Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa
File:                     a6a73760-9990-3ce6-970f-de482b5a0755.roa (raw, json)
Hash identifier:          dxoYWxGF2uDo5BsTcMV1QKK+ISYzoqPfXedHniSFJVM=
Subject key identifier:   BD:A7:75:25:5A:66:BC:5E:8D:D0:BE:F1:D3:32:6B:73:41:51:BC:5B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84116E8503A659A19A71E800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:6e:85:03:a6:59:a1:9a:71:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=43ac9e13-1deb-40dd-bd9c-57936aea3d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:ad:cb:89:b3:58:c9:78:3c:0b:51:b9:06:
                    c2:5b:0d:dd:bf:1c:29:7c:ce:de:c2:68:8a:79:8a:
                    1c:f7:9b:02:fa:9b:52:f2:3e:70:e6:4e:fa:54:65:
                    11:0d:37:f8:39:02:23:8d:b9:da:66:e1:7d:e1:e3:
                    ec:6a:01:1f:a6:9d:18:81:f0:02:5e:64:55:4a:0c:
                    c4:eb:d6:5b:aa:f8:ec:50:34:ba:5d:96:d4:62:63:
                    9b:66:d8:c5:97:5d:d6:64:29:fd:f4:b1:5c:d5:17:
                    b5:ef:d9:25:3a:73:6c:85:f7:27:16:d1:64:28:64:
                    2e:0c:92:ab:b4:11:b5:ec:4b:34:e4:11:91:bf:2f:
                    84:60:83:86:01:10:68:96:02:f6:3e:b3:3f:2c:92:
                    50:a5:1a:fa:3d:52:9f:f2:97:e7:96:2c:cf:c1:01:
                    6e:51:ef:93:1b:80:f9:fe:80:75:60:c9:b2:48:25:
                    fe:53:70:eb:a4:88:47:62:22:15:f8:34:16:c2:99:
                    ec:28:61:b2:fb:1e:de:03:29:92:c9:8d:7d:61:d2:
                    b8:54:fa:b2:38:db:09:6b:6d:e7:89:3d:b6:f4:d1:
                    b7:64:36:da:e4:53:3a:c5:0c:a9:9a:bc:49:c1:58:
                    68:12:11:12:35:3b:f7:d3:11:e4:d3:98:82:af:49:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A7:75:25:5A:66:BC:5E:8D:D0:BE:F1:D3:32:6B:73:41:51:BC:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:7f:a8:fc:24:70:3b:3b:3e:d4:9b:c6:c5:bc:9c:e3:3f:18:
         fb:f9:13:cd:26:ac:00:2a:4c:f0:24:59:ce:cb:46:ae:0b:e9:
         8d:92:e3:19:46:2d:cf:bc:20:a0:ec:59:88:9b:00:01:b4:ec:
         13:14:7f:c2:e6:66:85:ff:bd:b3:87:29:24:a5:3b:ab:41:ef:
         8f:51:d2:28:93:71:d2:0c:ff:d1:d7:88:82:82:f2:b5:cb:ab:
         c1:18:f8:13:64:b3:97:87:b5:3d:aa:fb:12:87:a9:62:72:2c:
         82:7b:cc:cc:37:f1:35:bc:83:4a:0a:3d:75:20:1d:12:3f:3a:
         76:ef:c5:fb:a2:aa:d6:94:38:ca:7b:b1:e3:32:b1:02:62:3d:
         b5:1b:a6:81:6e:67:c8:53:ab:7d:47:c5:46:dc:53:ac:81:df:
         ea:28:b4:be:9e:a4:82:c8:12:f5:76:90:c4:bd:51:0b:01:97:
         59:f1:fd:7c:6c:fd:1e:a3:74:9a:8b:91:67:1c:52:52:61:f3:
         83:1e:fc:c5:ae:92:92:16:09:49:b1:28:ee:4e:a6:08:22:bb:
         c6:ec:b7:e9:6f:e4:1d:50:99:e1:2f:15:ca:16:36:04:ba:53:
         2a:d9:ca:64:dc:20:79:cf:06:49:5e:5a:dc:2c:b2:1e:8a:43:
         14:21:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:10 2025 by rpki-client