Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa
File:                     be681068-e4e1-3d7b-a576-f250d1138324.roa (raw, json)
Hash identifier:          rfNbDnRrkfBuSkjzZp9sVxvZy1HkXfdizoSPBAc66bU=
Subject key identifier:   B5:04:B4:E2:DA:A6:F2:2C:C5:EA:7B:A9:D9:70:66:5B:87:54:87:2E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDFC66A6100D8278BB1D60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:fc:66:a6:10:0d:82:78:bb:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=43ea24d0-c501-445c-b42d-67f05d72d49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:03:17:5a:0f:01:16:b3:39:fd:c0:ba:97:
                    12:a8:72:9b:fb:72:2a:29:aa:6e:a9:d9:f4:db:56:
                    3c:83:8e:2e:f0:34:91:fb:bd:00:91:f3:6c:e1:0e:
                    7c:30:0b:f7:92:bd:32:14:fc:b9:28:43:09:b8:b0:
                    2b:18:1a:71:4e:84:f9:bd:10:d9:01:41:36:50:20:
                    0a:15:41:0f:d7:e9:2f:b6:cf:8f:d5:5c:ee:4e:83:
                    13:e8:87:10:3b:eb:3a:d7:e3:6d:65:ff:61:04:73:
                    85:61:7c:80:74:d4:1d:fa:a4:d8:c3:61:d0:2a:28:
                    70:28:14:a3:4b:46:3b:22:cd:2c:8c:f6:5d:c0:5e:
                    23:1d:46:00:dc:2d:6b:58:2c:66:18:2b:cf:96:ab:
                    ed:34:0d:05:36:4c:3b:6a:7b:10:82:20:cc:1d:d2:
                    58:95:72:63:25:ed:2b:79:81:f4:c2:b5:ad:df:05:
                    41:e5:75:c2:62:32:23:11:55:2c:b6:c2:12:a8:f3:
                    6c:43:49:04:3a:82:8f:e0:f7:97:16:72:41:71:23:
                    51:d7:80:f5:eb:70:43:27:21:14:de:eb:1b:90:f8:
                    e1:5f:fd:70:76:c8:da:c9:a5:77:65:a4:7c:bc:8d:
                    a5:ae:ae:f9:2b:cf:53:bf:99:1f:3a:db:f5:3c:7e:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:B4:E2:DA:A6:F2:2C:C5:EA:7B:A9:D9:70:66:5B:87:54:87:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f9:fc:06:60:a1:c2:32:2c:1d:f9:15:db:fd:22:d6:7c:1c:
         77:f6:fc:45:48:9f:da:4c:fa:15:31:7a:80:69:28:41:1f:eb:
         62:b0:fb:d8:cd:b9:4c:bc:89:58:c2:50:c1:9b:f0:aa:0b:1c:
         ad:f1:6d:a9:e0:20:d5:34:8c:51:05:fa:4b:7e:be:5e:1b:99:
         a9:ed:39:10:b5:a0:f1:d3:78:d6:de:81:6e:dc:d3:8f:88:f7:
         e8:51:79:26:d7:24:7e:f6:45:ab:7d:03:5e:bb:7f:38:59:f9:
         b7:00:e1:5e:e2:c6:a6:08:77:80:c0:0f:1f:65:6c:09:c5:01:
         ce:07:10:55:77:47:ca:4f:66:3c:a9:11:37:28:5e:bb:ef:16:
         55:58:8e:e8:c9:1d:f2:66:9e:d1:fd:46:1d:b9:dd:7e:ae:73:
         6b:cf:5a:ac:f3:ec:db:97:49:0f:d9:ec:d2:ee:fc:d1:fe:89:
         6a:79:d9:e6:e7:f4:a8:d6:1f:15:8a:b3:60:9a:b0:ac:50:82:
         f2:e4:95:b5:fb:b9:2a:77:88:08:61:8e:e0:77:19:35:ef:7d:
         85:66:68:eb:fd:44:4d:e6:e5:8c:63:0b:6f:9e:3a:d5:6b:ac:
         94:0b:55:59:cb:8c:1c:71:ae:0e:46:4a:ef:f6:37:75:6b:48:
         d2:e2:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:55 2025 by rpki-client