Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa
File:                     a03c8890-91ef-36f6-b735-c81baa1583e9.roa (raw, json)
Hash identifier:          W6uOlVrUu7QG7oKQQ9v2dfLe0f80hQF+EVy/7P0o1LI=
Subject key identifier:   86:4F:BA:F5:1A:9A:8E:E0:DA:60:5A:49:9F:27:DD:83:1A:9B:CE:F7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84114E78DE9156C9148D0E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:4e:78:de:91:56:c9:14:8d:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b8b03d5f-e745-409d-9519-f5c7c73afa33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:87:ca:27:cd:fd:bd:9e:b4:a2:ad:ee:b6:
                    df:03:43:25:6d:83:86:47:0e:13:8c:58:11:8c:75:
                    99:bc:2f:e3:e4:9f:3d:c4:e1:ef:1b:1f:23:5f:3c:
                    ac:57:0e:4d:a2:a3:0b:6c:f5:76:d8:4e:e2:94:ea:
                    fe:10:62:89:87:e3:e4:21:1e:48:9b:ba:b3:76:d9:
                    c8:eb:5c:2a:71:a3:5e:cf:20:ea:37:38:23:bf:61:
                    fa:2a:2f:46:93:46:dc:a7:77:94:d5:0c:39:f3:96:
                    f8:ab:6d:ca:b4:76:e5:2b:d8:8e:c1:5e:6a:01:92:
                    dd:e9:f9:b4:2f:6f:2a:ec:22:21:54:70:e3:ad:e1:
                    27:c8:b8:74:c1:f7:ac:d3:5c:89:52:36:b2:b1:cf:
                    e4:e2:7a:50:68:c9:18:f1:c8:c3:18:8a:f7:d5:97:
                    a9:f0:d6:e2:8c:74:7f:66:c8:f5:d7:ea:75:2a:06:
                    08:98:4f:25:f4:c4:24:eb:7f:89:6b:76:37:56:b8:
                    f4:a4:eb:c8:93:0a:40:d4:0d:1d:31:c5:16:16:a2:
                    6c:19:93:a7:34:ef:a3:18:cf:3c:af:f2:62:e9:e9:
                    0d:61:23:4a:b0:67:ab:29:51:39:30:48:68:23:d4:
                    64:95:6e:31:b7:9a:9a:ab:18:05:fa:9f:5b:78:cf:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4F:BA:F5:1A:9A:8E:E0:DA:60:5A:49:9F:27:DD:83:1A:9B:CE:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8a:6c:f3:b7:50:bf:66:1c:10:81:df:dc:61:91:a0:85:b4:
         9e:f1:11:56:10:a9:e5:20:ce:8e:e9:51:fc:46:9a:27:85:41:
         ae:02:2e:05:38:cd:ef:83:36:bf:30:54:7d:9a:f0:23:e2:e9:
         86:8c:b2:74:0b:53:d8:6c:34:18:5f:12:e6:31:25:18:8a:b7:
         71:b4:37:12:eb:59:a6:cd:34:52:63:55:a1:2e:43:75:ab:cb:
         c2:b8:88:02:ce:69:95:86:a8:02:75:d6:d1:89:ec:52:16:ee:
         97:95:bd:a1:b7:46:cf:d5:59:c7:99:c0:cd:26:37:e8:d0:58:
         de:4a:3a:d6:6b:9b:b7:1e:fd:4b:51:b6:37:26:d8:27:ef:59:
         98:3e:20:99:43:ba:a0:85:60:be:0c:47:ea:d9:82:72:c8:60:
         ef:28:3b:e3:ab:97:28:97:30:20:66:22:87:9b:d4:31:c9:f4:
         2e:55:e7:6d:3c:46:b5:53:20:87:cb:ed:19:41:9e:60:38:e0:
         e3:2a:1d:33:05:f9:a9:d5:ee:4d:10:a8:f4:76:23:13:09:87:
         89:dc:9c:6d:ff:9b:ba:50:57:7e:aa:20:07:36:12:0f:bb:0c:
         64:68:35:93:2c:39:df:1e:66:09:95:59:1f:76:e2:1f:e4:25:
         62:9c:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:12:39 2025 by rpki-client