Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa
File:                     5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa (raw, json)
Hash identifier:          QNBhIUYDEzosiFgPMEPC+8pLgUdrmwflmOfeAQwQPtY=
Subject key identifier:   06:0F:B1:7F:AD:17:6C:E4:11:5A:35:9F:66:5A:DD:D6:02:F1:2F:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84114C86280BA473F83C3900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:4c:86:28:0b:a4:73:f8:3c:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=cd1a7a59-2534-425a-a36f-4e68d5bc10ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:bf:bb:a6:05:c0:76:a6:f6:8b:e9:2e:78:
                    2e:d7:fb:78:db:c0:f9:7e:e9:7e:b0:06:74:9e:18:
                    91:10:ab:cf:e7:f9:d4:15:f0:dc:9a:00:25:b7:3c:
                    d5:39:42:e3:d1:e7:45:15:88:91:41:2a:85:e3:c6:
                    18:8b:3e:9d:e3:a9:75:bd:c9:35:b7:14:8e:b4:54:
                    e7:84:61:ce:6a:a5:c8:61:51:a1:d9:81:a5:ff:5a:
                    ef:4b:27:93:01:cc:2c:a4:80:82:35:31:1a:96:fa:
                    1c:d0:7c:92:ec:2a:04:56:c7:7d:0c:b3:7e:d0:fa:
                    73:ed:d6:41:ee:97:c6:b3:27:8e:9e:f5:1c:74:3d:
                    53:d4:35:f0:ea:c3:e5:d6:47:71:cb:8d:5a:3f:0e:
                    08:f2:6e:c9:f6:29:f4:9a:5b:3b:52:b5:ad:3e:36:
                    fc:0c:75:51:02:ae:c7:5c:26:f5:07:62:64:53:1a:
                    93:ab:6e:e8:cb:d5:b7:37:49:9f:bf:19:5a:de:55:
                    7f:40:e5:34:e1:50:c8:68:66:15:66:a5:fc:3a:7f:
                    6c:0e:a2:ee:27:42:f2:8f:42:e3:5c:56:a4:9c:ad:
                    e4:c1:55:79:ff:14:aa:c3:f6:16:76:17:90:4b:97:
                    dc:36:74:cf:47:71:8b:d7:96:ae:9d:ae:d0:d7:29:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:B1:7F:AD:17:6C:E4:11:5A:35:9F:66:5A:DD:D6:02:F1:2F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a5:44:3e:12:4b:87:29:39:f5:59:9e:64:33:ef:93:40:9e:
         9c:82:cb:c3:bb:79:36:e6:55:aa:77:0e:22:ca:27:bb:fe:fb:
         58:7a:5c:5b:13:0c:a9:5a:b4:83:8d:9b:63:bb:7e:98:f3:9d:
         43:b5:b3:6d:23:a7:17:5a:fd:e6:a8:b4:fd:85:8b:69:57:c4:
         51:84:c1:cd:b9:31:cc:c5:a9:67:42:3f:ea:3d:f9:43:ec:02:
         db:7f:61:7d:dd:c7:35:99:3a:d6:37:d9:c7:d1:e3:4e:c8:56:
         2e:50:cf:54:51:dc:5a:ce:dd:78:5d:5e:86:3f:0b:a8:35:21:
         b5:d0:1b:a7:45:20:1f:2f:63:a1:ea:37:64:a3:5d:99:ff:bb:
         fe:8e:be:79:f6:5c:8f:2d:9e:be:6b:a0:1f:59:08:a2:47:a6:
         ea:d7:0e:36:7a:b6:c6:09:02:b9:18:42:f6:ec:76:10:75:0a:
         56:74:8e:80:03:6e:79:af:55:c9:81:89:ac:90:00:93:d0:f5:
         76:22:0c:d9:0b:24:22:65:37:96:3f:b9:da:75:4b:b2:09:4d:
         eb:d9:70:b5:3e:f5:1b:9d:35:d6:dc:68:37:db:33:95:7c:9b:
         f8:77:64:77:49:31:e4:fe:3d:9f:b3:91:3e:8c:16:87:69:36:
         aa:8e:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:13 2025 by rpki-client