Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a601ab69-8012-3cd2-b3c8-d3ee32421604.roa
File:                     a601ab69-8012-3cd2-b3c8-d3ee32421604.roa (raw, json)
Hash identifier:          gOx74dQbA+Btt8wNvEgE5SLaSRbHyrWm++5SJryyM7c=
Subject key identifier:   EA:7F:67:7A:73:06:2E:2B:EC:A7:D5:B0:37:9B:BF:37:5D:73:25:21
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD1BD22189B0B308F075C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a601ab69-8012-3cd2-b3c8-d3ee32421604.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:1b:d2:21:89:b0:b3:08:f0:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c5494ae6-ffcc-408d-9be8-16d332fda1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:72:a3:6e:b2:99:6e:73:6b:6a:63:c9:7d:
                    e3:d1:b6:d0:3a:f6:05:86:6a:81:ac:d1:c6:01:67:
                    cb:fb:71:5c:00:a0:f6:d3:ed:77:a0:b3:11:61:f4:
                    b3:ea:40:9f:fe:d2:63:1d:df:07:66:6d:70:27:0e:
                    ab:0b:99:e8:8c:b4:76:17:79:e0:25:b8:dc:f0:d9:
                    e9:57:a1:3e:f2:24:46:59:68:25:d8:6f:30:39:29:
                    bf:60:58:b6:ab:14:09:8f:96:ad:5a:c5:41:90:ac:
                    cb:91:b8:f3:98:5a:4a:35:26:27:63:ac:31:67:72:
                    37:09:b3:74:06:90:f2:3e:d7:4c:ef:16:4d:56:41:
                    e2:0b:cf:58:6d:9d:26:e2:6c:4e:5f:ba:86:16:3d:
                    df:78:6e:84:92:f8:5c:0a:be:50:3b:cf:19:0f:80:
                    00:b2:2d:a1:0f:bd:1c:bd:3b:1f:30:d7:e3:64:14:
                    dd:14:d2:45:83:43:dc:fc:b2:4d:5e:f6:7b:e3:8c:
                    17:33:ec:91:15:0a:b9:68:99:61:4e:4b:eb:af:ea:
                    c8:70:40:6f:27:18:5e:e4:c9:10:46:12:24:2c:0f:
                    1b:35:8b:cd:48:ad:7b:ad:34:e4:08:90:f4:53:8a:
                    e1:80:83:c0:0a:3e:37:8b:87:fb:60:c3:e8:a1:46:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:67:7A:73:06:2E:2B:EC:A7:D5:B0:37:9B:BF:37:5D:73:25:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a601ab69-8012-3cd2-b3c8-d3ee32421604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:24:d0:cc:a8:b3:f1:72:22:df:bc:1c:06:f3:d5:39:c1:74:
         7d:e3:83:af:9f:fa:d1:1c:73:b5:69:9d:f1:36:01:c4:18:58:
         d9:3b:93:fc:7e:0b:09:be:eb:1c:ff:a5:fc:29:69:f9:ba:81:
         b6:6d:15:0e:63:23:b4:c8:14:dc:20:35:cb:27:ec:e2:fe:d5:
         83:71:77:69:ec:3b:25:e4:d0:1e:64:c9:34:35:d8:df:5e:20:
         61:75:d9:17:ae:9c:89:42:62:f8:2a:e1:45:aa:51:91:01:ed:
         06:02:00:b6:84:99:c0:ef:3c:3d:10:28:f3:d1:0d:8f:40:aa:
         ff:05:fa:d0:82:94:71:82:a6:ee:7e:bc:84:3f:35:e8:47:56:
         95:1e:06:db:b2:98:c2:a2:3f:e3:fa:d8:06:40:ec:54:56:db:
         e4:7c:31:e7:80:56:d6:53:18:3b:10:5e:47:08:3d:5e:b6:df:
         d7:42:1e:3e:10:d7:ec:d7:bd:82:76:4e:c7:1d:e9:0f:3c:90:
         20:8f:b7:50:14:6c:80:4a:0d:c8:af:5f:fd:ef:d8:32:f7:7f:
         e4:fb:c0:7f:c7:be:21:24:9d:11:75:41:45:95:ad:af:ac:b4:
         3a:db:4a:8d:6c:93:07:1e:96:fa:a0:ab:1b:98:c0:86:c0:48:
         ff:47:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:41 2025 by rpki-client