Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa
File:                     01e7d16f-57a2-3f71-971c-f65c585d1093.roa (raw, json)
Hash identifier:          tSn6eTzSxdFZ4ExOebryZ7SjSdJBXX0yVAuDw27EySI=
Subject key identifier:   0C:E7:E5:E4:47:89:40:9F:D9:F5:E0:0E:36:24:C2:21:6A:93:4C:7A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F9A1D63A74A5B097EF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f9:a1:d6:3a:74:a5:b0:97:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=76a337b8-389c-46c3-bf98-24df960eccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:a4:7f:c3:b7:60:af:a5:5c:8f:a8:1c:08:
                    49:90:04:0d:6c:bc:9b:db:7f:9f:60:3c:6f:10:f1:
                    f7:1a:05:79:83:01:cb:59:6b:04:9f:3e:aa:c9:45:
                    af:50:b8:6b:93:82:81:01:15:dd:38:10:93:c5:5f:
                    b9:a8:68:09:e5:42:8a:f3:3e:5d:cb:a4:d8:79:ed:
                    82:ee:d9:27:bc:78:07:3d:13:1a:bb:ba:db:fe:c6:
                    1b:94:26:d0:ac:ef:5c:7f:f7:26:e3:78:92:6f:6f:
                    d9:60:1e:89:41:f0:af:21:42:9e:21:62:57:35:10:
                    49:96:82:3f:95:87:56:55:b3:97:09:45:27:b4:c9:
                    c0:f2:eb:61:22:fe:25:69:f6:d2:a6:f8:ac:12:3e:
                    24:1f:a1:5a:d1:20:7b:26:bf:85:86:d7:e3:dd:37:
                    60:db:db:f1:2c:dd:d4:80:53:bc:a4:2c:d9:39:f8:
                    72:af:9a:78:18:52:6c:33:26:0c:32:76:3f:f0:c3:
                    71:98:a9:6d:08:78:3d:97:7a:1d:e0:79:be:04:ae:
                    38:1b:85:ab:3b:f3:0e:b0:e9:14:da:0f:0b:19:34:
                    37:e2:a9:0a:72:07:94:36:eb:94:95:04:d3:b7:c7:
                    13:53:8d:bd:de:a0:a9:c4:4e:91:fc:af:c7:13:60:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:E5:E4:47:89:40:9F:D9:F5:E0:0E:36:24:C2:21:6A:93:4C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e0:e0:ce:b3:b6:43:79:37:3e:5c:26:94:23:2d:03:63:4d:
         45:76:bd:34:96:1a:e2:d7:8f:06:58:1b:69:4e:59:9b:f1:cc:
         0f:5f:c9:5a:1f:aa:ee:fe:ab:f7:bb:14:e5:72:3f:4d:e7:71:
         17:60:5a:88:37:bf:e7:03:35:9d:89:6f:23:c3:7e:5c:76:4d:
         51:70:48:06:43:e7:29:18:4e:51:71:91:99:bc:22:2c:e2:a5:
         d2:5d:0d:23:39:3d:09:b6:2c:94:52:ce:80:33:0f:52:b2:63:
         af:4c:f5:ad:42:4f:79:63:26:cf:fb:b8:84:31:83:6d:fe:76:
         b1:b7:8f:29:69:45:e2:ce:15:03:4f:81:4e:0d:d8:f8:b4:57:
         37:15:af:ab:82:10:e4:dc:83:a3:41:a3:62:f8:52:26:f1:f3:
         36:5e:69:b2:93:c2:12:98:bd:a8:af:42:c6:a7:e7:42:fb:64:
         65:51:25:d3:41:d5:14:ce:17:6f:15:75:a5:d1:cf:78:95:cc:
         b0:b9:a6:c5:04:0b:66:ba:bb:57:c3:1b:70:c5:3e:1e:cd:c7:
         87:fd:a3:c2:c6:c7:d3:e9:ad:43:bb:ec:7a:1d:ce:75:46:d2:
         49:9a:d3:b2:7b:b6:e5:0f:e6:f4:54:57:f0:19:4c:de:fe:c9:
         d4:e9:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:10:14 2025 by rpki-client