Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa
File:                     2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa (raw, json)
Hash identifier:          l+l615Hu+TIkvIqyv7ylFEACic4SnNGwGYBIAahW/mo=
Subject key identifier:   23:C5:C7:6B:6E:3E:70:07:F0:FD:1B:6E:56:44:2D:AA:75:B5:AC:3D
Certificate issuer:       /CN=6b0ae85a-8757-4947-940f-aa533d9ca479
Certificate serial:       010D0C9F4328584BC10ADD7B823581F5551DF600
Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        155.72.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:dd:7b:82:35:81:f5:55:1d:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=12012de6-1dbf-46d0-9ca4-07b539216a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:3a:9d:8d:57:65:e3:2b:57:48:db:1e:41:
                    08:c9:35:9b:19:33:f5:8a:5e:56:82:c0:c9:32:f7:
                    5d:78:71:6a:9b:f0:7b:53:44:14:7c:d7:60:13:39:
                    0c:a5:1a:3f:70:bf:eb:a9:5a:81:cf:34:3f:1a:62:
                    a6:d7:40:e8:4a:4e:b6:6d:6f:c0:a5:68:4b:84:22:
                    19:7f:2a:60:17:74:0d:b7:57:a7:ee:35:ae:3e:75:
                    9f:6d:bb:f7:04:70:e3:35:3f:ac:64:34:39:3b:15:
                    f7:92:f9:9d:26:04:6c:f3:3c:b1:10:d6:bd:f5:9b:
                    40:7a:29:b4:20:e6:c4:8b:66:85:be:c2:e6:ae:bd:
                    e6:7d:1d:79:0f:b0:89:90:97:84:1d:97:1a:ca:bf:
                    50:35:e1:a3:56:60:86:30:e8:58:9a:24:12:01:8e:
                    be:ba:08:c2:87:e8:69:5c:c3:7c:c5:71:42:e1:22:
                    5a:ea:81:65:6b:c6:61:32:7f:69:e5:e2:ae:34:78:
                    f0:8f:67:da:62:95:7c:87:ed:7a:d2:06:b8:80:71:
                    19:14:f0:1c:cc:06:9c:35:51:ec:c1:1d:ab:b8:e9:
                    f2:95:a0:f9:fd:0e:e5:d6:21:cb:f4:ef:a0:ef:9a:
                    37:33:d6:93:b2:d1:7d:e4:22:ee:f4:7a:28:85:2a:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:C7:6B:6E:3E:70:07:F0:FD:1B:6E:56:44:2D:AA:75:B5:AC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl

            X509v3 Authority Key Identifier:
                keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.72.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:61:30:c2:5e:d7:ec:b5:5e:ed:a9:df:c4:7f:b3:c8:74:5d:
         2f:18:3b:63:a1:6f:88:19:a9:9c:94:27:84:f4:e6:e7:34:60:
         d4:cc:fe:d6:3a:51:9e:b4:84:6b:c5:d7:fc:92:94:6e:28:11:
         90:9e:21:83:57:de:91:a6:03:5a:69:f0:6e:a8:de:21:d9:3a:
         15:30:e8:bc:ad:71:af:1e:58:ef:ab:7b:f6:55:9c:86:8f:01:
         7b:1a:48:72:74:97:2b:d4:08:ef:60:b6:fd:10:b3:b8:5b:02:
         e9:c0:3b:13:c1:e2:9d:2a:07:9d:79:c5:35:d0:70:db:ba:7f:
         0c:bf:1c:e1:15:02:70:45:2a:8e:c7:68:62:62:51:9b:64:b4:
         e8:9b:a0:f3:35:b0:6c:09:e0:5d:58:d1:cc:09:d8:00:02:12:
         c0:08:c2:1e:fe:ba:39:f3:fb:d0:27:ec:04:e1:32:50:08:83:
         2b:5d:05:67:a2:63:ac:2e:d4:88:c3:c0:8e:04:c9:76:42:fa:
         10:e5:d4:34:a1:17:09:4d:b0:ee:5a:99:8b:75:3b:e0:ef:82:
         9a:0c:52:42:66:8b:ba:93:bf:77:29:67:24:3a:6f:4a:dc:1f:
         bd:51:b6:98:09:7b:bb:cf:40:64:46:a1:89:19:04:05:d9:e5:
         9b:13:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:08 2025 by rpki-client