Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9a78339b-24f4-3e34-814e-c78be0c627b5.roa
File:                     9a78339b-24f4-3e34-814e-c78be0c627b5.roa (raw, json)
Hash identifier:          lu3CBVWl/sVoA7s9EThVl1BAkhBCZITPowHcQ23M78U=
Subject key identifier:   4B:E1:1E:E7:08:B3:02:E5:0A:A6:12:39:D7:BF:7E:E1:8D:06:E2:E4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD293F92512621A9AD9E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9a78339b-24f4-3e34-814e-c78be0c627b5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:29:3f:92:51:26:21:a9:ad:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=555e7702-3d53-4b63-b7f9-b469989d2942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:72:50:46:76:ea:7d:92:fb:2a:78:a5:36:
                    e7:03:46:41:49:2e:e2:54:fe:cb:b0:91:db:1a:74:
                    1b:ea:a0:2c:16:57:12:be:55:88:75:ba:80:54:88:
                    8d:bf:68:27:0e:15:a9:30:47:f4:80:44:ab:8f:a3:
                    93:fa:13:21:ed:31:b2:39:67:64:1d:9e:9b:06:3b:
                    61:f2:05:ec:50:8e:46:9f:d0:0d:a6:92:bd:56:c4:
                    2f:46:4b:24:08:5d:15:0d:22:4a:6d:64:21:cf:ca:
                    e5:5e:e6:6e:d6:5f:59:9e:d9:0d:c0:d7:0e:a5:79:
                    6d:dd:9c:4f:46:66:fc:30:bc:58:1c:72:ce:8d:17:
                    63:3e:c3:d5:bf:ae:b8:cb:df:c4:84:57:d5:b9:84:
                    24:26:e9:f1:b4:6a:0e:56:60:fa:45:ca:88:87:c6:
                    b3:33:75:56:a4:0a:a6:4c:da:ca:a1:07:43:9f:9b:
                    73:5e:c4:30:36:7a:43:b1:de:49:09:ae:5f:9d:a8:
                    43:5a:a6:f7:50:dd:1c:f0:9a:4b:ac:dc:5c:b4:eb:
                    96:1d:6f:72:23:19:06:cc:8e:15:4f:d0:81:be:85:
                    cd:67:c1:eb:40:03:3f:4b:13:7c:a2:eb:19:92:2b:
                    db:37:29:17:f2:6f:30:8e:60:08:1a:e7:c7:4b:4b:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E1:1E:E7:08:B3:02:E5:0A:A6:12:39:D7:BF:7E:E1:8D:06:E2:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9a78339b-24f4-3e34-814e-c78be0c627b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:6e:31:57:90:1f:7b:c2:39:c9:5c:fa:02:85:66:6b:3b:ee:
         6d:fd:70:2e:aa:39:6f:3a:df:5e:18:9a:72:5e:84:e9:6a:8b:
         2b:0f:89:26:e8:71:b7:ba:40:c0:d4:50:9b:fb:5e:d4:c6:b8:
         18:13:57:70:b8:61:57:42:c9:29:d8:d4:64:20:79:1b:61:93:
         e0:4b:57:61:9c:93:26:77:2b:c0:b1:6a:31:f0:2f:c0:0d:b0:
         ff:e1:89:eb:d9:66:99:96:19:d2:4c:82:c4:7a:b8:c5:22:42:
         d3:40:96:d0:f1:88:64:a5:d8:5d:75:93:8f:8f:03:76:2a:6d:
         7d:ea:8f:58:06:13:b8:1f:2a:5a:1f:47:07:8e:d7:9c:90:e0:
         89:a3:18:c2:c6:52:e0:6a:65:21:aa:1c:be:a8:a3:a6:da:d3:
         d7:3a:a8:7a:8b:1e:97:ad:df:90:46:93:69:9a:3c:47:7d:b0:
         f9:2b:ea:e0:09:a5:ba:50:74:76:7a:34:6f:f7:5f:c9:30:a9:
         cc:f0:89:93:96:50:f2:90:4a:4b:bd:03:84:ea:6d:ad:af:11:
         94:76:3c:30:2f:36:3b:9d:45:bf:2e:4a:14:f3:04:a1:10:0a:
         50:54:0a:5c:99:a4:a1:39:fc:86:9f:ba:a7:ee:2c:ce:15:aa:
         e6:33:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:57 2025 by rpki-client