Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb04793c-4b58-369d-81a6-fd36a0c8ffa9.roa
File:                     bb04793c-4b58-369d-81a6-fd36a0c8ffa9.roa (raw, json)
Hash identifier:          X801z5lgt+O04Gpz4y+wvAld//R1e5CXG8S7tSx70bY=
Subject key identifier:   7F:CF:46:3E:3A:62:F3:77:1B:85:A1:16:1E:16:7E:F9:60:3B:F1:3D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE001AC832163A6B49E400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb04793c-4b58-369d-81a6-fd36a0c8ffa9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:00:1a:c8:32:16:3a:6b:49:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=03e25ae6-b0b0-4544-b6c7-5c9a37432cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:ec:a3:4d:6d:9a:1f:32:fb:92:27:2f:2d:
                    ea:5a:fd:06:a5:5d:04:89:a8:8b:ba:8b:ea:17:e7:
                    fb:62:95:14:d6:b6:a8:03:e1:c6:c5:49:1b:69:71:
                    01:8a:89:94:06:a1:d6:b2:c0:86:b1:a9:ef:07:15:
                    e0:b5:50:69:70:8c:96:e9:89:f1:53:a9:81:9c:e7:
                    ac:7a:5a:3f:ec:01:d5:41:d2:2d:d8:07:db:0d:e0:
                    5e:2b:23:32:d5:5a:db:1a:e6:21:e1:9a:ff:97:0a:
                    66:f7:dc:25:0c:3b:de:d3:2c:33:51:09:be:ad:3a:
                    57:a6:d9:a7:64:dd:07:9b:27:be:97:87:a4:7f:44:
                    13:ca:82:f5:99:5d:2a:11:82:1c:be:ea:43:66:2a:
                    ad:d7:0c:1c:7d:29:15:d4:ff:b6:24:a3:e0:d4:26:
                    11:2c:1f:4d:d2:f1:42:fc:f1:46:b8:8e:62:ba:7e:
                    5f:76:39:16:27:09:70:a4:be:01:f7:b0:a2:99:f5:
                    e3:df:d4:bb:49:ad:33:ce:5a:ff:f3:13:86:1f:38:
                    4e:fc:c1:e0:3f:4f:a4:8f:10:3a:8a:74:45:c8:4b:
                    ad:2f:ba:fd:af:ea:3a:44:8b:f7:ba:9d:4f:a6:f8:
                    92:72:6f:e9:b6:18:ca:d3:5f:4b:cc:7f:09:cb:d9:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:46:3E:3A:62:F3:77:1B:85:A1:16:1E:16:7E:F9:60:3B:F1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb04793c-4b58-369d-81a6-fd36a0c8ffa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:4d:96:9a:b8:b8:01:60:69:46:72:94:44:94:ae:25:0b:
         ca:4d:1b:c6:6a:c6:32:d6:45:41:f5:e0:3e:f8:cb:01:d2:87:
         48:88:b6:2a:4c:1f:29:bd:e2:15:ea:d5:59:64:10:ac:55:46:
         a0:a3:08:6f:f7:c6:ee:c3:fd:80:df:55:e1:d8:22:1a:ce:9a:
         7b:a2:0c:c5:eb:0d:86:5a:a4:b3:9f:fd:21:4d:61:6b:47:30:
         1c:cf:fd:38:ec:44:1e:43:c8:d7:74:ef:e6:f4:27:4a:d2:58:
         96:e9:20:77:69:08:10:41:66:50:37:f9:77:df:99:9b:0a:95:
         de:1c:62:1b:35:e1:72:3a:5b:7a:be:4b:1f:ad:a8:53:7c:86:
         8b:76:a3:25:05:9b:ef:f9:c7:15:93:33:4e:dd:94:86:15:b5:
         f1:80:4f:2f:e3:d8:14:a1:cb:71:e3:50:98:5f:7e:8b:ac:f6:
         db:f8:d7:dc:9a:24:75:b6:bb:fc:4b:26:47:ad:a5:32:bb:c9:
         c9:cc:07:19:a9:12:13:58:eb:16:4d:4e:1a:04:eb:6e:d1:25:
         72:75:ad:9a:83:93:1b:4f:bc:fa:43:a3:67:fc:90:0c:44:66:
         4f:3b:c9:fc:43:8b:e4:0a:08:61:5e:e1:6f:b1:42:a7:02:a1:
         32:8d:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:21 2025 by rpki-client