Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa
File:                     485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa (raw, json)
Hash identifier:          1aVZ7C2zOEI9IltJC3X3lNOfgnrkLgp5c4ODrP2wv+4=
Subject key identifier:   FB:A5:0D:B3:41:8F:4C:75:6B:2F:EB:96:73:6D:CC:04:59:F6:AD:AE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84116F21AFDCDEB75079BE40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:6f:21:af:dc:de:b7:50:79:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d3b0f1ae-2f0a-44bb-82e3-03e8c0543672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:75:e0:13:4d:fd:04:f4:06:5f:e7:4a:38:
                    e3:a8:da:90:cd:3e:35:e5:3f:0d:42:c7:36:09:21:
                    55:a5:f6:f9:3b:e4:15:7e:1e:e7:28:0a:0a:90:56:
                    20:d2:ab:80:08:04:c5:be:19:14:75:51:f4:7d:f6:
                    bb:c6:e2:c8:57:65:63:af:de:2c:4a:47:dc:27:b2:
                    93:bc:32:66:20:00:38:6b:d2:86:b2:75:0d:68:b3:
                    4b:2d:0a:8f:43:72:b5:fa:0f:04:92:a5:75:d2:fa:
                    4e:fb:0b:ad:5d:8a:5f:c1:e2:71:aa:25:49:ca:7d:
                    8b:f4:0c:16:6d:b8:35:99:fb:b7:55:f9:55:4c:5b:
                    5f:3e:a7:1c:63:a9:ef:90:14:93:83:93:16:6c:b0:
                    e0:1d:9e:ab:a8:23:27:43:ec:71:03:59:b0:c1:66:
                    85:e6:05:e1:01:a5:34:59:e5:21:4b:5a:c5:98:21:
                    a5:2f:b4:45:3b:24:fa:bb:22:59:8e:6c:f8:86:4b:
                    4f:dd:e4:2f:ba:88:1e:1c:47:b6:1a:b3:0e:2c:46:
                    42:1a:8f:00:22:90:55:a7:93:8f:85:f4:98:bf:1d:
                    2f:ce:63:7c:c7:a2:fb:80:a9:df:76:8f:de:4a:a0:
                    72:01:2f:15:9d:51:99:b6:d4:69:a7:f8:10:82:1a:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A5:0D:B3:41:8F:4C:75:6B:2F:EB:96:73:6D:CC:04:59:F6:AD:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:86:01:08:95:2e:6d:89:60:79:a8:b6:da:04:27:27:d3:a5:
         3d:26:5a:91:7f:98:4a:d8:91:16:aa:99:18:50:f6:f5:44:15:
         ca:60:ac:f3:ad:45:42:07:57:70:a0:6b:66:04:a2:61:a7:e1:
         08:3d:90:6e:cf:a1:08:2a:6f:e5:70:7f:9e:fe:57:9b:db:40:
         bb:46:5a:e5:af:5e:6e:b1:1f:e8:23:c7:99:6f:17:e3:2c:7a:
         af:67:94:45:6e:f2:23:61:ef:2b:67:8f:41:32:ff:cc:2b:65:
         e9:0d:48:bf:c0:75:96:6d:9a:85:ab:fe:4a:f6:d3:41:66:8c:
         07:69:de:07:8a:b6:1b:6b:92:7d:b7:d3:0a:dc:76:ce:ed:72:
         58:e4:02:e9:37:7c:a8:4a:d3:e2:51:b2:90:d5:8d:b9:b1:f9:
         cc:46:68:a3:b0:83:3c:dc:67:33:be:eb:b3:81:26:31:90:b8:
         a4:dc:a6:70:43:e6:c8:72:6e:05:97:bf:bc:a2:59:09:9a:32:
         0f:d5:82:e0:0f:f6:bb:5f:66:a3:bc:ff:de:59:dd:0a:c0:0e:
         cc:ce:3f:6c:ad:2f:cf:03:84:5e:bb:89:84:cd:7a:47:eb:7b:
         e4:9e:66:f9:73:cb:95:fb:07:cf:3f:dc:09:35:9f:dc:3b:30:
         3f:3d:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:02 2025 by rpki-client