Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa
File:                     9955a230-31b9-3682-979e-f08e04a1df4d.roa (raw, json)
Hash identifier:          G4Ti1qvOb32+ZUZ3/2RixgpZSDcGOQWLZeF0PNtYvQc=
Subject key identifier:   D2:7E:34:0E:3E:73:0E:44:83:17:D1:E6:21:59:04:5D:BA:5B:72:78
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD8E54CDC991A9FC46D880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:8e:54:cd:c9:91:a9:fc:46:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ae66333e-b35e-4ee1-a4f8-4b9d38be0701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:5c:7b:08:b5:ae:ab:05:2f:44:c6:b1:0b:
                    55:56:97:fc:28:3b:3c:c0:32:c9:6c:63:da:83:9f:
                    1c:5f:1e:74:15:0d:6a:ff:c4:06:30:75:97:0a:34:
                    0b:db:5c:02:f6:36:49:3d:ad:0d:ba:52:2e:85:15:
                    b2:15:ea:15:4f:41:83:4c:31:3d:c7:ff:a3:b1:76:
                    94:fc:6e:c7:86:99:c3:13:98:6d:e9:0e:f2:2a:25:
                    73:7b:a4:0d:32:1d:61:d2:7f:d4:2c:2d:9c:cd:25:
                    c5:ef:7f:85:c4:3d:64:cb:b3:27:a3:83:79:0d:b6:
                    b8:51:8e:76:2e:b1:30:bd:28:b1:67:e1:90:89:b9:
                    95:ed:cd:65:ef:e6:0c:e3:58:07:59:78:f2:7b:ee:
                    5a:32:5d:41:a8:5f:46:37:f6:ad:d3:54:5a:17:07:
                    41:f4:be:cf:41:2d:e0:94:77:3c:fe:d2:c0:23:77:
                    f5:f5:5d:51:76:4a:29:fc:b3:a9:6f:23:2f:85:53:
                    8b:c0:b8:e1:5d:9c:4a:c9:3c:ee:9c:9d:81:a7:14:
                    6a:ec:f7:7a:dd:9c:82:22:b6:1a:41:3c:fb:76:7e:
                    51:8b:85:04:c2:6a:1a:09:36:23:8c:2a:a5:80:8f:
                    13:5f:4d:7b:42:5a:b0:b9:ab:c8:f9:ed:fe:f9:c3:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7E:34:0E:3E:73:0E:44:83:17:D1:E6:21:59:04:5D:BA:5B:72:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:b1:2a:44:1c:ad:9b:36:71:ae:ed:43:a3:9f:3b:cb:d2:
         f7:6e:91:ae:c8:bd:ae:ca:80:2c:38:9c:4e:d8:9f:89:9c:50:
         b0:15:5c:1b:16:fe:e1:2a:21:3f:74:97:3c:2c:51:a7:e6:95:
         6f:65:1b:50:e6:b2:14:9d:b9:1a:94:34:9e:a9:80:be:c6:14:
         96:cb:f4:5b:56:63:83:d8:36:eb:ce:24:8a:c1:10:67:89:15:
         f2:99:8a:40:e2:6a:f0:e5:b1:56:2a:96:b2:4e:32:f7:e9:a4:
         2b:94:a7:09:f8:bd:d8:96:5a:23:f9:13:19:2a:32:e0:00:5b:
         93:58:00:2c:b0:c4:b9:c6:e8:c4:f9:32:29:52:02:48:1c:86:
         34:79:eb:df:c3:50:74:a2:82:42:3a:a6:83:3f:79:95:13:af:
         f9:4b:da:32:c4:6c:94:04:79:dc:c1:a1:71:5e:6b:3f:ff:b8:
         a5:64:4a:f1:b8:8f:3f:77:24:79:86:f7:8b:5d:a7:63:c6:97:
         1a:1f:eb:eb:65:a1:4f:ce:ac:ea:20:f1:3f:e5:25:e6:fa:d7:
         5f:3e:71:e9:25:02:3d:db:ee:84:1c:41:ff:70:28:72:5d:d0:
         66:ee:b6:5a:d0:82:37:c4:42:73:26:65:2f:f5:e3:12:26:ba:
         4d:d9:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:15 2025 by rpki-client