Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa
File:                     e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa (raw, json)
Hash identifier:          wcxbyO2rGr/iyIG7v8GS4iWEyF4yZwPAIANsuaJAEME=
Subject key identifier:   2D:1E:8A:AA:B7:EA:AE:3D:AF:F3:63:D0:7D:2F:E3:67:AA:07:AB:4D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCDAFB887D3F7E2AA17140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:da:fb:88:7d:3f:7e:2a:a1:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bfba6882-ed08-4699-9f02-1fceceb97bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:0a:13:ee:2a:60:59:56:fc:91:5e:58:8c:
                    0c:7f:a5:bc:84:d4:99:bb:b9:58:ba:1b:0d:f3:5e:
                    c1:8e:16:1c:d4:9a:d0:f5:d0:1b:2f:a4:62:d0:30:
                    f5:06:52:24:dc:dc:5b:9e:9f:a4:3a:35:c2:3b:c4:
                    3e:38:a3:7c:45:e7:a8:38:86:fd:28:c0:f5:be:2b:
                    9e:4d:28:9b:da:cb:f7:7c:e9:9c:e6:21:6f:8d:c1:
                    59:0a:e6:9e:26:8f:41:a3:35:61:90:8d:d1:ca:13:
                    ff:55:5f:a1:e2:6e:ae:11:1d:de:31:d4:2d:6a:fd:
                    15:9d:22:c6:6e:a6:ef:3f:e4:bb:3b:79:d1:8e:9d:
                    0e:9a:a9:c3:9c:63:b4:fe:a5:62:e7:8b:dc:b9:5a:
                    cc:96:7a:71:7a:8f:60:b8:04:ea:41:54:a2:70:60:
                    18:6b:ff:51:f1:b1:c3:b0:c8:ff:bf:69:fc:03:e4:
                    84:35:c3:bd:fd:11:a6:54:b4:01:f9:52:df:0a:29:
                    02:32:ba:8f:8f:fd:0d:ee:7d:51:f2:8e:33:67:6f:
                    c9:e5:4c:3b:0f:d6:92:b5:f8:c6:64:68:67:ac:8e:
                    fd:3f:44:29:de:66:a8:e8:88:2f:95:50:4e:16:4d:
                    53:bb:ac:8f:a7:db:47:22:98:8e:a3:45:25:41:17:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:8A:AA:B7:EA:AE:3D:AF:F3:63:D0:7D:2F:E3:67:AA:07:AB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2f:31:ea:d7:13:0c:4f:04:cf:d5:b4:87:f0:42:94:b1:2c:
         ca:72:20:17:31:c8:70:5d:dd:cb:c5:d0:64:37:73:c2:f0:fe:
         b8:28:37:fd:ea:49:f3:da:cc:72:ea:9a:06:65:8f:a7:05:1c:
         96:9f:65:c5:3d:ec:e1:23:a1:d2:00:3b:0c:70:fd:05:c7:6b:
         cd:89:85:f0:26:9b:9b:30:65:19:b4:29:84:07:4a:7e:31:9c:
         11:36:22:d6:09:8f:a5:68:df:87:01:72:35:d6:19:aa:38:7b:
         44:b6:d1:54:48:f6:3d:b2:f9:d6:7c:39:0d:74:4f:b2:66:ee:
         65:73:7c:93:95:6c:0a:86:c7:ec:f0:17:19:e4:1b:a5:06:66:
         a9:4d:c6:08:28:d2:ea:e9:22:be:00:c4:84:b6:9f:34:40:44:
         37:64:cf:9d:b8:c4:fb:0e:b7:0b:53:8a:4a:d0:3f:56:c1:67:
         55:18:8d:7e:7c:30:0b:94:03:7d:44:e8:3f:36:7e:97:0f:26:
         c8:5d:6d:c6:0a:f9:a6:4c:08:57:0f:98:2e:1d:00:b1:83:f9:
         0c:97:55:d8:1a:74:55:f8:66:ca:00:e8:b7:39:fb:a9:26:48:
         34:60:36:ee:37:66:1c:76:fa:3e:28:df:3d:3e:9f:33:45:b0:
         d5:ca:c1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:19:43 2025 by rpki-client