Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb8ba67f-f839-3862-bf3c-a1d79fe9b6ab.roa
File:                     fb8ba67f-f839-3862-bf3c-a1d79fe9b6ab.roa (raw, json)
Hash identifier:          IOXd/Bv6cUk9X5zWZJpdnLH3mGXRNmpy9XRNynZGY5I=
Subject key identifier:   73:36:1F:06:C9:8E:7B:67:91:5F:F1:14:61:0E:0A:B9:22:AD:69:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD25846A43DDF047626840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb8ba67f-f839-3862-bf3c-a1d79fe9b6ab.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:25:84:6a:43:dd:f0:47:62:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=79f1c91f-c24d-4be0-bfb6-961f823142a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:b1:35:85:25:e2:2a:3a:07:f7:4d:f1:43:
                    54:4f:06:06:8f:83:5d:b5:64:43:a4:a8:d1:50:8a:
                    0a:36:94:f2:24:32:d6:60:4c:e9:1e:46:a7:b6:34:
                    2c:6c:6d:0c:f8:18:a3:6f:0c:55:86:e5:18:61:89:
                    1a:ba:72:a4:54:e7:a9:7e:fa:2a:32:44:9a:9b:52:
                    87:b0:cb:08:44:c8:92:d9:98:2d:89:33:7e:86:b4:
                    5b:45:72:ca:ba:a1:90:4a:cd:f6:9b:68:cd:1e:bf:
                    fd:f2:43:38:0f:8b:43:ad:dc:3b:b3:39:9f:23:c7:
                    d0:2e:0e:8e:21:04:a1:0e:a3:f2:94:99:9d:b2:0b:
                    dd:23:4b:6c:5f:28:bf:60:e2:3c:1d:ac:67:88:6d:
                    80:af:2a:64:13:fd:ce:0c:4b:4f:c4:ec:be:2c:72:
                    73:a1:01:1f:e7:20:89:45:18:4f:cc:f6:60:bc:76:
                    2d:13:d4:35:6a:41:c4:99:df:30:38:80:50:aa:bb:
                    6e:4b:95:0c:32:66:33:c2:0d:1d:b9:53:89:d9:f2:
                    84:61:fa:78:27:98:a8:a3:52:57:32:6f:8f:6c:70:
                    b7:be:66:d0:7c:8d:e8:c7:13:f4:7c:6a:d7:d6:33:
                    10:0a:68:bf:75:38:26:00:1f:70:b2:35:85:39:56:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:1F:06:C9:8E:7B:67:91:5F:F1:14:61:0E:0A:B9:22:AD:69:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb8ba67f-f839-3862-bf3c-a1d79fe9b6ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:0c:44:bd:31:f8:7c:71:e1:72:97:fc:eb:e4:1a:0e:d2:
         05:b9:5e:7d:b5:63:37:13:e1:f8:21:55:1a:83:9d:77:ea:9d:
         0a:5c:f0:50:0e:1a:44:4f:44:02:9b:0d:50:c8:15:bf:fa:ba:
         4d:d8:cd:f7:82:28:28:95:2a:2f:a3:1d:ea:9d:82:93:8b:85:
         28:6d:e1:9b:2a:76:f7:a2:23:10:b4:5d:7e:04:14:9c:ff:ac:
         1b:ac:47:40:e3:05:d0:e2:76:18:21:d8:a6:48:b7:99:9c:67:
         aa:77:fe:b3:50:26:8f:f4:a0:ab:ed:36:73:12:d7:c7:16:f3:
         bf:33:a3:c5:9d:fa:b7:75:e9:38:b4:46:de:95:ca:9b:6d:db:
         4f:b7:a2:c8:36:2c:84:e9:10:f5:c0:21:12:ab:ab:0c:91:f4:
         a7:f6:45:4c:4d:53:69:6c:4b:fc:6a:f9:5c:89:e5:ee:c8:74:
         91:0b:11:8d:02:09:66:48:18:37:d5:94:49:09:72:95:51:f4:
         01:10:29:2d:f1:5f:b4:5b:02:a8:a9:40:78:ef:e8:c3:72:ac:
         20:e9:be:87:d4:90:78:5d:71:18:eb:3e:85:81:58:06:3d:18:
         53:cd:fa:49:c5:ff:33:0f:cc:b2:61:4f:cb:a6:1e:83:38:32:
         83:7a:8d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:36 2025 by rpki-client