Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/976fe92d-dd5d-31b7-88e5-545d5f89498c.roa
File:                     976fe92d-dd5d-31b7-88e5-545d5f89498c.roa (raw, json)
Hash identifier:          ejuskLgDqvaRYX+lmBg2/gWZSLSfPnegAinwU0x5mM0=
Subject key identifier:   1F:10:5D:CC:16:33:A4:63:1C:2B:7E:8B:BA:39:6E:C6:DD:C5:AA:34
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD2CF66E24FB0AEB81C1C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/976fe92d-dd5d-31b7-88e5-545d5f89498c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:2c:f6:6e:24:fb:0a:eb:81:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=12db384a-7980-41f4-9a48-78d3bdac710d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:a9:20:37:21:92:49:97:55:60:8d:38:a3:
                    22:82:22:e6:cb:82:47:bd:f3:10:79:44:f8:c5:79:
                    d3:1b:e4:77:77:10:63:3a:b5:d9:86:d5:ab:ea:9d:
                    f7:72:b8:42:01:84:05:9a:61:57:c3:db:83:5a:b7:
                    87:9a:b5:1c:ed:b4:be:9b:50:4e:55:1b:05:07:12:
                    53:d4:2d:e8:ae:8e:3f:99:1c:b8:c1:a3:bc:3f:4d:
                    fd:9a:1d:e8:4b:3a:33:da:c0:f3:76:57:8e:be:b0:
                    7c:f5:52:81:fe:50:4d:97:d1:d6:13:f3:90:ca:b4:
                    d5:4c:7a:13:b9:49:9c:97:5a:28:fd:67:36:63:0e:
                    41:3c:d6:b9:ee:8b:d5:9c:7c:5f:fd:b2:31:e7:51:
                    ba:de:1f:47:d7:78:9a:98:42:60:86:04:d3:e8:b5:
                    7a:ee:07:f7:36:7b:b0:4e:bb:bd:5f:88:a9:56:4e:
                    29:7b:b4:e9:58:9f:94:1f:c7:29:af:7a:e3:a5:7b:
                    97:05:70:f2:3f:e6:6f:03:7f:46:19:56:14:e0:45:
                    1c:d0:1d:6a:11:3b:a4:47:f1:05:ff:ed:ee:ee:bb:
                    63:5f:30:7b:02:96:ae:f0:fc:18:83:6a:55:ac:bb:
                    83:fd:53:1f:de:32:b1:b6:14:6c:88:a4:5b:0e:59:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:10:5D:CC:16:33:A4:63:1C:2B:7E:8B:BA:39:6E:C6:DD:C5:AA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/976fe92d-dd5d-31b7-88e5-545d5f89498c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:41:87:60:49:b2:31:d1:21:07:98:a4:c6:92:a1:7e:f3:
         53:8c:8e:82:61:ff:e5:b4:e1:8c:21:b9:7d:bc:5c:f9:4c:c7:
         59:5d:c2:7e:9a:65:57:09:bf:26:05:e2:d4:cc:72:20:4e:08:
         92:9f:9b:22:e0:65:63:a6:4e:a2:8e:d5:f2:99:58:02:ae:e1:
         f3:c3:51:ae:cc:f0:98:73:43:33:e8:58:d7:6d:b5:72:26:d6:
         71:34:1a:4e:fb:52:e9:01:91:4e:6e:71:5b:8d:d7:88:ae:aa:
         fc:5d:2e:e1:67:b7:d4:22:b3:aa:de:28:48:f9:da:94:53:31:
         67:11:03:c4:09:38:0b:b4:b7:f9:1e:46:fa:29:cc:87:45:93:
         2e:31:f6:81:74:28:3f:7c:f7:cf:b7:48:9c:26:55:ec:0f:56:
         a7:d5:0c:e5:e6:e9:bd:9d:e0:e1:a7:15:55:b3:f1:78:7a:ce:
         fa:b0:87:36:29:13:1f:e1:54:9b:fc:78:19:18:ef:85:d8:e2:
         84:f6:8f:a5:f0:b0:3c:a6:21:79:73:94:d2:b6:1f:0e:af:cc:
         a5:e4:d7:cd:3d:f0:db:43:8e:75:bd:49:e9:cf:81:67:1b:f0:
         c1:5f:61:2c:8b:a3:3b:fc:d4:d3:64:b0:e6:72:0c:74:e6:ad:
         6e:1e:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:25 2025 by rpki-client