Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6e1de57-6d1f-37bc-9356-4b768b62fe12.roa
File:                     a6e1de57-6d1f-37bc-9356-4b768b62fe12.roa (raw, json)
Hash identifier:          gjlc9jdVbXlN0nmFLtgpArovXmbmXBi5toWo0EwsjBE=
Subject key identifier:   D7:B6:07:84:4B:63:E9:D2:1C:CE:4F:12:EB:FC:79:C3:74:9F:31:13
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE03747824FEE5AF981A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6e1de57-6d1f-37bc-9356-4b768b62fe12.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e0:37:47:82:4f:ee:5a:f9:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=aa2e4381-7f9d-41a0-be46-1c683dac1296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:f5:40:34:44:0e:fd:5f:18:4d:62:84:90:
                    6c:d8:f8:8d:f3:9c:64:f6:87:dd:d3:49:5d:dc:9c:
                    6a:d3:a8:00:0b:be:34:05:94:26:54:48:68:b2:a4:
                    6f:5f:b5:51:fa:40:1a:48:e8:3d:d9:ca:8a:a7:39:
                    ac:66:8f:0e:a7:ef:5d:20:92:4b:2d:dd:08:9d:0f:
                    eb:bb:50:5d:58:19:22:9e:2e:a0:0a:f6:00:88:61:
                    ca:6f:8b:b4:08:ad:eb:39:58:fe:ec:7b:d7:3d:43:
                    ed:f6:fa:60:9e:a8:1a:63:ee:a3:aa:df:cd:9c:29:
                    f9:61:99:91:c6:79:9a:df:ad:c0:ef:48:a0:cc:ab:
                    2b:60:f0:24:5f:44:12:64:91:12:b1:cc:96:0a:87:
                    1e:0f:f8:64:c2:fa:bc:68:fb:01:51:4d:df:67:05:
                    85:cc:d7:69:57:f8:5d:67:cf:42:43:1f:da:7e:f0:
                    5c:5d:ca:2c:7a:8e:d0:2b:4c:f5:92:7a:05:1b:6f:
                    dc:68:45:27:a5:8a:e5:e7:06:b7:3a:a5:80:40:2f:
                    86:9a:a0:5d:d2:c6:3d:a5:5c:a6:34:c4:06:e5:82:
                    77:93:d1:40:df:0c:ae:f7:e6:11:2c:2c:45:b1:6a:
                    12:fa:9c:b1:d3:e4:6f:10:cd:3e:19:f3:c0:46:84:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B6:07:84:4B:63:E9:D2:1C:CE:4F:12:EB:FC:79:C3:74:9F:31:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6e1de57-6d1f-37bc-9356-4b768b62fe12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:47:ef:4a:c5:fd:ce:25:df:e6:8f:20:37:d7:56:41:c5:47:
         c9:36:bd:89:8a:4d:7f:b2:a9:80:94:bc:7b:7e:b6:bc:18:1f:
         d3:fd:a7:b1:88:b2:0c:ec:26:2b:51:2e:0b:09:94:e3:fd:01:
         2a:24:0b:fc:ba:1e:f9:ae:99:4a:ab:69:24:bc:9c:ac:58:99:
         dc:e0:e4:09:52:e2:e8:ac:75:33:a7:45:35:47:bc:6a:84:2b:
         d3:35:c6:ee:a5:6f:49:0f:62:b7:db:25:fe:61:b0:82:2e:ec:
         6a:45:fc:22:fd:d8:68:58:5e:10:1e:53:64:6e:53:13:b2:c8:
         69:12:a7:15:16:ec:5a:98:cf:c1:da:11:1d:3d:10:76:68:75:
         b6:69:60:e0:25:08:bc:ff:84:e3:73:c8:c6:4b:27:4a:90:15:
         b1:45:60:a4:05:c8:1a:7b:05:e2:4c:24:f4:75:92:a2:b0:2b:
         48:93:c7:0b:16:3c:de:22:92:8f:16:70:57:24:3e:6e:30:d9:
         83:9d:2b:e3:b2:9a:e2:f6:1c:25:9d:6f:bc:0a:1f:b4:9d:5a:
         df:77:da:88:0f:d0:17:49:b7:dd:d7:01:84:19:e5:e6:4e:d6:
         90:97:c8:c1:6f:6b:1e:b7:f4:30:4b:9b:e1:e0:48:84:d7:07:
         00:2a:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:36 2025 by rpki-client