Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa
File:                     a50b09dc-5ebd-3b52-be77-89151fb75984.roa (raw, json)
Hash identifier:          DrGH7euLNK8LHDZGAt9lCFtLMzI9vpgqWCRuiAJt8b4=
Subject key identifier:   E3:D9:17:AE:76:93:9D:97:47:1E:BC:9B:33:60:4E:75:86:2F:49:8A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDDA836869BC79328E7140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:da:83:68:69:bc:79:32:8e:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ccda90f2-1ab5-469d-8c1c-6a04385d43eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1e:4f:dc:5d:4b:95:82:9b:ce:de:bc:f4:a2:
                    52:5a:ba:fa:1b:68:e1:67:0d:3e:15:1d:c5:02:a1:
                    22:55:9d:2c:90:c8:0e:5a:27:af:dc:85:b1:63:ca:
                    eb:ec:77:72:c8:bc:3b:9a:8d:19:ca:32:56:82:81:
                    4e:42:69:e7:10:0c:b5:f2:a5:72:86:06:92:54:79:
                    f4:eb:12:b1:8b:54:21:58:28:02:db:9e:bb:00:4d:
                    cf:fe:53:54:2b:d9:c7:db:7b:d4:b9:69:03:4f:62:
                    3d:81:cb:8e:9d:84:de:70:a1:ff:f4:32:52:0d:94:
                    e3:48:ce:83:0e:c8:f5:39:b1:27:f7:a2:32:f8:1a:
                    97:fa:36:48:c2:7b:f6:ee:19:e5:12:f8:fd:57:1e:
                    fe:97:85:b4:1f:d9:25:21:2c:e8:8b:da:fe:27:4c:
                    1d:1d:6e:44:87:ba:e3:9f:95:fd:a7:ba:43:66:dc:
                    d7:fe:23:42:ab:98:bc:85:07:0d:14:c6:d7:b2:51:
                    4e:6f:e7:9c:34:7c:ee:cb:c3:4d:62:32:f5:85:e7:
                    d9:e2:04:c2:41:b6:c1:84:23:04:c7:60:ca:05:94:
                    cc:53:0d:5f:26:35:91:f9:fb:8a:5d:99:e8:ab:99:
                    1d:1a:1c:cb:ea:94:55:6b:49:51:52:88:f1:b8:ec:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:17:AE:76:93:9D:97:47:1E:BC:9B:33:60:4E:75:86:2F:49:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:d3:4e:82:5e:33:df:75:0f:30:a5:e6:2b:37:dc:70:c3:aa:
         41:8e:0a:09:77:31:15:70:c3:bf:13:27:fa:91:48:9e:33:2f:
         74:c8:81:9a:e7:03:4c:26:97:c1:f3:9c:d2:13:18:24:a8:04:
         99:d6:60:ce:cf:e6:03:90:29:5b:92:7b:f7:76:e2:00:56:de:
         91:db:09:2d:95:5e:34:8a:ae:5c:79:f1:2c:49:8c:b1:63:c7:
         31:b8:1c:f3:f9:2c:8d:6f:b2:7a:39:46:04:b7:8a:6b:4b:fc:
         b0:c9:ff:fe:54:37:63:95:3e:b9:4e:f9:76:11:e3:e8:36:b7:
         8f:4b:0c:08:d1:36:ff:97:29:e0:0c:d9:c4:b5:10:18:49:12:
         c9:e0:0a:55:ea:e4:aa:c8:6a:31:0d:7c:f8:37:fa:d2:7f:0c:
         96:c3:ac:74:82:8d:10:c9:c9:38:4b:0a:86:39:7d:fb:c0:15:
         b0:76:5a:6c:46:f2:70:94:93:0a:c6:ad:a6:36:cc:4a:2d:e9:
         8f:66:4f:1b:2c:70:ab:9f:32:ce:ae:9e:02:fc:fc:0b:e3:e5:
         be:90:c3:eb:b8:af:e3:e1:dd:ad:79:ea:d4:a1:27:c4:81:69:
         f3:b4:e0:c6:fa:4d:67:96:c1:a1:fd:93:0f:01:92:4e:3d:2f:
         57:c3:71:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:30 2025 by rpki-client