Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4505b2e-0f81-353e-b59a-2e7b7b19c3f9.roa
File:                     d4505b2e-0f81-353e-b59a-2e7b7b19c3f9.roa (raw, json)
Hash identifier:          NByXSxN2kPc0bHm2L/1JQYUTfNOmiaFLfeF9NMol7Ik=
Subject key identifier:   53:FD:CC:6E:6A:17:F0:00:4A:DE:03:10:E3:0E:F0:5B:3C:26:CE:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDDFEE21D0CC456B6F6A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4505b2e-0f81-353e-b59a-2e7b7b19c3f9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:df:ee:21:d0:cc:45:6b:6f:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4c4025e6-60ea-4020-82a2-8f7abb148666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3b:e3:b7:22:42:aa:eb:30:d7:50:52:9b:6e:
                    d3:a7:f1:ce:33:01:9a:76:fc:f1:e4:82:da:c8:8d:
                    0c:e2:af:86:7d:04:85:a9:bc:ff:32:6d:fa:a2:29:
                    4b:7e:61:54:11:57:72:ab:26:14:e2:97:26:52:ed:
                    47:8c:d0:42:e8:0c:90:f4:f6:5b:f3:9b:cf:45:66:
                    26:25:f1:0b:c0:0b:7a:f9:b0:f4:0c:07:3f:77:ca:
                    7b:ad:e4:8b:71:14:32:70:5e:94:2c:29:45:5c:8d:
                    81:76:5a:02:97:32:23:26:b8:e9:4c:ce:2c:58:1e:
                    45:d9:08:44:ce:cb:c2:cc:a5:98:12:03:ed:73:be:
                    9e:fa:a1:0d:c3:57:41:cd:e1:cd:89:c0:c8:ee:5a:
                    fe:a8:8c:c4:46:bc:e9:5c:62:99:d3:9b:0d:4b:9c:
                    15:9f:92:df:dc:71:de:9c:f1:37:28:ee:eb:b7:8a:
                    fd:21:a5:5b:7c:8c:bb:21:4b:d3:72:a8:53:72:d6:
                    18:2d:6b:ab:d1:b8:83:31:e8:10:db:94:13:f4:71:
                    74:e0:a2:a0:bb:3f:a7:e5:a2:30:4d:2c:d9:a2:c9:
                    e5:fe:f4:99:7f:d7:6e:5f:2c:9c:8b:1b:03:e4:06:
                    4d:be:02:b7:5c:8b:40:7a:88:bb:7b:8a:65:76:16:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FD:CC:6E:6A:17:F0:00:4A:DE:03:10:E3:0E:F0:5B:3C:26:CE:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4505b2e-0f81-353e-b59a-2e7b7b19c3f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:3c:5b:c2:be:40:09:ca:f3:26:44:22:73:17:21:02:74:
         3b:54:6c:af:a3:35:85:b5:08:f1:57:6a:b2:bb:62:2d:7f:d2:
         96:cd:e8:4d:bf:9a:a9:a6:be:4a:c2:4b:96:ee:26:2e:32:05:
         ff:98:d4:6c:aa:1d:e7:33:ce:79:83:42:22:b3:ed:08:71:f9:
         7c:d7:18:db:a6:23:4e:54:73:49:97:53:da:b9:24:af:02:09:
         dc:20:a2:ba:6e:22:94:7b:ee:0c:dd:be:14:96:d4:2d:e0:46:
         c0:6b:49:ba:68:75:7b:ac:db:c4:9c:fb:39:3a:64:8d:a7:c2:
         8f:e8:50:fc:b8:8a:85:4d:93:95:34:64:ac:2b:7e:da:64:87:
         b6:83:3e:89:9f:d1:d7:28:c9:d7:f7:92:7f:93:f3:9c:34:78:
         a5:93:44:03:20:3b:0b:f8:1b:f7:d3:99:f4:83:d3:a3:5e:d6:
         d5:5d:b9:1d:89:20:fd:29:39:55:7d:1c:1c:86:51:d4:b2:c5:
         a5:65:5e:4f:78:4d:75:42:98:17:2a:c6:da:fa:6e:bc:17:c3:
         fa:a2:8e:61:43:81:30:e9:f0:1f:27:d3:bd:10:50:03:f0:87:
         75:73:82:b3:eb:41:d7:b9:4e:f7:fa:48:d5:e8:63:14:b6:97:
         f1:65:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:57 2025 by rpki-client