Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b92dfe30-3f7b-344e-b2d3-c9eebde412dc.roa
File:                     b92dfe30-3f7b-344e-b2d3-c9eebde412dc.roa (raw, json)
Hash identifier:          WeuMINtvBLYCFJeU8houn1RZCfE9WjXfzR0sTGywqF8=
Subject key identifier:   C7:90:9C:DE:44:D8:59:0B:5A:9B:FF:BA:B6:CB:67:FD:78:CE:24:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD109C43CA3F96AB1C2C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b92dfe30-3f7b-344e-b2d3-c9eebde412dc.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:10:9c:43:ca:3f:96:ab:1c:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=df81c88e-08af-411b-bedb-c31e5e21e72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ab:71:1b:86:2d:82:fc:7f:c7:58:53:e8:39:
                    82:ab:cf:cc:e2:30:96:da:f8:28:9f:2e:53:5c:b5:
                    78:60:f7:af:ac:32:69:9b:d4:a2:38:df:bd:36:d9:
                    ab:54:1d:db:73:93:c5:38:25:65:e0:39:5b:d1:25:
                    5b:38:0b:ae:d3:aa:58:10:76:fc:df:a9:4c:5e:b8:
                    da:7e:3d:f0:4d:20:5e:a3:85:0c:21:d4:66:3f:0f:
                    03:54:0d:03:83:cc:55:11:23:e5:eb:74:b8:17:f2:
                    59:1b:4e:83:4b:f5:58:43:8a:6b:8f:42:91:1a:2b:
                    60:63:36:c7:3c:54:64:11:22:30:dd:4a:cc:6a:87:
                    47:64:d8:91:fd:fb:a1:6b:96:b1:4b:36:cf:96:0c:
                    0c:1c:c8:49:c9:74:fc:1b:2d:2a:06:fe:ca:a0:7e:
                    ee:eb:5a:f8:59:a0:be:fd:dd:28:69:ee:cb:d0:39:
                    e3:16:a5:c5:89:db:bc:90:cd:d4:39:bc:e4:5d:46:
                    fa:f4:c4:9c:c6:1e:4c:e1:5c:3a:0d:fe:a2:9e:4b:
                    dd:b2:d6:51:ff:81:bc:04:54:fd:38:43:0e:fd:4d:
                    47:53:7b:ae:3c:0d:1c:80:19:90:f7:34:b4:87:42:
                    0c:73:30:89:1f:66:3e:ce:ec:47:fc:68:c1:e4:5c:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:90:9C:DE:44:D8:59:0B:5A:9B:FF:BA:B6:CB:67:FD:78:CE:24:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b92dfe30-3f7b-344e-b2d3-c9eebde412dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:2a:d2:a9:30:a6:3f:c0:b0:10:16:83:82:e1:4b:d9:12:
         b8:9e:63:fa:96:31:0f:3f:3f:42:c4:1a:e3:6f:b9:7d:87:0e:
         60:89:f5:14:0f:2a:83:cc:e6:f3:3f:71:64:8d:97:7f:a2:ec:
         de:91:6f:7b:e4:06:bf:cf:24:98:87:64:28:8c:fd:cb:e7:b0:
         d3:5b:5d:05:cf:28:48:4e:6f:bf:5c:5d:bf:1b:01:65:1c:55:
         32:a8:88:98:87:33:dc:5f:b1:6c:0f:5f:78:5b:a0:5b:e2:5e:
         91:2d:31:18:f1:db:90:85:b9:c0:4b:50:e1:28:37:ec:25:54:
         e9:c2:e8:79:ad:40:be:92:45:48:b3:41:d7:da:55:ef:0d:2a:
         89:3c:84:65:a7:e6:34:67:fd:9c:a6:cc:fa:cc:20:bb:a1:2a:
         2c:01:7f:79:4b:01:62:99:b6:23:f2:45:ae:6b:5b:a9:01:90:
         22:e5:de:c9:3b:f7:c9:1d:91:94:6e:81:4b:d4:32:fc:fc:57:
         d5:64:e1:07:0c:a2:61:60:24:f6:cf:d6:2e:ac:d7:02:ba:69:
         18:d1:9a:b2:9c:53:88:01:6f:42:02:b6:00:de:dc:93:73:a9:
         3b:7e:ec:4f:fe:cb:fc:83:2e:91:f3:db:ab:14:20:93:df:01:
         8c:37:69:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:35 2025 by rpki-client