Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/799e9923-4f6c-38e3-94e8-3f11336673ed.roa
File:                     799e9923-4f6c-38e3-94e8-3f11336673ed.roa (raw, json)
Hash identifier:          LftM2wN93IVNq6drRdcHDdJTm99PCT5ffFw7GsdUENk=
Subject key identifier:   C5:6A:25:5C:7F:4A:F6:44:37:3F:64:2E:70:91:E7:AA:49:06:FB:B6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841145C3C2F9A0836D876E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/799e9923-4f6c-38e3-94e8-3f11336673ed.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:45:c3:c2:f9:a0:83:6d:87:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b4663a84-efa9-46c2-90e4-c660386563d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:93:0a:07:81:ad:3a:40:ae:16:3d:d0:84:
                    ce:dd:5b:1c:aa:53:31:68:89:f4:0f:58:ce:aa:67:
                    50:ca:e3:eb:08:04:c1:2a:ff:31:95:ed:21:0c:0d:
                    99:11:3c:85:56:e0:d3:1c:0e:05:e5:ee:50:83:60:
                    42:ad:49:1e:2b:b4:4d:e1:c8:e7:27:91:ee:6d:22:
                    3d:8d:a0:b9:63:e4:a3:67:14:a9:c0:9f:a7:d0:8b:
                    19:80:c4:98:7a:5b:24:48:c8:99:7b:70:e7:45:6d:
                    bd:29:38:1a:1d:85:41:c7:da:bb:54:b2:92:98:e0:
                    40:4b:d2:e0:9d:2d:9e:eb:0d:75:ad:91:6f:fc:1d:
                    bf:6a:c2:98:4e:02:60:43:14:da:88:9b:46:ce:bf:
                    af:db:58:e5:20:62:e5:7e:b8:c5:8b:80:92:76:38:
                    96:9f:e7:64:52:29:ec:0e:7e:dd:ef:7f:42:07:aa:
                    dc:da:56:f2:95:2f:f4:e4:01:10:90:b7:ea:b2:ac:
                    47:8b:ac:41:36:a0:c9:81:49:bc:97:46:65:30:8e:
                    80:4e:37:94:25:b5:6a:63:63:bf:e3:80:e0:b3:07:
                    e3:e7:95:3a:37:2a:6e:f0:be:48:cf:8d:b6:6c:ff:
                    8e:3a:6a:3f:c0:84:90:91:eb:ab:53:1b:08:e6:e4:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:25:5C:7F:4A:F6:44:37:3F:64:2E:70:91:E7:AA:49:06:FB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/799e9923-4f6c-38e3-94e8-3f11336673ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:05:95:62:b1:9b:93:76:86:3a:63:50:5e:3b:ce:08:4e:d2:
         ed:03:27:0f:5e:cc:ab:b9:9d:b9:f1:55:f4:d7:9a:3a:a4:ca:
         71:88:85:90:b4:0a:ab:ac:27:ae:3f:5f:15:81:78:61:22:4f:
         a7:c0:40:73:cd:b0:3b:df:5e:9d:1a:25:8a:f2:5e:0e:71:49:
         01:3d:59:9d:ea:98:36:24:0f:96:a0:e2:85:ed:5e:0e:20:fc:
         6e:bf:df:83:16:8a:89:ce:23:20:ca:35:6c:b9:8c:41:44:5e:
         a7:f2:0f:b1:e1:ea:ab:ba:13:98:72:a0:b7:b9:54:cb:6e:cd:
         25:4a:c6:4c:e2:b4:75:60:4e:59:54:76:a1:69:b6:d3:c3:c1:
         28:b4:d6:bd:81:98:fa:34:5e:f8:55:c7:42:1a:33:bc:ce:06:
         d8:f6:13:cc:96:39:47:a4:09:e9:af:e0:03:fb:0f:c7:72:d7:
         6e:68:ae:0f:3a:10:84:ab:bd:1d:05:a6:0e:8a:bb:5f:98:62:
         bf:f8:4c:4e:a9:e0:49:8b:c3:d5:d3:72:79:f8:cc:56:b1:00:
         c4:40:2d:20:a5:ff:ed:c3:aa:c2:59:0d:14:4b:07:25:05:8f:
         35:d9:56:c5:0f:ae:36:26:47:d8:7b:1b:e3:88:83:14:03:e0:
         30:05:86:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:02:58 2025 by rpki-client