Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa
File:                     dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa (raw, json)
Hash identifier:          3elBdE/kR2o9fNCXtWX65+aQUFQF7cJiTkbfjJpZGZM=
Subject key identifier:   C2:C9:4A:37:FB:D5:6F:4E:33:C5:19:BC:98:A5:1B:A3:09:92:14:53
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD90CBD0EBC17B55AC8380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:90:cb:d0:eb:c1:7b:55:ac:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=53ae1703-f22f-4dea-93ab-89aad028b5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:1b:37:55:8c:2d:e3:72:56:0f:2a:a9:90:
                    34:d3:0c:73:8f:3e:0d:57:a0:2c:b0:f5:1b:9c:1c:
                    41:11:2f:20:c9:a3:9a:f1:e0:20:60:49:7e:b2:7f:
                    43:17:64:c6:db:ed:8c:84:84:99:f4:c0:05:f2:70:
                    34:5e:b1:2c:19:2c:eb:94:62:d1:25:3f:b9:ac:b6:
                    f0:4f:e2:79:6b:31:6e:f7:5c:35:de:4b:d5:20:52:
                    dd:a6:56:e8:80:7e:47:f2:f9:46:31:f8:b1:81:d7:
                    41:3f:bc:ac:2f:b7:74:48:4d:55:47:24:16:d9:ee:
                    d4:65:64:63:ef:c7:9c:ba:4d:e7:67:d8:ff:eb:7a:
                    04:73:0c:d7:37:7a:3c:23:bf:e7:11:59:ac:46:b1:
                    28:35:b5:97:7e:5c:6c:f3:e2:9f:f5:58:cf:12:cb:
                    53:68:b4:a3:32:31:33:e8:87:e7:d2:a1:2d:e3:7e:
                    49:f8:69:c8:af:01:35:03:57:de:4a:0d:1e:91:77:
                    64:59:c6:ea:83:ba:84:0b:b3:77:75:db:e2:3a:4e:
                    7a:08:8a:83:d1:5a:35:fe:e6:d2:99:54:d5:eb:9f:
                    dd:3d:b1:59:0a:d3:d6:77:91:04:73:09:76:8a:d4:
                    14:bf:c3:7e:17:40:89:71:19:7d:58:cf:7d:e5:81:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C9:4A:37:FB:D5:6F:4E:33:C5:19:BC:98:A5:1B:A3:09:92:14:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:e4:b1:f8:20:4d:40:8b:b2:30:3a:ec:1d:69:c6:0f:13:
         9b:ae:34:5e:e9:6d:e1:da:c3:61:cb:25:39:94:fc:b9:24:8a:
         f8:4d:db:c1:ae:b7:79:5e:0f:4e:3f:b0:f1:cf:c7:7a:7b:10:
         0d:2f:24:f3:3b:ba:92:78:c4:f3:ab:e6:0e:38:c8:ec:f5:e2:
         71:4c:11:dc:d8:4a:d4:bf:a4:61:ae:47:8d:38:38:93:8d:96:
         e8:d8:21:30:35:1b:3f:00:ce:f4:56:43:7a:6e:c1:3f:34:fb:
         50:d0:c4:2c:c7:69:a2:3c:92:11:cd:25:c6:0f:51:a6:ab:4e:
         3e:bf:98:c0:b9:6a:5b:16:d5:f7:84:16:90:b6:8c:33:ee:ba:
         4d:33:72:b5:6f:8c:ff:e0:94:45:93:62:70:7d:9b:69:40:21:
         0b:45:cb:30:f8:7e:2d:c6:b1:14:df:bf:11:c1:62:6a:41:70:
         da:5a:07:57:3e:a9:48:00:c6:ea:b9:2d:16:99:aa:25:94:1e:
         df:f3:66:59:d2:12:4b:fc:35:14:64:1b:c9:f0:d8:97:1e:a8:
         08:55:80:ee:95:65:6b:bc:08:82:98:36:7c:58:f0:f5:58:33:
         df:a5:3c:ed:6a:5a:aa:3a:66:ec:1e:2f:61:61:70:ec:28:c3:
         a3:bc:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:17 2025 by rpki-client