Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef74273e-fe4e-3654-a848-f0968a83d37c.roa
File:                     ef74273e-fe4e-3654-a848-f0968a83d37c.roa (raw, json)
Hash identifier:          hSWdmH7dTwMwO0gdALGLg9THSNR+R2hL3BfbVy/xbg4=
Subject key identifier:   A6:09:F8:D1:BE:DD:CE:6D:17:0F:62:04:36:36:2A:60:F2:D0:F0:B4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD995F95ED905F49AB740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef74273e-fe4e-3654-a848-f0968a83d37c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d9:95:f9:5e:d9:05:f4:9a:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=627091c9-b135-46ac-957e-fe9c9241edca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:a5:4a:c3:22:51:34:11:21:1c:ef:51:e2:
                    f0:87:9b:35:90:80:ec:b2:86:1c:61:d3:83:da:2a:
                    21:c8:e2:26:bf:f0:b6:55:11:42:4a:92:a3:3f:4c:
                    b6:90:e8:2f:04:19:4c:8d:86:88:22:2d:e5:b8:92:
                    12:cc:32:9c:7e:66:3c:66:34:cd:68:ba:9b:c3:77:
                    49:97:b6:99:cc:e5:6d:30:8d:d4:16:23:0e:1e:e2:
                    c9:23:d4:ab:0b:15:95:51:4e:54:3c:dc:f9:fc:e4:
                    e3:57:33:59:c4:49:0e:18:ef:5c:a9:1a:4e:8a:8f:
                    1a:b0:01:d3:6f:c9:ce:52:1b:3f:13:d2:31:34:4b:
                    12:71:b2:39:f9:ca:5d:bf:5a:4e:ff:35:68:7d:f7:
                    e9:c5:e1:e7:d9:3b:bc:3f:8e:1b:69:58:f0:fe:19:
                    e7:1e:12:db:56:52:04:1e:c2:8d:2f:42:0e:19:96:
                    ee:40:73:00:65:68:dd:32:7c:21:eb:92:fe:83:07:
                    ce:f0:ef:a7:37:ba:92:18:d1:9e:d0:b1:ed:83:8d:
                    ea:8b:95:40:d8:39:29:d5:18:c9:b7:de:31:db:51:
                    f9:db:22:0d:f8:67:19:aa:ae:9c:8a:12:ec:ac:11:
                    39:09:a2:e0:a3:9d:e1:62:cc:7d:ad:9a:92:b7:2d:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:09:F8:D1:BE:DD:CE:6D:17:0F:62:04:36:36:2A:60:F2:D0:F0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef74273e-fe4e-3654-a848-f0968a83d37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:1a:b5:44:57:c0:9a:25:fc:14:9d:4f:5b:90:d2:24:d3:
         7a:18:85:f1:33:d3:c0:98:4a:93:18:2b:b4:1b:f9:7b:ae:9e:
         dd:4c:68:4d:1d:66:d5:f9:52:7d:0c:b5:49:47:c6:c4:4d:5d:
         ec:c4:23:90:7e:b0:12:04:9f:af:62:01:f8:2d:37:be:9b:15:
         f3:84:41:2f:d7:d3:90:05:79:a1:66:73:96:f3:03:4a:61:53:
         aa:56:a5:13:48:6e:68:c2:55:72:5e:cc:fd:43:ae:ea:20:57:
         a9:84:0f:69:07:6b:57:ae:59:06:5b:dd:ac:de:be:ab:35:6d:
         2f:f5:b3:1d:26:9c:a7:08:15:0d:b5:b6:dd:91:40:84:32:8c:
         66:7b:74:9c:5a:ed:04:10:6a:c3:e3:96:ac:78:2b:2e:4c:13:
         40:5c:62:02:4a:a9:5a:bb:fc:10:8a:db:1d:33:97:be:4b:85:
         9c:dc:9d:f1:30:91:2a:c2:77:58:c7:4d:0b:10:37:ee:dc:f2:
         3a:8f:4c:70:0e:64:50:d6:73:e2:4e:7d:03:8d:81:0c:8d:dd:
         94:fd:2b:3e:95:c8:40:ef:2e:90:ef:6e:63:94:5a:83:25:ef:
         19:96:d1:2f:fe:07:77:b8:7c:78:5c:be:33:71:ea:a3:1b:45:
         8f:48:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:50 2025 by rpki-client