Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8994a618-3c4c-3a4a-8c12-dc99c987042d.roa
File:                     8994a618-3c4c-3a4a-8c12-dc99c987042d.roa (raw, json)
Hash identifier:          HpG0ahr9/G6/RkKpWKXyMu4DYtmQT7g7CeooKpU7k+s=
Subject key identifier:   70:40:82:C3:FA:F6:9D:E3:27:E9:E9:65:13:94:08:AD:02:70:C3:B2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F9BCEE878EC0EA369480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8994a618-3c4c-3a4a-8c12-dc99c987042d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f9:bc:ee:87:8e:c0:ea:36:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c833209d-aee2-4fce-87d2-318dc73a9bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:31:3d:9e:84:56:d1:eb:25:19:cd:5e:1f:
                    83:e7:00:20:d2:e6:31:e7:9c:0c:05:4c:ee:32:95:
                    be:f9:2f:57:b6:f4:29:9d:9c:fe:75:0c:43:fe:55:
                    fb:bf:22:60:91:5c:b3:86:be:a4:9c:4f:c2:e8:c6:
                    e1:46:c4:70:11:d1:ed:23:c0:c2:d8:42:83:c7:8a:
                    ef:bd:8b:fa:bb:d1:18:f1:82:0c:3f:be:f3:05:43:
                    25:61:21:3c:4f:bb:47:1f:52:c1:9f:c2:19:f8:88:
                    6e:cd:3e:4c:c4:e3:e5:1a:a8:06:1b:cb:83:c9:31:
                    4a:fb:49:b6:1e:16:9f:c1:1b:13:a3:55:9a:53:ef:
                    2a:1a:e0:2d:a3:a0:a5:3f:ee:7b:0e:1b:90:d1:e2:
                    79:85:71:f9:22:1b:15:be:aa:8c:57:7d:4c:c8:e3:
                    26:08:68:e2:00:02:95:09:e2:9b:98:78:9c:55:60:
                    24:5d:73:5e:8c:fa:0a:dc:b5:90:08:5f:00:e1:f1:
                    75:23:2d:ac:0b:5b:b7:83:96:0f:9c:7f:c2:b3:45:
                    6a:b0:47:fb:3f:c2:c3:de:09:ce:23:c2:ec:65:4a:
                    66:fd:4a:5b:28:e3:88:da:94:bb:75:2e:07:f2:8f:
                    ff:bb:1d:6c:31:dd:a8:04:d2:02:7a:67:22:ac:84:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:82:C3:FA:F6:9D:E3:27:E9:E9:65:13:94:08:AD:02:70:C3:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8994a618-3c4c-3a4a-8c12-dc99c987042d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:0b:ff:89:6e:f9:e1:a7:60:c1:f7:9c:c3:23:7a:a5:3b:
         a3:be:38:1c:1d:0e:12:f1:c3:8f:44:67:3e:80:f0:3f:9c:27:
         99:d3:11:b9:f1:06:c7:f3:fe:82:a2:4c:60:ea:9d:f7:c6:b7:
         1d:d4:46:de:1f:aa:a3:4d:62:8b:ae:a8:b4:a8:f4:6a:3a:94:
         58:92:fc:4a:3e:d0:49:61:25:27:96:35:fd:f0:77:73:0d:ce:
         e1:40:c5:8a:31:e7:46:1a:49:14:c8:c9:dd:e6:13:4c:90:16:
         4e:92:fb:bf:27:25:b7:9a:6b:86:e3:3b:89:9b:1a:44:c6:c7:
         b1:0d:89:d0:f9:0f:05:ea:de:26:44:cb:4d:d9:0e:dd:00:12:
         43:6c:a7:65:69:73:cf:90:8b:7e:94:d0:ba:94:ee:3d:15:94:
         48:ee:d3:22:02:27:02:83:e4:a7:c1:60:0a:bd:1e:15:c2:ad:
         c2:ea:02:19:34:53:d2:b6:24:91:0d:95:e5:3a:17:3e:21:1f:
         8d:5c:d9:f1:40:66:9c:f2:62:d4:6a:16:a0:ca:0a:50:bd:2f:
         71:74:c5:ac:57:48:e0:43:ee:83:c8:b4:d5:8d:6b:ad:70:2e:
         94:6a:73:b7:95:5a:a1:d1:56:dd:bb:cd:b8:9b:c4:18:01:6f:
         5c:1e:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:07 2025 by rpki-client