Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa
File:                     d2cd914b-9844-3840-b55c-c3161da53a80.roa (raw, json)
Hash identifier:          LTVOrYuPyODM728+l/I+JpNZM88bl5zBQmn23Uuhm5Y=
Subject key identifier:   96:E3:9C:A3:14:2A:62:D0:A6:93:59:53:F5:7E:11:D2:49:C7:50:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84114F16186401026F671880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:4f:16:18:64:01:02:6f:67:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e49652e0-cca6-4304-9fce-85d0bc34bde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:58:3c:56:11:8c:92:1a:21:84:3c:a1:3c:41:
                    8d:8e:8a:e9:1c:f0:ec:78:29:6e:99:1f:47:38:f8:
                    48:e6:df:13:1d:8e:ef:44:ff:29:ef:f6:ce:a3:b8:
                    8b:e0:f3:24:b1:d3:8c:c5:3c:d3:ff:d1:3e:ff:b0:
                    63:ff:1f:ae:fe:4e:46:d6:bf:0e:71:74:f1:45:3b:
                    e1:47:5c:0a:98:74:63:2b:26:55:31:dc:2a:f3:07:
                    c0:f3:5e:31:fc:e8:15:a1:e1:2a:ce:c1:15:3f:89:
                    90:0c:00:1f:3e:7e:34:3d:16:d3:7b:40:30:56:ed:
                    90:5d:53:ad:1b:3c:6c:7e:64:92:e3:ac:f5:c6:84:
                    4d:19:b7:23:04:37:61:40:fc:f2:99:7f:43:27:16:
                    0d:e4:e2:c9:6b:74:5c:95:ec:93:91:bc:e4:97:49:
                    9e:b7:1d:b9:be:69:8b:63:2b:a4:c4:fe:ad:61:a7:
                    28:5a:1f:69:6f:ea:6f:a7:8c:2b:bd:20:93:61:c0:
                    a9:bf:74:97:46:9f:ab:17:93:31:5d:c6:0b:f4:8a:
                    75:74:c5:bf:d4:47:44:89:ad:a3:d8:a9:6e:92:68:
                    27:8b:76:bd:0c:53:12:92:ee:a5:ee:e8:b7:3b:56:
                    93:0f:a9:5d:ae:6d:7a:94:88:72:cc:27:bb:2f:98:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E3:9C:A3:14:2A:62:D0:A6:93:59:53:F5:7E:11:D2:49:C7:50:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:79:1c:91:ad:03:29:88:bf:34:60:15:9a:18:b2:3e:65:
         4f:43:72:6b:57:85:e3:52:2e:f8:01:b5:65:06:d6:0b:21:29:
         5d:30:44:c7:cc:67:28:78:f4:72:8e:04:84:62:28:3c:f6:fe:
         31:b6:6b:e3:32:67:de:2c:7f:65:47:56:16:62:fc:13:4a:b3:
         b2:2b:c7:b9:a5:48:a5:0c:01:b4:89:2a:a8:48:f7:a2:9a:54:
         4c:b4:b7:d8:8d:bc:d4:87:ad:11:6e:4d:53:d1:2d:05:28:b8:
         6d:19:08:dc:09:47:de:ec:70:6e:50:89:6e:7c:c6:3f:79:da:
         c9:ff:12:ec:5b:f6:64:b7:b3:2f:21:c9:06:55:85:8f:9a:ce:
         61:5a:2c:09:67:ba:c1:d2:0e:d0:92:f2:46:a3:38:2d:f8:4d:
         ed:de:ff:63:30:63:b6:85:be:1e:6b:17:6e:80:5f:9a:80:59:
         85:8f:5e:06:60:aa:15:8d:09:59:b8:04:04:98:bd:15:b6:94:
         20:95:46:fc:0a:d4:9e:ed:8a:5e:13:84:8c:fc:8b:01:10:91:
         16:58:4f:3a:c5:a7:71:e5:af:43:48:46:83:1e:c2:e1:b8:2d:
         77:44:df:f2:c9:20:b4:fd:76:18:3e:9b:3c:8e:a3:37:d6:18:
         5a:9e:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:20 2025 by rpki-client