Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c38be4d2-1fdd-34ad-a354-65dcb7c4a4ed.roa
File:                     c38be4d2-1fdd-34ad-a354-65dcb7c4a4ed.roa (raw, json)
Hash identifier:          X/RPb+vN1XMd8Vrz8OEhso4WzkGXrO8gUixfpjlUpsk=
Subject key identifier:   4A:AD:7D:51:21:50:27:B2:1D:96:66:ED:77:80:ED:A1:EF:6C:B3:0C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDFB9337D2B1A090DC1C70
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c38be4d2-1fdd-34ad-a354-65dcb7c4a4ed.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:fb:93:37:d2:b1:a0:90:dc:1c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=46e777df-c7cc-4a2b-9b02-d0888660d94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:6a:41:27:e9:af:54:f9:2f:85:d1:c9:7a:
                    5e:ad:3e:73:a0:a2:88:16:cc:a3:5d:ab:c1:66:1a:
                    af:fb:78:1d:29:39:d6:74:26:65:97:45:74:19:45:
                    fe:3e:af:f2:57:8b:be:2d:d7:c2:07:ba:38:72:b7:
                    ae:d8:1e:1e:14:f7:40:e5:12:78:5b:47:12:09:e6:
                    10:71:0c:23:5b:be:03:2c:31:db:3d:d1:ce:41:8a:
                    56:aa:fc:d9:93:10:1d:69:c3:92:17:73:b4:b0:25:
                    3f:a1:26:dd:78:56:8f:99:1f:11:32:00:8f:1c:53:
                    27:7c:18:24:6e:ec:2e:c4:68:0b:c0:37:0d:e2:b4:
                    2a:30:18:03:35:43:77:ae:ba:73:69:10:8f:7b:b9:
                    44:c2:91:52:3f:4a:4d:13:5e:52:4f:f2:4a:59:7b:
                    9c:01:fe:dd:38:ae:31:d2:7d:92:52:78:51:03:6d:
                    0c:be:9e:f3:af:e0:b7:2e:9c:25:d3:18:6b:35:34:
                    d9:14:12:7d:b2:fb:c0:29:ea:0d:1a:44:fc:bd:d0:
                    30:ba:0e:02:9a:ea:7e:89:37:ea:76:20:57:33:74:
                    3d:2d:d5:53:6f:a4:94:06:e1:bd:b8:9e:56:56:6f:
                    39:c8:d1:66:d3:9d:8a:10:2c:69:cc:2e:5b:11:b1:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:7D:51:21:50:27:B2:1D:96:66:ED:77:80:ED:A1:EF:6C:B3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c38be4d2-1fdd-34ad-a354-65dcb7c4a4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:05:0b:5c:48:b7:73:bd:7d:3c:43:c4:0b:7f:d2:1c:14:15:
         bc:73:4c:ea:bd:f3:88:4d:6b:fa:a8:86:ec:35:b2:75:94:b2:
         0c:6f:a6:9a:8d:30:02:1b:10:7f:cb:cf:71:3f:46:2a:bc:08:
         30:d9:30:18:1b:6d:6c:3d:22:35:8a:5a:17:f3:34:c7:8e:2b:
         78:86:a7:cd:f3:95:fb:cc:e8:cc:5d:e1:aa:60:f8:16:77:15:
         a2:3f:3a:f9:bf:d8:09:72:9c:35:98:37:d1:62:88:fb:d5:f4:
         c8:93:76:ce:19:19:22:28:16:50:94:97:52:18:d4:8b:c3:f8:
         0a:6e:e0:0c:55:79:63:85:6c:55:c2:43:b2:90:44:a5:91:5c:
         0b:84:3b:e9:f6:7a:09:06:4a:06:2e:b2:74:bb:76:82:52:c9:
         94:6a:08:c7:da:0b:af:ed:28:c8:f0:b1:6d:07:cf:24:e7:f7:
         e7:85:37:38:49:5c:bc:41:58:5c:38:9c:cd:e1:0c:69:86:57:
         20:55:d7:fc:b4:1b:59:2b:d8:72:dc:a4:63:f9:42:95:4a:c0:
         83:9f:cd:aa:b0:6d:d5:08:eb:5b:e7:cc:6f:38:ad:0d:34:ea:
         53:e1:99:e1:8d:dc:68:20:78:03:d6:0d:0c:a5:85:70:d2:64:
         75:b1:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:37 2025 by rpki-client