Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa
File:                     5d0cc599-036f-31d8-9f5e-71ed90960227.roa (raw, json)
Hash identifier:          Yd7FWDC7SSJLOz41X2AE69rOKcoQHr4s/hHjc72HTDY=
Subject key identifier:   99:FF:9A:54:8B:FC:7B:BC:81:E8:0F:51:87:F0:A7:DE:F3:BB:F4:CF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84114B653490CAAFAFE41B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:4b:65:34:90:ca:af:af:e4:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b1cc25b1-4826-4437-8a44-8ff7085042c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:18:eb:cb:fa:c6:3a:49:bd:2e:d7:25:9a:
                    bb:e3:e1:ae:33:01:af:73:e8:7a:37:fc:09:c4:58:
                    72:49:95:be:98:7c:3a:0f:01:d1:65:14:83:a9:8b:
                    0d:ab:a2:15:06:db:ab:d2:56:b8:12:50:5e:4a:61:
                    55:86:af:56:42:3e:1e:3c:e8:e9:28:0e:4a:8a:ad:
                    7e:fd:43:69:9c:a7:e4:79:aa:10:1a:c7:f8:2b:c7:
                    b4:0a:c5:fa:e8:4c:9d:de:e5:fe:52:ea:a2:40:63:
                    8d:16:ce:9b:83:08:af:33:34:58:b0:48:77:f2:67:
                    76:35:92:47:fe:04:6d:71:30:eb:ed:b5:96:3d:31:
                    f3:38:2a:92:9a:cd:64:7c:ae:4f:2d:44:8a:5c:d5:
                    6b:cc:ea:44:09:40:88:a9:80:64:63:dd:3d:42:d3:
                    80:2f:ab:62:92:0e:eb:84:2e:9c:26:7d:a0:ad:54:
                    f4:47:cc:9b:82:a8:ef:09:d2:39:09:3e:ca:96:cb:
                    21:79:e1:cb:d8:78:73:14:26:8d:72:56:c0:21:61:
                    d3:0b:40:64:9f:ec:43:53:2c:d6:60:88:ba:88:ac:
                    6f:6b:86:82:cb:e0:06:19:84:3c:b7:dc:db:7b:e9:
                    e2:6b:f5:63:4c:67:c7:9a:83:b5:7a:b7:90:f6:e6:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FF:9A:54:8B:FC:7B:BC:81:E8:0F:51:87:F0:A7:DE:F3:BB:F4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c9:bb:74:7a:bb:46:91:32:2d:57:2d:bf:69:64:5a:56:ba:
         fa:dc:5d:d3:1a:e7:81:4c:85:33:4e:75:0c:40:79:6c:75:a9:
         4d:cb:53:90:a2:0a:4f:96:d1:c7:bc:63:3c:87:94:6d:56:c5:
         97:e3:a4:9c:a2:15:7e:fa:34:2d:47:23:3d:7d:b7:da:ff:79:
         4d:79:86:73:9c:19:38:bf:0e:82:6e:bd:1e:77:25:a3:43:80:
         f4:bc:68:e4:e1:d2:70:4f:88:4d:40:99:48:27:3a:f9:c8:fb:
         44:fb:65:f4:ec:db:6d:4f:88:b7:c3:90:0e:f1:78:f4:40:ea:
         e0:f4:09:57:94:28:46:d9:fe:ec:d1:0c:2d:4f:56:92:ca:ea:
         07:b3:49:7f:01:f1:4b:80:d2:29:73:05:ef:fa:eb:d5:1a:3f:
         a8:f2:92:48:f2:64:e6:0a:51:86:f6:eb:96:c5:6e:2e:4a:7f:
         d7:49:12:bd:f0:01:64:89:84:94:3f:19:7e:cd:79:67:3e:6b:
         67:f2:43:fc:b8:0f:b4:eb:b0:8f:21:3a:bc:b9:0d:b0:87:9c:
         bf:76:55:53:6f:8b:d6:ed:1b:a7:da:95:eb:a0:e7:c0:be:1b:
         4a:23:6d:8f:32:26:06:12:12:1c:e5:85:6c:22:c7:55:16:8e:
         3f:d0:6c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:12:56 2025 by rpki-client