Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc83a44a-48ab-340a-8cdc-f884ec43e00b.roa
File:                     fc83a44a-48ab-340a-8cdc-f884ec43e00b.roa (raw, json)
Hash identifier:          8SD4omukJlb27eqDl8a8bRCIrYKf0tAZMkl8r+XmaKM=
Subject key identifier:   54:54:27:17:41:1C:58:F7:23:E1:21:8D:EE:21:29:08:B9:00:81:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD26B469078D8842DC180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc83a44a-48ab-340a-8cdc-f884ec43e00b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d2:6b:46:90:78:d8:84:2d:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=65c3a87f-7b09-4988-8131-4c3713b1a1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:95:8e:99:cc:f1:32:0f:eb:37:c6:14:b2:
                    7e:4c:4e:04:6b:d0:91:15:90:14:0e:3a:bf:96:64:
                    e9:2f:c5:e8:a6:21:94:d5:78:c8:e2:af:fc:a4:c0:
                    ec:be:0a:d6:e3:c0:ee:dc:bc:f7:ff:c9:73:d5:19:
                    7c:60:bc:eb:43:f5:5e:b9:4b:0a:fe:d4:32:09:44:
                    46:e7:ba:6c:0a:fb:b2:79:54:f3:74:05:8c:36:9f:
                    75:fb:b6:b0:bf:07:f7:be:6f:40:8e:33:c5:85:b1:
                    51:85:6a:e4:36:9a:c6:43:47:c6:a0:ae:31:06:be:
                    0d:97:41:6d:56:df:a9:1a:89:e6:1f:a9:79:24:09:
                    68:9f:f3:72:d7:1e:c4:b3:69:d5:54:bc:32:00:3d:
                    aa:70:8c:9d:a3:d7:a2:ef:f9:e2:26:36:11:eb:a9:
                    15:eb:70:39:1d:70:52:25:80:0a:34:f5:c7:a5:c9:
                    79:90:65:7e:7d:77:4f:23:84:e9:4d:4c:e0:7d:4d:
                    9d:c2:c1:b3:0c:f4:69:0c:76:5f:c0:b0:2d:ed:ff:
                    52:08:5e:2d:95:bb:ce:ab:00:ea:ab:f7:f8:6f:33:
                    62:4d:2a:db:4c:e2:5f:77:49:67:29:92:c2:d5:e7:
                    d6:dd:01:68:eb:e4:45:79:b8:6b:e1:6f:31:c3:3b:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:54:27:17:41:1C:58:F7:23:E1:21:8D:EE:21:29:08:B9:00:81:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc83a44a-48ab-340a-8cdc-f884ec43e00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:80:ce:ab:65:9d:77:25:77:9f:58:38:4a:a9:c0:32:55:b1:
         9e:48:21:6b:db:13:69:53:26:22:8b:4c:15:d9:b7:10:e4:74:
         a6:5e:0f:8d:88:49:dc:3f:e7:c6:c0:77:96:bd:ab:a5:5e:bd:
         72:51:92:a6:69:2e:c8:d9:ca:f7:f7:b4:96:52:25:0b:b5:e3:
         7b:8c:14:23:f2:c0:fd:d0:c5:94:36:be:8f:af:95:4a:db:5f:
         ef:79:31:b2:7f:b5:61:b2:73:40:8c:e2:37:52:90:e7:0b:ac:
         4f:d1:eb:3d:09:da:f7:f5:e8:e5:8a:bf:8f:3a:1a:05:88:30:
         3e:b4:a6:68:b4:48:7d:53:60:4f:bf:6b:21:e4:25:80:27:6e:
         62:7d:bc:6b:54:6c:eb:f5:fa:a3:2a:70:96:21:d0:bf:3f:ab:
         5c:8e:0b:a3:ba:f6:28:b2:b8:af:ce:92:d5:f6:83:1f:7e:94:
         7d:e4:4c:4a:11:4b:e7:95:78:f2:d8:c1:54:91:24:bf:91:ba:
         6d:66:03:45:33:5e:c4:4a:f3:4c:7c:07:a4:b7:b6:59:2b:a2:
         38:9a:d5:47:c8:a0:24:b6:33:d4:05:de:f9:6b:8c:02:af:57:
         44:72:9c:12:ea:8c:8d:d3:6b:e9:9a:ff:dc:e2:f3:48:b3:bb:
         a9:6a:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:28 2025 by rpki-client