Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2eaff727-41ba-3d6f-be80-7d6b23e0b1b0.roa
File:                     2eaff727-41ba-3d6f-be80-7d6b23e0b1b0.roa (raw, json)
Hash identifier:          bfQ731Pa2xKDzZNBqpOIZaWxI5VNBQbAE7DVOntccUw=
Subject key identifier:   C1:15:04:05:14:59:E7:3B:B2:5D:45:CC:5C:8A:A9:32:E2:5F:7C:8D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84116D6A90DBC1C1B090C938
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2eaff727-41ba-3d6f-be80-7d6b23e0b1b0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:6d:6a:90:db:c1:c1:b0:90:c9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c6f135ba-5985-46cd-bf8e-f5db9c76d01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:13:34:47:24:6d:47:2a:8e:9d:b2:b1:09:
                    9e:9d:08:41:9b:62:42:b8:8f:6a:78:91:dc:3e:0e:
                    b1:b7:28:5e:6b:e0:b0:7a:9c:94:09:44:d4:71:93:
                    d8:65:ea:6d:d2:4c:a6:c1:c2:4f:16:e9:ef:7e:dc:
                    f0:31:ec:e0:c8:f1:d7:f5:b3:27:fe:e9:0e:ef:48:
                    6d:65:ad:c0:3a:50:d4:5e:15:9d:d6:4f:d2:3c:c0:
                    55:de:92:a9:8b:2f:05:01:ac:8a:f0:55:db:ca:46:
                    97:96:c5:55:2d:bf:2e:f4:b0:68:70:10:6d:5b:31:
                    34:35:11:96:9f:3e:74:02:ec:1f:28:6e:8e:61:22:
                    c8:ad:45:7d:d5:41:b3:91:c4:f8:79:fc:70:7f:f9:
                    36:78:46:48:7d:9e:28:78:c8:4c:fe:94:04:89:c3:
                    aa:89:53:92:d1:b6:7b:b4:f9:bd:39:d7:2d:d5:25:
                    39:aa:2a:31:b5:a7:02:1b:74:67:3d:46:da:7b:7e:
                    43:e7:fc:21:1e:9d:d7:ed:ff:f6:f8:bb:7d:01:38:
                    eb:d7:e2:0d:aa:85:fc:b5:98:ed:f4:06:7e:e2:bb:
                    f5:b4:50:1d:35:3a:64:06:8a:10:f9:89:5c:fc:9d:
                    a1:25:fc:2e:c7:37:83:44:67:31:30:c2:f4:29:2c:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:04:05:14:59:E7:3B:B2:5D:45:CC:5C:8A:A9:32:E2:5F:7C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2eaff727-41ba-3d6f-be80-7d6b23e0b1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:05:49:9a:c4:71:f0:73:d7:69:a3:70:30:54:ab:60:37:a3:
         c8:d0:62:c8:d8:25:75:df:46:20:4c:b1:48:5b:bb:a6:e9:ee:
         30:e1:ad:e0:6c:67:68:fa:b1:3b:78:2b:dc:f9:5a:be:4f:3c:
         59:5b:15:0d:1a:d9:85:f0:45:b6:e0:75:4b:e9:cd:bb:7a:cf:
         b2:2d:3f:13:08:d8:f2:a4:99:f8:39:4f:ce:bc:4f:8f:b5:45:
         8d:f1:5e:71:9b:4a:ee:5b:fd:54:cf:57:0e:c4:aa:f9:30:a2:
         7e:f3:f4:b1:b2:ea:80:93:fa:58:f2:57:14:0b:6a:c8:64:10:
         a5:ce:e7:bd:67:36:d5:c6:7a:20:ba:0d:8e:15:83:0f:5f:b1:
         3d:36:ab:b3:b8:fa:59:d7:85:b2:4a:6c:42:d5:c9:d9:f3:52:
         b1:b2:4c:8c:43:79:39:16:ef:5d:47:e3:0e:4d:b5:41:c0:39:
         a3:3c:87:06:6a:f3:0e:58:a7:5e:28:95:20:03:9f:0d:68:c7:
         18:27:84:24:6e:3d:2e:f3:6b:e8:bb:ea:6c:ba:7e:5e:ef:50:
         9c:3a:59:5a:b1:c2:85:b7:d3:d9:3a:71:73:9d:32:a0:ce:62:
         8d:9a:ed:a0:28:80:0f:31:2b:53:5b:cd:e5:69:e8:68:5a:2e:
         7e:0f:dd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:15 2025 by rpki-client