Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b83b6f92-fd83-3a01-8fe3-53cf092df68d.roa
File:                     b83b6f92-fd83-3a01-8fe3-53cf092df68d.roa (raw, json)
Hash identifier:          Mc8DEznAIiMxs0uxojD7YuCa6S48q2v6PDCxekyiCNs=
Subject key identifier:   68:3B:CB:75:80:BB:80:FF:40:79:5B:BB:A0:3C:D5:D5:C3:C2:07:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD3C78D01BE0778D7B6B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b83b6f92-fd83-3a01-8fe3-53cf092df68d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:3c:78:d0:1b:e0:77:8d:7b:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a98a9630-ca22-46cc-a3b3-c656de466161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:bd:cd:b7:aa:6d:75:6e:b8:7d:22:84:f5:
                    de:d6:02:2c:ef:73:29:90:d0:d9:c4:f2:45:a8:af:
                    d0:f7:86:f3:ed:f2:f6:1b:78:77:82:60:92:1c:5d:
                    20:b1:0a:05:ce:0e:54:8d:ac:0e:2f:dd:c1:17:67:
                    03:06:f3:c3:e9:3d:92:d9:60:ca:29:b7:90:31:28:
                    d7:c3:f9:35:f5:d3:08:5e:c9:09:df:f9:4d:4f:60:
                    54:82:36:e1:16:96:7b:4c:4f:7b:ce:3f:f1:89:2f:
                    64:e6:ad:f6:5f:54:63:00:fa:01:88:b9:5c:60:28:
                    3c:da:1d:f9:e0:98:1d:00:bb:a8:c4:e8:30:de:5e:
                    3a:25:e9:a7:2f:4d:e5:47:11:35:74:0b:cc:3c:b3:
                    b7:ed:94:46:2d:d6:90:cb:0b:ed:31:1c:cc:ce:c6:
                    ce:1e:91:a7:a1:9d:24:1f:26:7c:7d:91:86:39:9b:
                    92:42:37:89:68:b6:49:88:8d:bd:cc:f9:93:fa:fa:
                    95:4f:9c:03:05:6b:86:f5:fa:21:55:15:15:ce:37:
                    63:10:4d:26:fe:a4:9d:19:3f:eb:7a:dc:79:b1:9a:
                    aa:59:02:5a:bb:68:b6:eb:ab:7c:1e:7b:03:e2:51:
                    cc:27:db:c3:74:23:4d:e9:e2:0d:e2:8c:4c:e2:28:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3B:CB:75:80:BB:80:FF:40:79:5B:BB:A0:3C:D5:D5:C3:C2:07:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b83b6f92-fd83-3a01-8fe3-53cf092df68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:34:04:d6:ed:27:e2:af:d4:ba:05:0c:24:2a:d8:c0:2c:1e:
         d5:ad:1d:da:9e:b6:62:49:f3:11:9c:82:af:0e:8c:4f:b8:8e:
         91:b5:53:84:67:ff:6a:4b:20:2f:fb:38:4d:7e:53:59:86:88:
         c0:3d:98:1b:2a:ea:ae:2c:c7:f1:2a:ee:ca:22:dd:8d:62:12:
         3c:43:dc:35:ca:37:44:08:9b:f8:6c:d0:b3:b6:f7:fc:21:ef:
         5d:bd:66:ad:12:9a:dd:0e:d0:02:bf:21:60:47:9d:ba:51:30:
         11:42:4d:c2:66:0b:d3:a3:32:08:b2:31:11:a0:04:eb:24:10:
         20:1b:b8:2d:a4:f7:67:d9:43:ce:18:ba:e2:06:68:c5:38:fb:
         6d:03:c3:6a:fc:99:2b:86:a3:0a:28:58:0a:ca:99:e4:62:fe:
         1c:ec:8e:9e:54:23:f7:ca:f8:70:4f:5d:36:b9:0c:77:76:a1:
         de:98:fb:ed:0e:73:c7:2c:2b:93:be:34:55:e3:e6:3b:3e:83:
         f1:5a:85:b2:98:98:92:5d:94:b7:3d:e4:f5:8d:4a:f9:34:00:
         d9:d2:91:35:c7:50:67:74:6d:f1:38:1c:6b:6f:b6:94:d0:94:
         38:af:ca:d1:1b:7f:bb:2b:2a:33:1b:8c:99:a2:0d:c3:5d:b8:
         42:dd:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:13 2025 by rpki-client