Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa
File:                     fbbcd23d-cbc1-37eb-a377-92c166bee287.roa (raw, json)
Hash identifier:          gLjkSqWes4gnJpsXXwc1cv1lM9kH66IsvadnVKngQv0=
Subject key identifier:   32:DB:B6:4E:A9:9C:AA:36:3F:A2:83:8A:3D:57:09:6E:82:87:0D:1A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84122020238D113A034E3680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:20:20:23:8d:11:3a:03:4e:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f8880d0d-dbcd-481f-8dd6-97be5f7d2e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:c6:e5:37:37:60:ef:b7:51:5f:59:a5:45:
                    c1:2b:90:8c:59:30:b3:af:db:91:82:d0:3c:ab:45:
                    7b:07:27:36:09:e0:7e:87:9c:7e:56:c0:03:14:a0:
                    6c:20:de:af:01:28:86:af:56:a3:6d:d8:75:03:d1:
                    e1:06:60:dc:c3:99:cc:94:9f:ae:de:56:92:a3:a2:
                    62:c8:8d:2e:3a:b1:ee:37:96:9e:4d:d0:39:56:77:
                    68:7b:96:ee:2d:8b:e7:3c:1e:70:b7:e7:60:f0:14:
                    5d:44:48:55:f6:d8:24:90:4c:91:af:40:1c:83:6f:
                    be:d7:7e:f7:5e:6e:6b:b3:6f:13:ee:f4:36:0c:27:
                    48:4a:bc:70:8e:04:c7:d0:41:25:47:46:59:e9:12:
                    39:cb:8a:62:70:a9:da:9a:26:55:84:2d:05:4a:07:
                    13:91:57:dd:01:4e:cb:80:38:a2:9f:16:2d:32:33:
                    bf:01:41:61:db:37:e6:7c:27:37:ba:82:ee:cf:28:
                    5c:96:69:e0:cd:d1:e2:97:b7:2f:d6:db:5a:e9:9b:
                    69:cb:2d:e6:b6:13:ba:bb:9e:9a:22:13:29:59:3e:
                    60:1e:74:46:26:a9:30:50:e7:da:39:1b:95:e7:0c:
                    a5:21:2f:12:b1:ef:21:07:f3:b4:ce:51:28:bb:6c:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DB:B6:4E:A9:9C:AA:36:3F:A2:83:8A:3D:57:09:6E:82:87:0D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:86:50:f7:89:d7:7b:60:18:ff:1f:88:10:b2:97:2f:af:
         35:23:4c:ed:48:26:9e:c3:5d:d9:f4:33:36:fc:8e:f0:ad:2b:
         9b:5e:21:a9:60:37:9c:17:fa:65:d6:07:51:9f:fa:6f:4b:7b:
         be:7b:07:d9:f9:bf:dd:ca:53:1b:95:5e:68:04:31:8d:65:39:
         11:4b:25:72:33:25:19:28:8e:53:5d:ac:74:42:a3:98:5b:5b:
         1b:42:ac:3d:39:28:77:04:bb:cf:8e:88:a6:04:62:c2:fb:9b:
         dc:d6:a3:da:5e:bc:d7:64:61:d5:57:c3:57:c4:15:ba:23:d4:
         6b:ad:2a:dd:f6:2e:5b:25:be:42:a8:9b:a0:e1:95:0f:fe:ba:
         35:d6:8c:79:0a:60:06:aa:0b:44:1b:35:5f:b9:1e:82:64:5c:
         56:fc:30:ab:52:2c:72:21:03:d4:f6:58:c2:f7:7b:72:f9:d3:
         94:a3:dd:84:79:f2:c9:69:25:67:da:81:01:36:10:21:e1:35:
         e4:99:32:79:07:9f:19:e2:71:43:f4:5d:56:0c:0a:41:80:2d:
         b8:b0:a6:28:ed:b0:42:13:f4:47:ee:6f:b0:6f:a8:24:75:58:
         92:f8:fe:3e:10:13:6a:bf:9b:77:2a:e4:bf:0e:e5:f3:56:1e:
         1c:b0:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:06:58 2025 by rpki-client