Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa
File:                     c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa (raw, json)
Hash identifier:          sC/WV+ZgrGkarZeD/A4Dll26pe5ge+2Kyw/l/f2qpAg=
Subject key identifier:   81:A2:A3:91:04:5C:23:A1:83:ED:70:7B:4C:84:B6:4B:2E:72:31:EA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD348A9AB7EC7437D79220
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:34:8a:9a:b7:ec:74:37:d7:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6099a5ac-70f0-4667-b298-3d9abca051c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:b3:9e:b4:9b:68:40:aa:54:3e:bc:a5:4b:
                    8f:b2:77:ce:5f:36:27:0f:85:93:69:63:0f:71:a5:
                    f4:c8:35:ca:27:c3:7a:5f:7b:9d:2e:48:08:dd:0f:
                    15:81:94:e5:b0:6e:63:a5:2b:ec:07:53:3a:50:62:
                    57:fe:86:af:84:6c:32:ba:81:3a:0d:cd:db:93:88:
                    f6:21:dd:7c:17:28:66:b5:ed:82:8b:04:e3:d6:28:
                    b9:77:1f:b6:8d:f0:f4:21:8a:9a:24:cd:cc:ac:fa:
                    7c:b4:87:e2:9c:70:b1:17:bc:cc:24:32:d6:6f:9d:
                    32:22:1e:06:24:b0:e3:45:2f:1c:3d:30:c5:a3:11:
                    f4:24:aa:fa:cb:4c:c1:fd:65:ac:96:f4:d4:4b:31:
                    68:70:be:1f:ae:f4:2c:70:c9:d2:36:9b:ba:e7:3b:
                    1f:31:ec:98:1c:1f:13:95:e8:d3:c0:63:8e:fc:13:
                    05:3a:ff:f3:67:a5:3d:c9:9c:e1:b9:df:b1:44:48:
                    58:59:a2:94:08:94:ff:8b:0f:f3:fb:99:69:37:8e:
                    b7:e3:d0:65:93:6b:1d:66:9b:cd:a9:a2:0a:e4:1e:
                    72:40:c9:db:60:50:b4:ad:9c:1f:c2:71:d2:57:b5:
                    73:5f:bc:02:d5:a5:c3:30:af:04:92:46:d1:28:80:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:A3:91:04:5C:23:A1:83:ED:70:7B:4C:84:B6:4B:2E:72:31:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:ff:ee:dc:14:1c:b9:5a:ec:69:0e:2f:4e:9d:c2:2d:a5:
         c4:6f:08:aa:01:2e:a5:87:d4:e3:60:2a:ba:30:0f:93:a4:67:
         73:07:53:ef:fa:56:cf:2d:dc:f6:87:76:6f:80:0e:63:0b:af:
         d1:6f:63:7d:53:c7:de:17:b0:a1:85:da:ce:ec:68:4d:1b:ea:
         28:8f:27:7b:a2:9c:62:09:ac:fd:9c:b5:75:dd:4e:3c:76:00:
         4d:b3:c4:6a:78:b8:cc:f1:60:8f:1d:50:1c:9b:71:3f:cf:4d:
         af:f2:4e:20:91:62:e7:6f:a5:01:65:bb:ae:33:3b:59:7b:b7:
         4a:59:4c:b7:54:98:67:ed:e7:a0:72:6b:12:a6:a5:ec:3e:57:
         78:4c:68:36:0e:4d:19:64:dc:0e:f3:c6:d4:78:18:0f:9c:11:
         60:bb:03:5c:c9:da:be:7d:b4:95:a7:ab:f6:6c:72:ed:00:e8:
         4f:24:5b:e2:06:b0:80:d3:24:f9:c8:db:59:aa:44:45:e4:e0:
         45:92:83:5c:7e:75:01:53:f5:3f:48:a5:79:24:95:d7:00:2d:
         57:1c:bd:aa:ea:73:4c:81:d6:d2:a9:63:2d:07:ee:44:13:00:
         d2:a5:fd:ec:20:36:a9:be:be:05:d9:aa:19:5e:b9:ec:f0:31:
         f9:69:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:50:03 2025 by rpki-client