Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ab8198-89a6-3716-ae34-c60f94305356.roa
File:                     f6ab8198-89a6-3716-ae34-c60f94305356.roa (raw, json)
Hash identifier:          XP2CGYLLAs6VuXIm2byWdTgx32rYeTdCcXVAkYSQrEA=
Subject key identifier:   65:82:88:43:2F:1A:85:56:70:40:4F:AA:C2:E0:49:4B:AB:D0:A8:9F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411FFA22486072D438CC580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ab8198-89a6-3716-ae34-c60f94305356.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ff:a2:24:86:07:2d:43:8c:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c8de1326-a250-417f-ba4d-9276f213b368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:60:f7:f7:89:83:94:80:47:49:1d:47:12:
                    66:c5:28:21:cf:67:86:d9:f5:54:e8:c4:16:2c:16:
                    92:79:85:d9:58:aa:b0:48:42:85:15:97:c8:2b:e4:
                    dc:83:3b:4f:4e:34:0e:cc:87:21:e7:fd:9a:44:e8:
                    d5:8c:b3:ce:74:c1:d8:ce:d3:57:3e:6c:b2:ce:d5:
                    f8:0b:c0:dd:03:47:5e:17:0f:1c:4a:8f:f8:0d:77:
                    60:7d:2a:3b:38:8b:1d:9f:72:1a:27:fe:00:7a:5d:
                    cf:b7:af:39:d7:57:2d:25:7b:a3:bb:f1:56:99:0f:
                    20:65:3d:4d:e5:32:ee:e8:ba:14:26:45:d4:66:ed:
                    3d:a0:79:28:29:ef:44:71:24:2a:58:be:e9:be:ca:
                    89:82:18:90:3c:9c:58:28:58:b3:90:ea:c4:01:76:
                    f2:54:06:1b:a4:37:44:66:a1:24:7b:b3:83:df:d9:
                    a5:a2:c1:78:3e:d2:21:b0:2c:f1:9b:a0:29:f6:49:
                    80:75:32:1d:ad:c4:40:22:ab:b6:5f:97:60:13:b9:
                    39:b1:48:63:bf:8c:fb:c1:43:bb:bf:e8:d8:93:2a:
                    18:48:b2:c2:de:6c:ec:cd:59:d3:d2:e9:2c:8b:b8:
                    6a:70:46:fc:ad:94:8d:d5:17:91:9a:e5:4c:c5:88:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:88:43:2F:1A:85:56:70:40:4F:AA:C2:E0:49:4B:AB:D0:A8:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ab8198-89a6-3716-ae34-c60f94305356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5b:00:53:cf:6a:1c:7f:d7:90:df:07:83:a9:48:8d:b5:46:
         d8:e2:10:c2:32:19:7e:28:b2:67:e1:ac:8b:e0:c1:f9:d9:41:
         a4:ca:30:02:f2:26:53:35:15:79:7d:c7:b1:4d:1b:ab:a2:26:
         b6:79:74:9a:ad:05:5f:6a:9b:ba:91:81:cc:93:5f:18:d5:a9:
         cb:ac:1c:11:d7:31:19:05:43:ad:e0:f8:a9:47:c7:dc:9f:82:
         64:56:b4:6e:8c:4d:ca:1c:56:f0:f2:53:3b:fe:35:88:09:e3:
         c5:01:fd:a5:85:a1:5c:19:24:c8:03:88:65:36:61:b7:a4:2a:
         55:a7:33:7b:16:9d:40:c1:38:e9:2b:ba:db:40:4b:10:40:c0:
         5d:ec:41:89:2d:db:28:85:68:90:55:45:4a:bf:a2:77:11:80:
         22:ca:98:a3:ca:74:bb:89:65:5b:73:72:0e:18:c5:8c:e3:12:
         26:d5:26:23:ff:5a:55:bd:21:94:41:74:dd:6c:e3:33:17:a1:
         ae:3b:75:ca:bf:5a:26:41:79:23:38:ad:ff:dd:65:b7:96:1a:
         f1:31:cb:e8:28:1c:cb:f9:bb:8e:90:2c:92:f0:a8:35:f5:9f:
         b5:2d:41:55:ce:dc:82:6a:1c:32:ea:e0:c6:71:9c:f1:5e:a0:
         b4:cd:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:00 2025 by rpki-client