Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa
File:                     f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa (raw, json)
Hash identifier:          z/SdkxaddWA4doxhJcib9udvhwh8vM+si7UuAdrjmTQ=
Subject key identifier:   12:34:67:FB:EA:95:5A:27:7C:BC:85:AB:48:F3:3D:3E:F5:18:A6:36
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD60D3A98D2FBE8669100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d6:0d:3a:98:d2:fb:e8:66:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7402aaf1-84e3-4808-a3dc-62f5069e6011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:ea:fe:e0:40:7a:0d:ba:f3:29:da:5d:86:
                    3f:b7:b6:83:01:ac:08:5d:7b:e4:14:ac:83:af:c0:
                    d8:fc:fe:d9:01:15:8a:c7:43:d2:85:66:c7:07:c6:
                    cf:d9:61:cf:20:3a:5c:7c:80:90:b4:2d:b5:7f:c7:
                    66:e7:45:22:e6:d5:52:4a:34:53:0e:8f:ab:27:f1:
                    a1:75:d2:9e:cf:a5:2c:b5:60:27:0d:a4:48:58:55:
                    66:fa:b3:78:e8:73:da:4f:98:34:68:e6:60:78:19:
                    cf:52:d0:86:c8:94:88:6c:14:51:52:5e:1a:12:df:
                    33:8a:3c:2a:d8:03:f2:3a:f1:52:46:a4:28:6c:75:
                    ac:16:03:36:61:8a:24:b7:4d:e3:61:4e:ea:2d:74:
                    9d:33:8b:56:26:20:57:81:99:34:03:05:ec:3a:a6:
                    4a:a6:5b:db:f6:26:cf:32:b7:f8:ae:a8:7f:95:c1:
                    6a:ef:51:ab:c4:47:92:57:6b:9b:dd:e3:3c:0b:2f:
                    07:09:67:04:ec:b3:c6:24:dd:f4:46:b4:36:eb:6f:
                    09:27:52:cf:d3:5b:a1:6d:b9:19:6b:7f:d9:6b:38:
                    ad:07:32:22:65:00:c3:b9:b4:dd:d8:60:36:50:7f:
                    b8:2e:f6:b8:04:46:c2:96:a1:c8:c7:4f:e3:f1:92:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:34:67:FB:EA:95:5A:27:7C:BC:85:AB:48:F3:3D:3E:F5:18:A6:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:75:af:b5:f1:47:c2:02:bd:92:31:d8:42:6a:49:14:89:
         63:0a:48:1d:ab:66:69:cd:04:eb:be:79:77:c5:ad:d0:c3:fd:
         40:25:aa:95:66:e8:b0:73:01:bc:50:1d:f1:86:85:10:f0:d7:
         b3:b4:51:7d:78:3c:5c:84:24:38:81:ff:a2:5c:7a:52:bc:ac:
         f5:4e:86:c4:37:2b:e5:13:3c:3f:be:18:91:92:17:a9:34:0f:
         a9:84:49:24:ce:23:82:81:1a:23:ba:8e:84:86:fd:ca:73:e4:
         d6:a6:9d:f0:e1:db:3e:ad:58:8a:2d:c1:64:73:07:96:39:24:
         88:02:33:80:25:00:5f:ba:a9:7f:ca:58:9b:ee:39:c1:76:5b:
         72:f5:19:fa:31:b6:92:c1:82:a0:9a:b3:77:d1:b1:aa:68:11:
         ea:b4:64:3a:46:85:48:0b:78:ae:0e:f0:be:a5:87:f8:41:b0:
         d3:ac:f7:da:4f:a9:d8:6f:b3:30:06:c6:ba:24:27:5e:6d:6f:
         e7:87:f7:c3:46:c4:4d:43:3b:e1:03:be:f1:8a:af:33:ce:57:
         30:b6:81:b9:de:39:75:1c:07:2d:f4:55:a0:48:e5:ab:ac:6a:
         04:ca:12:3c:73:10:c5:ed:52:5c:eb:20:33:98:d2:02:a5:c5:
         46:30:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:43 2025 by rpki-client