Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa
File:                     f476b183-5352-33da-bcfc-04901b542cfd.roa (raw, json)
Hash identifier:          /kR6XUUEO1RV0DC0QHDuAbWJfvscWdp8budSDQa3BsY=
Subject key identifier:   8E:B0:86:CF:85:AD:DB:D3:0B:7C:2E:D3:9E:BB:05:F7:5A:21:C3:71
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCDB830D65C4647B19EA40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:db:83:0d:65:c4:64:7b:19:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=89ae862d-6996-4c48-b6ce-2460785cb0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:3a:dc:92:8d:4d:b6:2a:69:4d:e5:63:95:
                    50:d7:e7:0c:1e:2f:8f:e0:c1:5e:4a:ea:fb:8a:1d:
                    60:4a:66:c4:00:7c:e9:32:d6:70:74:e2:81:fb:75:
                    73:96:57:fb:c0:e4:d2:21:fc:ad:96:2c:53:19:32:
                    6d:21:58:3a:a9:39:a9:4f:40:6a:da:0d:c2:b4:c8:
                    98:4d:dd:01:9e:04:84:e6:42:f5:76:2b:d6:df:b7:
                    1f:29:f3:6b:28:65:74:04:e3:97:70:b7:08:d5:78:
                    46:bb:4f:18:56:20:9e:af:46:7e:68:68:c3:4c:74:
                    e2:a2:a2:c1:9a:d5:a8:a4:bb:75:0e:91:e0:af:8d:
                    2f:d9:bd:4d:b0:4e:16:69:6a:49:e0:28:04:ec:7c:
                    54:37:c5:d1:b1:de:3f:2a:5b:12:fa:1c:ae:72:01:
                    55:73:0c:b8:51:e7:57:f3:fe:4a:ff:8f:22:7f:6a:
                    e7:b9:c3:87:99:2d:14:ca:66:13:09:5f:80:05:1f:
                    26:30:42:f2:66:24:ad:1b:b7:05:cc:44:f3:c5:91:
                    71:fc:0e:1c:dd:21:64:3e:c9:13:59:04:57:21:32:
                    0f:68:9c:52:bd:88:62:70:98:87:fb:73:2f:11:65:
                    62:97:b0:c9:ec:53:ad:76:32:b2:dc:da:07:f2:d3:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B0:86:CF:85:AD:DB:D3:0B:7C:2E:D3:9E:BB:05:F7:5A:21:C3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ef:b4:4a:b7:9b:33:4f:3a:a6:fa:29:c3:31:53:4e:ea:01:
         70:5a:cf:d3:1a:e6:0c:33:82:a2:c1:ef:ff:f0:20:8c:39:8a:
         d5:b5:9a:a2:04:f6:d2:db:13:1e:ea:c9:7d:0a:f3:1f:34:fa:
         a3:9c:ab:ab:ba:20:d0:c0:3c:ff:9b:b8:fe:05:bc:05:f3:ae:
         65:38:21:33:16:6a:cf:92:79:f5:70:92:74:98:67:92:f9:8f:
         2f:09:d5:b7:9f:28:47:cf:b5:58:95:53:f8:93:44:05:c0:fd:
         7a:34:c9:5f:81:a0:08:b5:65:7f:d8:4b:f7:10:6f:27:36:b9:
         53:8e:05:23:18:24:09:83:51:95:fc:2c:b6:72:69:f2:ee:62:
         0e:a4:ff:18:d1:6c:dd:8b:41:a5:4a:d9:6a:11:37:48:13:3a:
         33:2c:ec:0d:94:2e:6b:c7:ee:d5:21:e5:24:d8:8c:4c:ec:da:
         f0:25:cf:af:5b:8c:46:af:34:0a:44:41:78:62:f2:87:2a:52:
         33:1c:59:f8:8d:0e:6f:bb:80:8f:e5:00:82:de:7c:c7:d5:be:
         e4:fa:df:ff:3c:fe:52:da:bc:d5:9f:6b:ab:79:54:fa:90:fa:
         bb:db:86:fe:8e:0e:d5:80:93:8b:95:af:75:2e:09:16:74:89:
         23:fe:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:44:31 2025 by rpki-client