Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78eeb08f-9c75-34a8-aa34-fad103c53f80.roa
File:                     78eeb08f-9c75-34a8-aa34-fad103c53f80.roa (raw, json)
Hash identifier:          ds6U4RqiRRqk8JHsFXArqP3eWFdCx9qKAqbUK7Pd8MU=
Subject key identifier:   34:9A:1A:7F:16:A3:41:FD:C7:63:2C:3E:F5:CE:2A:CB:59:62:6C:E7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8412052310667C4ECD67D000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78eeb08f-9c75-34a8-aa34-fad103c53f80.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:05:23:10:66:7c:4e:cd:67:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aaad6e90-31ae-4198-bb10-19b0f8e54647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:dd:08:e8:78:70:3d:c0:9c:2f:7f:d4:90:
                    08:c2:de:1e:f5:0e:10:7e:05:f9:01:44:e7:ec:55:
                    9e:b8:dd:6a:b5:fb:61:52:79:ca:ec:c0:11:5a:e1:
                    fd:10:67:3c:bc:94:79:3e:d3:06:00:00:a1:09:6f:
                    a9:04:15:1f:70:7d:6c:ff:fe:a6:a5:bb:c3:f3:87:
                    fe:b3:2d:ba:43:a5:9e:77:cb:57:ca:6f:65:8a:f8:
                    34:0d:36:2a:60:66:91:42:cd:4e:fe:0c:d3:ac:29:
                    ea:ee:9d:e7:44:92:2a:99:2c:66:d2:2f:c3:e8:90:
                    43:bb:12:8a:86:d2:13:5a:ca:42:fe:c4:05:e9:5c:
                    6d:a1:a5:47:b0:6e:7c:c3:79:46:f9:7c:e7:81:c1:
                    ac:6c:a4:85:9a:50:2c:6f:ac:be:05:3a:a3:f8:ca:
                    de:3b:b2:a7:a2:e6:51:92:ff:13:1d:99:a9:8d:7d:
                    0c:40:ae:bd:39:ef:ae:a5:da:ad:fb:66:fc:0a:e8:
                    01:9a:39:f0:6a:c9:e4:f2:fd:bf:54:ec:bf:09:3c:
                    73:a2:9e:4d:6a:db:bb:5b:97:15:d1:60:62:0b:6a:
                    0b:7f:cb:38:23:93:0e:c4:b8:28:27:a2:7e:fb:96:
                    71:75:60:b9:a1:97:29:ed:5c:92:02:90:7b:a9:aa:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9A:1A:7F:16:A3:41:FD:C7:63:2C:3E:F5:CE:2A:CB:59:62:6C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78eeb08f-9c75-34a8-aa34-fad103c53f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:6f:79:d4:9c:01:65:9d:92:38:35:19:0f:4d:43:77:5e:
         0b:16:49:02:62:35:0e:89:77:7e:f0:43:91:25:fc:45:d3:0a:
         58:f8:80:26:38:cf:3d:b7:d2:0a:c6:f9:38:76:53:43:b3:b6:
         69:37:f0:76:6e:01:10:4f:c4:f1:6e:28:26:29:e4:df:84:d3:
         98:30:53:48:16:25:32:93:71:18:19:b2:e0:17:1c:f2:c1:38:
         af:af:1a:07:9f:4b:c9:23:06:bb:25:be:53:9f:8e:6b:b9:d9:
         4d:5a:16:15:9b:f9:16:f0:8e:d0:be:b4:9f:f1:cc:38:3c:f5:
         60:0d:7f:60:0e:2d:8c:fd:bd:38:80:44:a0:80:f7:d9:c1:71:
         fe:60:74:dd:68:6a:27:1c:41:2f:9c:3d:16:16:21:91:e8:bd:
         28:7a:1d:c5:e1:bd:b3:52:49:a3:c1:7b:93:42:4a:bc:7b:19:
         da:22:5e:3c:7a:81:ce:d7:94:3f:5e:ca:e0:68:08:e0:02:1b:
         c1:a7:7f:ac:f2:f5:53:c8:90:62:76:83:af:f4:c6:4d:60:66:
         d9:2d:07:4c:cc:69:e8:0a:f2:f7:21:23:0a:f3:64:85:d4:16:
         dc:cc:01:fb:56:a9:1e:38:21:84:53:a5:b2:56:d1:30:6d:f0:
         bb:91:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:42 2025 by rpki-client