Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa
File:                     ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa (raw, json)
Hash identifier:          KPwHxaJVas4JVfZj7fnze1rMWnYv4g4wIBL9Bafi9xQ=
Subject key identifier:   3D:30:68:0E:16:52:A0:93:E7:A9:4F:C9:2C:A0:DB:CE:9D:DF:E8:64
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE03F67E3F8F7B074F1B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        198.45.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:03:f6:7e:3f:8f:7b:07:4f:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2d6d80f6-8d60-4d67-8d15-53fd021bc6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:e8:ff:0d:b8:5f:8c:fe:3c:fb:f7:c5:02:
                    8f:79:3b:f3:5f:aa:e7:05:d9:1b:5e:19:46:0b:9a:
                    65:3f:9e:6a:c1:7c:d5:28:a4:bb:c9:9e:d4:02:51:
                    37:8f:3a:47:2e:ee:f5:5a:28:d5:6f:b4:15:62:f4:
                    cb:83:0e:4e:b1:c4:b8:c0:14:75:84:0a:2d:23:25:
                    12:ca:d8:54:1d:f0:d7:83:dd:c4:3a:da:ab:66:f3:
                    19:59:56:50:c0:8d:85:cd:ad:3a:db:b5:7b:5c:0c:
                    66:99:1b:92:39:d0:6c:47:28:fe:8b:82:67:28:5e:
                    f0:0f:23:ae:1a:e0:db:bb:62:5a:1b:28:3d:12:54:
                    bf:fd:9f:e4:16:b8:f4:95:f8:e6:8b:7b:f1:d2:17:
                    df:52:3e:54:db:5d:46:7b:78:dd:8c:a2:86:37:e8:
                    3d:c9:9c:2f:76:bf:d5:3b:c4:f0:b2:c9:96:c2:47:
                    0c:f6:55:c3:60:a4:f7:66:56:d0:b8:67:7e:30:4a:
                    98:fa:03:a2:c1:2b:e5:51:ed:1e:8a:b3:99:33:c5:
                    2b:5e:3c:f6:b4:92:b7:f4:98:cf:a3:5c:71:d2:37:
                    30:bc:eb:70:2c:e0:a9:70:58:4c:18:c7:7e:a6:4b:
                    81:69:85:43:6e:aa:ac:0d:27:98:64:01:48:3f:07:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:68:0E:16:52:A0:93:E7:A9:4F:C9:2C:A0:DB:CE:9D:DF:E8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ef:b9:7e:96:d9:5b:34:46:07:24:92:73:5c:45:f8:a8:f2:
         41:3e:d4:a2:59:c9:94:81:c9:c4:27:e8:24:7a:a0:d1:17:51:
         e7:b6:8c:f9:fb:0a:f5:9f:ff:82:02:40:70:c9:b3:8b:61:dd:
         a3:49:b0:60:f8:46:b6:22:b1:8d:29:d7:9c:32:0b:5f:e4:49:
         f8:d5:43:47:88:d5:a4:04:67:ac:f4:e2:07:2e:b7:c7:90:48:
         a8:84:0f:57:0f:ea:a7:c8:97:8f:40:26:db:6d:db:96:76:fc:
         c2:00:fc:37:ce:c1:76:b5:69:7e:35:bc:51:7d:83:35:9e:46:
         3c:0d:86:9c:ab:08:9e:7a:63:b8:53:88:0c:4f:fb:e4:7f:d5:
         b3:3d:ad:e1:b5:1f:d5:00:a1:3d:75:e3:e9:77:e0:8d:97:75:
         81:79:5d:b9:6d:a9:cb:a4:93:32:f3:5c:2e:62:09:50:70:5b:
         30:83:d8:1f:7f:55:89:b9:76:0e:63:e8:66:d1:a5:e8:8c:3f:
         09:79:50:3b:1e:a4:dd:fc:71:93:30:ee:6f:09:ca:be:71:62:
         4a:f9:2b:cb:03:e0:d6:9c:78:fa:93:b8:92:9b:f2:09:54:ba:
         94:f6:96:f8:b4:bd:ba:91:dd:ee:79:9b:d5:34:da:ae:f5:3b:
         c3:ad:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:53 2025 by rpki-client