Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e37c583d-f25d-3800-abc6-19405a0153e4.roa
File:                     e37c583d-f25d-3800-abc6-19405a0153e4.roa (raw, json)
Hash identifier:          yXrCklCHRXm5XV/mKnOVb3b0wUiNiZ3RJczFhpowzAY=
Subject key identifier:   20:12:9F:56:3E:BB:5E:BC:AD:09:FF:AE:8B:A8:E7:58:13:FD:EC:19
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD06CD5B84B934F6FFBA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e37c583d-f25d-3800-abc6-19405a0153e4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d0:6c:d5:b8:4b:93:4f:6f:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=03e085b0-5fb0-43ff-b89d-5ecfe65f5780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:31:87:37:a2:26:7f:68:ee:05:78:f9:77:
                    2d:de:84:2e:85:12:64:29:5f:68:24:e9:39:34:ff:
                    07:98:50:70:26:71:68:82:e7:99:54:20:af:06:56:
                    37:85:cb:aa:83:9d:6a:41:de:b2:33:eb:42:9a:5f:
                    d7:41:74:e4:32:02:11:ed:34:3f:d9:13:22:df:3c:
                    5f:86:b4:91:ff:c5:f1:2b:9f:5e:da:8e:e2:b0:b3:
                    f3:ed:72:4e:6a:12:2c:82:49:55:4d:2c:ac:c2:17:
                    c2:ee:72:1b:32:21:eb:f6:ff:c6:21:67:ad:a2:95:
                    a4:57:47:b4:20:ab:f3:02:c8:65:7d:e1:c7:21:1c:
                    06:7b:7e:c1:e7:75:35:da:35:74:81:87:7b:3a:ce:
                    79:1d:46:5a:74:8e:c0:2c:ff:17:51:fc:ed:2a:3e:
                    ff:1b:d4:f8:f9:c2:82:e1:e0:0c:84:e2:48:89:b7:
                    e4:a8:20:ab:ba:88:91:fc:8e:83:b9:22:89:1e:74:
                    a5:c8:f5:6d:29:b6:c9:0d:12:95:68:10:07:3b:67:
                    f9:a7:21:75:3a:51:2f:0f:22:1e:76:b6:85:f1:5c:
                    b6:a7:45:46:72:7b:21:1b:50:90:b5:f8:4b:a4:77:
                    a5:eb:ca:b8:50:25:48:5f:4d:ad:25:ba:ff:1c:cb:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:12:9F:56:3E:BB:5E:BC:AD:09:FF:AE:8B:A8:E7:58:13:FD:EC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e37c583d-f25d-3800-abc6-19405a0153e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:2f:a6:31:60:d1:cf:04:56:d7:e5:85:af:ca:a0:c4:34:7b:
         b4:4d:0a:7d:45:31:14:c8:00:51:dc:07:77:7c:c7:1e:34:ac:
         14:fa:b3:69:56:42:bf:2b:e4:98:cc:c7:94:87:e3:2b:27:3f:
         58:88:4e:0c:df:37:41:81:68:ec:81:74:96:47:2a:85:87:34:
         59:52:a0:6f:5b:76:bd:13:1a:cb:36:75:45:0c:aa:c1:0b:38:
         8e:95:bd:a0:b5:b3:3c:83:f6:ec:97:25:62:88:c9:e6:f3:e3:
         60:1c:e2:38:c2:47:d4:37:6c:fb:3f:cd:35:81:70:b3:79:d1:
         bf:a0:49:8c:f2:5b:2b:ca:16:cb:28:19:fd:29:d4:52:08:92:
         ce:39:a7:52:a1:9e:d3:52:8a:66:f9:e6:09:f5:2f:ff:1d:c7:
         0c:e1:70:3c:34:b6:33:39:ae:d3:c9:f4:13:e8:19:97:ec:9a:
         fc:68:1d:be:aa:7f:72:de:55:46:0e:51:c3:1a:32:10:9d:7f:
         9f:99:f8:54:88:66:b3:96:e6:b0:5d:50:00:ca:ef:7d:05:0c:
         23:03:aa:fe:09:a7:3a:49:59:4e:23:4f:40:d2:9d:6c:82:51:
         28:95:dc:bf:7e:20:0b:82:a3:d0:17:70:30:25:a1:f8:f2:a2:
         ec:23:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:30 2025 by rpki-client