0f:cc:c9:
                    cc:e5:96:3e:9d:23:ec:18:76:95:b9:91:2a:a4:60:
                    a3:a9:99:75:25:0c:a1:1d:26:f9:95:bd:ca:f2:50:
                    49:fb:b7:e3:ca:e2:0d:00:4d:b8:2d:6f:c7:99:31:
                    61:2f:15:13:87:a1:05:da:7d:63:d3:71:18:70:f1:
                    96:f8:95:67:59:ea:dc:f0:a9:6c:84:1f:e8:da:45:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DF:17:D1:84:1D:EC:AD:39:A6:7E:EA:0C:EA:99:B5:C6:AB:0F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/942ed01e-8cc8-33d0-9cf0-26fd675a6ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:37:da:85:22:ad:b6:9a:b0:d3:7b:e2:af:2e:52:18:80:d6:
         a4:5a:58:5d:76:bd:54:74:d4:53:36:ae:2c:0e:4b:86:ea:a5:
         20:3c:0e:a0:8f:be:07:08:78:8e:0b:a1:4a:0a:1e:7d:24:2a:
         a9:c1:e6:a0:88:af:27:9d:8c:d0:ab:7a:ce:d2:8c:99:57:17:
         62:cf:20:8e:73:4f:ea:b0:02:fd:c0:18:5a:0b:64:02:64:c8:
         eb:36:57:c5:a3:99:ac:c1:1d:c6:52:71:c4:7c:64:56:a2:b1:
         1d:22:e2:8b:a3:23:91:8e:35:36:67:2e:46:b6:b4:38:c2:b3:
         79:9b:46:82:3d:96:a3:54:53:e9:96:4d:d0:00:84:3c:79:43:
         2f:a8:60:45:9b:b3:e8:12:12:ec:08:ee:f6:92:d4:0a:93:e6:
         a2:a5:7e:54:2a:68:4a:8c:44:df:98:9f:63:8a:4c:b6:03:cc:
         34:a9:09:27:fb:24:db:9d:c4:a8:02:af:01:8a:ac:4a:47:51:
         1a:5b:09:a6:29:a7:8a:cf:d2:4a:63:90:6c:56:f3:15:ae:61:
         3c:5b:58:9d:9d:c4:1f:98:40:06:17:c8:bf:83:9b:a3:fc:b2:
         a9:19:12:80:2f:e2:0f:6d:4f:82:7d:75:d0:f9:7e:86:8e:41:
         bb:a5:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:04:45 2025 by rpki-client