Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa
File:                     993ad79a-98a2-3187-8b24-728cada43a62.roa (raw, json)
Hash identifier:          +IA83eIOS3LnXCT+/cl+ixjljqmaPyvCaLgwz+gHcvA=
Subject key identifier:   F4:D8:77:76:F1:9F:79:93:89:6E:CA:78:CC:4C:F6:C3:A1:9E:5F:A6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9057CAFEA7A3B28B4F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:90:57:ca:fe:a7:a3:b2:8b:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ab99c26d-3849-4b65-bf2c-546ebfd4c88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:64:1b:6c:dd:2e:d1:64:68:d0:5e:e8:f5:
                    46:39:e1:1d:46:73:ec:2e:63:ed:49:26:c5:7d:fd:
                    25:fe:c5:87:99:00:ca:22:54:8b:a6:c8:39:c9:73:
                    67:7f:25:0e:45:eb:ad:48:b3:c2:89:c1:ee:c4:f3:
                    9e:e5:ce:60:4a:77:c2:71:5b:39:2a:44:18:d2:58:
                    e9:31:1a:bb:81:46:f9:95:f8:91:0c:20:64:91:59:
                    54:3c:3e:d3:b7:cc:75:51:ec:27:a0:42:8e:d6:b6:
                    47:d3:3c:f4:1a:08:57:77:c0:9e:62:22:12:c5:17:
                    e1:27:81:9a:08:d7:fb:9b:e2:62:e2:66:50:b0:2f:
                    21:b7:e0:13:99:1d:39:69:73:48:3b:a2:10:a5:ee:
                    8a:a5:54:69:0c:f1:38:4d:81:a2:3e:b5:b4:f1:38:
                    73:80:8c:80:12:95:99:d8:5b:c0:e6:17:4b:60:30:
                    b1:8f:b1:87:0e:e4:c0:45:61:5f:eb:62:59:a9:79:
                    c4:be:9f:cf:0d:4f:92:9d:08:13:37:7b:f8:c1:e5:
                    51:37:69:10:ea:66:aa:6c:58:ba:d0:7e:45:bc:0f:
                    00:46:12:c2:47:df:33:aa:05:53:f4:47:0f:93:60:
                    13:62:2f:5a:47:83:93:4c:42:90:b6:29:25:65:ad:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:77:76:F1:9F:79:93:89:6E:CA:78:CC:4C:F6:C3:A1:9E:5F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:23:de:b1:0e:90:24:b7:82:ae:96:5a:78:5f:56:17:26:
         9e:8c:35:ae:1d:01:13:d6:72:16:6f:27:9e:45:bb:38:3e:a3:
         52:91:a1:bf:e0:a2:19:bc:94:6c:76:33:fa:56:c4:97:96:8d:
         d7:03:15:0a:27:2b:d5:d8:44:13:9a:ea:39:14:59:2f:89:28:
         4c:48:00:f6:4b:65:06:b2:b2:7e:72:36:f0:0f:ce:2a:0a:42:
         ea:b3:18:38:8c:6c:34:04:28:10:1d:99:ab:c0:f4:d3:a5:fb:
         3f:35:05:26:30:81:2f:c2:bd:ec:74:d3:c0:aa:97:fa:5e:23:
         b9:70:17:61:cb:8f:9c:b1:07:52:73:c3:e7:22:50:e2:9f:36:
         be:6d:77:eb:6d:90:37:38:64:22:e4:aa:b2:a1:b7:3d:51:31:
         8d:81:a7:ef:fc:3f:33:02:ee:0e:24:21:14:47:02:2d:c6:f3:
         5d:19:49:04:16:37:85:60:fb:3c:c4:f6:11:66:15:f3:c5:fe:
         a1:60:b9:2f:92:e5:12:c2:b8:47:f0:88:cd:07:fb:5e:b3:de:
         9e:be:94:68:bb:6a:41:4b:36:79:11:07:cc:ab:e7:41:6e:f8:
         ad:5e:13:bf:ca:b2:3d:b2:01:5d:7d:8a:2b:5a:ed:af:c1:23:
         9b:18:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:33 2025 by rpki-client