Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f9f76bd-d254-386a-946f-4996dc651965.roa
File:                     9f9f76bd-d254-386a-946f-4996dc651965.roa (raw, json)
Hash identifier:          tKJDMLDNdf4ozgokUrZqnjE+UwF/uKQegv7pcOb9SVE=
Subject key identifier:   2E:A4:B5:C9:8B:44:26:50:CB:C3:C2:87:E3:AB:CE:93:5C:AE:72:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8412206015EFA3FE1B558D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f9f76bd-d254-386a-946f-4996dc651965.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:20:60:15:ef:a3:fe:1b:55:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=438d4212-388e-4099-a9df-3099f8cb3929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:79:ba:54:3d:6a:c7:d0:24:59:df:bd:c8:
                    ed:3e:8a:c2:ce:75:d5:09:95:94:f7:72:47:85:98:
                    ba:f1:7f:ad:dd:ec:d2:e4:3b:ab:cb:f7:01:4a:df:
                    30:01:0c:93:9f:bd:05:f0:cf:2d:e8:1a:29:99:42:
                    a4:98:05:01:c1:51:56:ee:6f:a7:2f:b1:5b:fc:ff:
                    7a:0e:17:68:e0:19:a0:79:b6:42:71:e3:bc:9f:0d:
                    1e:e9:40:30:46:34:4f:21:f8:ef:bf:4e:80:b0:3e:
                    c2:18:69:1b:73:7b:e3:76:e6:e6:3b:10:5f:02:1f:
                    e8:e4:a0:6c:72:39:ac:6c:73:62:3f:d0:05:58:47:
                    db:fd:77:a0:72:a8:d1:de:f7:ea:7f:9a:57:2e:a5:
                    5e:39:45:d7:8a:d4:ab:2f:cd:d0:07:26:b5:ea:ea:
                    af:36:bb:cf:91:e4:05:cd:bc:6c:ea:20:de:94:ca:
                    72:e2:7c:03:5e:e0:4c:ae:b6:f1:79:64:f4:29:d7:
                    0b:2e:fe:83:4d:ca:91:1c:c0:10:9a:aa:b7:68:9c:
                    3f:e7:00:03:94:97:39:78:55:9a:c0:69:54:c8:72:
                    fe:15:c6:37:37:d4:9e:29:6d:27:13:21:29:bb:6f:
                    e6:55:1a:1e:29:59:42:b7:89:ec:7f:c0:08:a6:7e:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A4:B5:C9:8B:44:26:50:CB:C3:C2:87:E3:AB:CE:93:5C:AE:72:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f9f76bd-d254-386a-946f-4996dc651965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:88:79:be:4b:41:df:6e:9c:55:b8:dc:58:c5:94:89:45:60:
         89:e0:88:79:20:9a:24:56:7b:84:f0:65:04:85:c5:d4:cd:47:
         47:b7:7f:70:e5:d3:f3:74:ba:01:8d:d5:57:4b:96:f3:af:4c:
         ef:32:ad:05:63:3a:c3:86:8a:c2:2f:14:eb:8f:82:51:04:eb:
         d9:4e:6b:6a:9e:2a:12:a7:47:28:5c:ab:d8:b0:e0:99:2f:25:
         79:f7:ff:c9:db:ce:25:51:d5:4c:a6:ef:f7:ce:b8:9a:ee:8c:
         c2:84:f7:de:54:2b:c9:f5:a2:b4:06:84:30:15:8c:bd:c7:80:
         f6:28:0c:d3:5f:0a:f1:55:32:3f:80:cd:b8:2b:2e:1c:3a:a8:
         ff:73:0b:bb:eb:99:f9:f2:40:59:54:84:59:17:35:fd:8f:04:
         99:2c:a2:6e:b8:40:f7:45:ba:13:a7:20:65:a4:40:2b:a4:76:
         ad:b9:13:5d:4d:f3:20:4d:7e:f0:da:48:67:ae:ab:94:c7:ac:
         18:8a:d7:55:aa:4b:8e:67:52:89:09:aa:3a:ef:71:a8:f2:ef:
         e4:db:1d:5b:8f:77:25:9f:96:71:df:08:5b:62:c9:1c:5b:27:
         9c:9d:d5:ad:65:9b:cb:95:5a:8f:ea:59:0b:bc:fe:c3:bd:6c:
         d7:46:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:31 2025 by rpki-client