Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
File:                     fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa (raw, json)
Hash identifier:          eTWIZ1Uis3lKZ+Zz8Hyn8DKCRz9GXnAxTEt664MM7sQ=
Subject key identifier:   7C:CB:5C:15:A1:53:2F:73:2C:BF:73:61:1C:C1:A9:E1:E7:FD:31:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84116D404BFEA64C5EE67B40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:6d:40:4b:fe:a6:4c:5e:e6:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d7e300ac-91ed-4d82-97b3-46f8a69a8ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:7e:1e:7c:58:3b:35:83:91:21:45:9b:40:
                    31:ac:41:f2:1d:da:8c:b8:57:ab:6f:b9:f7:79:84:
                    26:19:80:67:f0:14:5a:d5:f5:a1:f4:cb:f1:bd:9a:
                    49:08:d9:f4:8e:0a:7f:9e:37:74:91:f9:49:44:68:
                    df:e8:4d:d9:a3:b5:29:fa:77:db:4a:51:26:29:f3:
                    12:34:b5:3b:a6:c7:fa:88:65:d8:8c:2c:38:2f:6d:
                    f9:66:f6:37:4a:ac:70:15:7f:d1:5e:fa:fb:e6:a1:
                    28:bf:50:e7:e8:80:11:7f:fc:a1:61:94:d7:5d:b9:
                    d6:2e:97:8c:b9:e8:68:32:4e:ce:a1:6d:76:93:30:
                    71:6d:5e:55:0a:01:fd:12:03:a6:19:58:e9:84:78:
                    93:00:9c:89:b4:db:10:96:fe:e5:b2:71:6b:1f:b3:
                    80:87:9c:6d:b0:b1:ca:44:93:60:79:f4:0a:83:26:
                    93:a6:9b:e3:19:0c:ad:46:55:a2:96:d7:51:5a:1a:
                    37:5d:6c:21:b0:ee:ef:14:01:70:9a:aa:60:81:60:
                    57:d0:f2:24:69:9f:00:1e:46:43:48:50:ea:3f:db:
                    2f:df:4f:a0:f7:b3:fc:a5:fb:74:a4:57:7e:ca:c5:
                    ec:ab:de:0f:f0:3e:d9:65:cc:47:c1:fa:ea:ae:32:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:5C:15:A1:53:2F:73:2C:BF:73:61:1C:C1:A9:E1:E7:FD:31:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:49:a4:f7:fa:a4:84:83:e8:74:f8:aa:4f:b9:cb:8e:f9:98:
         df:dc:2e:e6:36:77:5f:57:6c:17:8d:25:b4:29:9b:36:b9:f7:
         6d:c6:57:b9:19:80:31:6e:8c:65:d7:33:e4:56:ef:51:d0:76:
         a2:e5:ea:e1:5a:f3:12:2e:7d:88:f8:9a:fd:f0:e4:ca:9e:b1:
         8d:de:89:0b:06:ad:10:81:de:ae:e3:a0:ab:45:23:be:24:51:
         fa:a3:d6:6c:6e:14:f4:53:b3:c7:0f:6d:9d:10:4e:04:b3:18:
         b6:63:51:51:3c:69:4b:bc:3a:50:7b:73:d0:8a:a5:cf:f3:9f:
         64:ed:8d:a3:3a:1e:02:e7:64:8e:ad:e1:a6:78:76:fd:28:a8:
         18:e5:90:47:7a:c8:58:87:7d:3b:e0:b4:f3:f3:b4:15:d3:73:
         1c:bf:ef:72:4b:1f:ad:6d:d5:bd:17:f9:d6:da:ad:36:01:64:
         94:3a:a0:2c:91:74:88:57:d6:f5:af:56:bd:ec:5e:0e:52:30:
         3c:f7:a6:26:22:e0:d4:cc:54:45:cb:af:cd:9e:0e:a2:e8:54:
         09:9d:fc:ad:e0:21:49:be:25:29:31:9a:0f:fb:f9:75:e8:d1:
         cc:f3:a3:a1:cd:44:25:07:18:5c:fa:f9:ee:03:0c:90:b5:de:
         f7:b8:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:39 2025 by rpki-client