Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa
File:                     3312867b-6413-3ea7-b26e-2ce4da754624.roa (raw, json)
Hash identifier:          M2N6EHOYcdZ+XoghkWdHuyl8BYEhej5NWBnugnhkdVI=
Subject key identifier:   CD:C3:4A:EA:61:2F:C0:52:2B:0C:9D:7B:F6:B0:34:AD:AB:DB:1A:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84121DB0B8D7BA4137C6AC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:1d:b0:b8:d7:ba:41:37:c6:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=eb4a4b98-c8ff-41a2-90ec-2b72ef5b95f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:d0:67:f1:2a:d0:c5:5d:6e:a8:19:01:1a:
                    9c:fc:8c:13:4f:33:2b:83:bb:8b:f9:40:b8:03:59:
                    b5:c8:db:19:09:8d:47:9a:80:8d:69:14:3d:c1:6c:
                    3d:10:24:09:f4:5a:4b:78:21:40:ce:c6:7e:c2:57:
                    c8:e9:b0:99:18:d3:cf:f2:74:de:64:3a:41:2d:a5:
                    78:0f:53:cf:c9:26:c2:c2:e6:79:87:f7:50:5e:aa:
                    18:f7:67:7e:42:ac:9c:15:9e:43:a1:b4:ad:a5:d7:
                    58:b8:9d:93:57:fc:57:23:45:e2:67:68:bf:f8:ea:
                    9d:3f:56:a6:67:25:ca:e6:c7:a0:bd:47:c4:bf:d5:
                    fb:a6:84:9d:95:3c:ba:fc:ee:a7:37:f9:3c:1b:9c:
                    4f:ff:75:02:e3:f9:32:d2:09:af:d1:b9:41:16:18:
                    8a:ec:fd:f3:51:5b:82:20:eb:58:bc:dd:68:c2:f2:
                    aa:15:db:ae:0c:47:63:f2:b2:eb:ab:c6:7e:1d:8f:
                    36:d7:81:9d:50:e7:9e:d7:a5:ce:47:6b:4a:3e:95:
                    c3:f1:fc:a1:12:40:89:92:41:10:05:37:f7:5d:34:
                    19:e5:3d:f1:56:41:31:b5:63:31:84:a0:3e:0c:e0:
                    f0:fe:76:dc:47:82:e5:7d:d1:8c:89:0b:02:6f:48:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:4A:EA:61:2F:C0:52:2B:0C:9D:7B:F6:B0:34:AD:AB:DB:1A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:57:26:b0:cf:8a:73:ef:91:21:9b:08:9d:aa:89:f5:df:0a:
         a2:0b:c5:9f:79:33:9e:92:be:9e:9c:08:d6:9f:5b:f6:b4:89:
         eb:e2:4b:1a:68:25:f5:35:04:3a:c0:d0:36:03:ee:00:f0:0d:
         34:87:cc:01:78:d8:af:a4:d3:76:ae:ae:7c:d8:7e:9e:92:7c:
         b6:36:fb:cd:bc:df:a3:34:2a:ff:b1:4d:2d:7f:27:48:38:8e:
         95:e9:e8:a2:17:56:11:94:9f:5e:f6:ce:04:fb:88:cd:01:14:
         03:08:e1:d9:d9:c4:d8:22:4f:48:b3:34:7a:22:11:cb:33:02:
         92:0a:81:f7:5e:cb:e2:9a:0c:a0:a6:22:ae:58:35:ec:a0:02:
         7a:9a:f3:4d:79:2e:13:0d:5d:a8:29:20:c7:4d:ca:8f:ce:55:
         d8:15:17:2f:91:e0:36:6f:88:21:ce:0e:5f:ad:60:e0:02:f3:
         97:2e:1c:e9:4f:e0:d5:0e:ad:18:c4:ac:de:a9:13:46:29:bf:
         4a:21:98:47:70:ba:87:25:75:14:0f:56:e4:af:cd:2b:eb:b3:
         af:0e:77:21:6e:f8:d0:c7:d5:22:e0:b1:62:f5:29:4d:0a:41:
         b1:39:99:22:ea:e7:32:ea:4f:29:82:78:83:f9:02:a3:7d:2b:
         2a:d7:52:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:57 2025 by rpki-client