Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88855820-a572-36a7-bccf-3bf170e7383a.roa
File:                     88855820-a572-36a7-bccf-3bf170e7383a.roa (raw, json)
Hash identifier:          obtVADmTps9SGvStrbv89Y3sSuK3JgvvgUJEck4d6yE=
Subject key identifier:   48:C2:DB:D1:A9:0F:56:1D:2C:EF:1B:67:E7:8C:A7:DC:4B:A6:5F:91
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841199E93E700F19FC238680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88855820-a572-36a7-bccf-3bf170e7383a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        184.62.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:99:e9:3e:70:0f:19:fc:23:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=67568668-6025-416e-b696-41881ec3e384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:fa:7a:07:d7:1b:8f:64:3f:25:05:22:e5:
                    6d:b7:a4:ef:8f:02:e1:a5:6a:9a:1a:e0:1a:4d:44:
                    b3:52:f9:39:f5:4c:db:24:f0:78:fb:7d:ef:25:8f:
                    92:6f:7f:ee:af:b5:d4:50:8a:95:40:35:a2:97:68:
                    1d:a0:ad:d2:a3:35:a6:8a:24:f2:ac:b9:e4:7d:08:
                    2e:48:7d:07:ee:de:c5:bd:a7:70:90:96:f6:18:ca:
                    ae:2b:62:f4:1c:2a:70:71:ba:cd:0d:d3:1a:e0:11:
                    29:0b:de:13:6c:61:e7:69:9d:04:d7:db:35:69:bc:
                    00:c3:b5:9a:92:e2:af:b7:f2:71:43:2b:2f:b7:02:
                    72:fb:14:f1:02:d5:63:2b:7d:d9:7c:14:58:91:65:
                    f0:63:5c:6c:c0:be:77:9f:2e:19:66:3f:8a:ba:f3:
                    53:2b:8e:f6:3a:e5:10:c6:13:b4:9b:65:47:ab:1d:
                    aa:46:98:fe:3a:af:86:d9:89:5f:14:14:a1:4f:2d:
                    8d:1f:13:3b:1d:eb:45:38:ef:9b:d8:42:a8:cb:66:
                    44:54:e0:e3:91:0c:fd:a1:68:84:1e:ec:25:d4:2d:
                    94:40:63:8a:1e:7e:a2:82:93:92:0a:94:d5:d4:fc:
                    17:98:d0:40:7f:76:37:62:d8:e8:02:6c:44:19:f0:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C2:DB:D1:A9:0F:56:1D:2C:EF:1B:67:E7:8C:A7:DC:4B:A6:5F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88855820-a572-36a7-bccf-3bf170e7383a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b2:26:ee:1c:cf:2f:02:a8:3e:86:0a:d3:a0:ab:79:09:7e:
         a3:f3:ce:8f:ce:43:5f:3d:65:8f:ce:60:63:a1:a7:01:c6:4c:
         26:25:ce:aa:14:73:c9:0d:34:a1:97:a4:75:d9:d7:50:32:0e:
         97:7f:5e:ba:52:d2:ac:6f:31:59:e9:34:88:58:5f:87:ea:3f:
         2a:fc:73:c3:3d:f9:d1:4e:07:71:92:12:f1:64:c7:82:89:b6:
         42:2b:d2:e7:a9:92:e5:f0:f8:dd:e0:48:93:16:5d:23:26:ad:
         de:da:3b:6a:5d:60:92:70:a1:b1:47:f0:15:f0:fb:25:a2:09:
         e6:81:cc:44:81:55:bf:8b:23:f7:d2:37:b6:a6:f4:b0:f4:02:
         c6:38:75:f2:dd:ae:df:9b:54:73:d7:9b:cb:06:88:f9:1c:61:
         b3:bc:a8:63:b9:b8:04:cb:7a:e3:39:55:43:8b:f1:e3:52:8a:
         70:59:a7:32:aa:4c:1b:87:ee:d5:5c:c7:b8:69:60:9d:95:66:
         63:9f:33:ff:fe:0b:6b:79:07:71:68:c6:77:c6:d2:e7:5f:fa:
         28:92:de:c5:75:df:58:1d:2e:39:17:09:2b:49:af:86:6f:c7:
         21:9e:52:04:d8:aa:5f:de:f2:cf:65:18:04:2d:01:07:1a:a0:
         f0:ae:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:37:16 2025 by rpki-client