Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2693d3c1-26da-3276-bc82-690d307c2600.roa
File:                     2693d3c1-26da-3276-bc82-690d307c2600.roa (raw, json)
Hash identifier:          dDXacmwxt6wOCcfT50GRU0rMvxWt5jmUDmP7skZL0Bg=
Subject key identifier:   C2:E2:6F:C6:D2:4B:B2:15:38:C5:9E:8B:58:57:F2:42:EF:01:0F:54
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841201933CBBC5157127B0C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2693d3c1-26da-3276-bc82-690d307c2600.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:01:93:3c:bb:c5:15:71:27:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=60c2095d-9d79-4130-b9c7-a65dda12038a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:7e:b4:70:b2:15:b8:10:8f:0f:40:e7:24:
                    ca:f5:24:e7:ca:82:1a:68:37:45:de:4c:f7:79:79:
                    7e:3d:bb:cb:86:ab:91:b0:da:c6:c8:af:ed:e5:96:
                    f9:26:13:bb:a9:6a:29:48:74:03:98:c4:2f:13:bf:
                    00:d5:37:0e:34:2b:48:d1:41:18:90:b1:df:3d:9b:
                    27:ba:6d:f0:1a:26:41:14:90:58:89:54:2b:93:e4:
                    56:d4:2f:60:ad:89:bd:e5:ba:25:ce:12:fe:71:9d:
                    80:c3:df:62:71:c8:2b:a9:7a:be:4a:47:fd:71:c8:
                    9d:9f:2e:75:bb:fe:09:0d:e0:59:b9:28:3a:97:d7:
                    54:4d:4d:44:e1:eb:fb:24:6d:3b:b2:1b:28:89:62:
                    55:4a:b9:64:9f:37:b4:3f:61:20:88:67:de:7b:8f:
                    4e:3f:d0:67:9e:55:bb:f4:9b:5c:aa:89:d0:88:02:
                    e3:fa:e1:79:06:b4:46:60:68:50:9c:72:4b:99:4b:
                    bc:3e:64:ac:f3:5b:d7:99:68:db:96:c8:58:ee:92:
                    e8:eb:43:aa:17:d4:66:60:38:cf:0e:f2:8e:03:0b:
                    49:07:e0:45:5f:cb:99:ac:b6:c9:2c:2d:54:a3:4e:
                    e8:df:c7:50:ba:5a:ab:c1:8e:29:ba:70:25:51:c0:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E2:6F:C6:D2:4B:B2:15:38:C5:9E:8B:58:57:F2:42:EF:01:0F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2693d3c1-26da-3276-bc82-690d307c2600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cd:e3:e0:df:9f:2c:72:a8:0a:4b:4e:e2:9f:9d:6f:27:0c:
         5a:a1:59:08:64:6d:55:71:17:8d:2a:f9:69:1a:8d:a7:a8:9f:
         05:38:62:15:3d:74:90:43:bd:aa:d5:11:7b:a9:e5:a8:e7:5b:
         40:63:81:9b:cc:70:d1:7b:4f:ee:94:db:26:c1:f9:c2:6c:35:
         ba:b6:a0:38:ee:5d:57:56:6a:15:8d:5c:79:e4:98:6b:8a:41:
         e7:08:65:da:a2:15:22:a8:5e:9d:fa:7e:b2:28:84:cb:d2:02:
         79:ef:ac:39:3a:7c:35:92:86:1f:16:8b:08:d8:af:e0:f4:ac:
         ac:15:20:cd:b9:fb:a0:b2:b1:fd:c4:79:f5:a3:97:f4:27:03:
         e6:1a:81:11:0d:2d:a8:76:eb:b6:16:54:d8:99:5a:df:45:5f:
         ec:13:07:38:5a:d8:0f:28:33:31:77:61:41:07:6d:2a:f5:cb:
         bc:0c:96:15:03:3a:3b:50:bb:1a:0a:9c:1a:39:37:5b:81:7e:
         9e:ce:d7:89:dc:bf:2b:04:61:4f:53:7f:67:c9:55:d3:dd:a8:
         af:c5:f9:27:4b:9d:7b:ae:03:12:1a:c9:34:cc:26:e8:f6:a4:
         3b:e9:7c:78:89:43:da:21:f6:22:47:1d:60:14:ea:2c:28:65:
         a5:1d:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:26 2025 by rpki-client