Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa
File:                     05b48221-53bb-3652-a3a5-bd42c683e784.roa (raw, json)
Hash identifier:          zcgHZ+Sz+FZjUvCNT94XD/hqsacZsFgL+zE33jj+yiE=
Subject key identifier:   41:C5:9C:15:48:8E:F9:1C:63:70:87:DD:CE:78:C2:96:C3:8E:12:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411423EC997D39FE8E71D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:42:3e:c9:97:d3:9f:e8:e7:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5705b4af-78a9-44c0-ac1d-3e7f8227e50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:57:2a:5f:49:29:4a:77:06:b9:74:49:8c:
                    39:e5:2d:91:6c:ea:77:d4:44:c8:04:12:b9:34:54:
                    35:28:fd:43:3d:e9:65:41:ac:6c:ef:a7:ab:4f:27:
                    03:6e:cd:0c:8f:18:8a:71:d7:41:f2:f6:18:29:34:
                    22:4a:5c:ed:3e:73:98:97:04:07:d0:ce:68:70:d6:
                    7b:8b:f8:2c:e3:ac:f0:14:8c:11:70:44:39:8d:4a:
                    ff:e1:b7:00:fd:32:5f:df:2a:3c:33:e9:a0:13:c2:
                    12:5d:35:26:26:88:93:9d:ab:5a:0b:f0:8b:0a:18:
                    92:e9:c7:55:2a:71:10:3b:a8:3c:af:5a:7b:72:d9:
                    b4:3c:b0:37:de:fe:59:c7:e1:31:b7:f5:b7:d5:2e:
                    d3:1b:57:ec:60:8a:29:89:14:ee:51:de:7c:0c:8d:
                    91:0e:e7:2c:2d:5f:0f:19:ab:30:a1:5e:10:cb:c9:
                    a5:e5:1b:7e:75:ae:ef:cb:b6:8f:8a:99:82:92:4b:
                    a5:86:9b:52:df:67:4b:b3:73:e8:6d:f1:9b:fb:06:
                    47:dd:82:63:49:29:36:e5:9f:5a:6f:34:db:0f:4c:
                    52:9c:57:7c:a4:43:93:dd:14:cf:55:5a:85:4c:6d:
                    c5:f9:58:c9:e7:9c:e3:05:a2:a9:c2:19:4f:58:53:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:9C:15:48:8E:F9:1C:63:70:87:DD:CE:78:C2:96:C3:8E:12:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:df:fd:96:d1:be:7a:56:46:0e:0c:40:95:22:0d:80:80:cb:
         b9:03:7b:81:81:68:dc:4e:ec:18:c1:56:f2:6b:8e:8f:9d:28:
         57:46:48:3d:88:6c:4c:02:ff:13:c1:d2:e0:f7:34:cf:46:b6:
         65:d3:ce:0b:66:0f:d5:ad:4e:28:9f:a6:ae:24:4e:40:8d:64:
         65:f1:1b:96:bb:8c:a9:7e:b3:de:41:bd:f5:2c:bc:ea:da:7f:
         2e:80:c6:65:7e:84:82:8e:03:85:0c:10:f4:52:57:bd:90:d0:
         be:01:05:a8:4e:4c:59:97:04:ef:96:74:bd:9d:49:a6:34:c4:
         a2:c9:6e:04:ba:02:54:eb:12:f3:fd:61:ee:14:b8:0e:2a:ab:
         d1:0a:8f:ff:19:66:39:26:6c:ce:45:57:95:96:0a:1e:41:16:
         d3:84:5a:9a:23:3c:c7:23:a4:3c:62:a7:b7:72:4d:59:1c:92:
         a2:21:48:d7:04:27:4d:2d:a8:74:09:d0:21:b6:ca:ba:a1:56:
         ed:7a:58:b7:5a:4c:16:b7:22:ea:b4:67:2d:c7:aa:97:55:78:
         4f:a8:d3:73:95:2f:66:a9:90:4d:f5:2e:22:78:d3:df:14:13:
         cd:5f:85:6f:af:ac:2d:b5:9e:d5:3c:7f:86:db:6f:28:40:57:
         ac:d2:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:33 2025 by rpki-client