Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0116d82e-63ca-3a2f-8ef7-403c58d041aa.roa
File:                     0116d82e-63ca-3a2f-8ef7-403c58d041aa.roa (raw, json)
Hash identifier:          6JJvWuxqZ2Oxl8/XSpQqvqCSqY9sYWIViSgTF7Dezjc=
Subject key identifier:   72:E5:90:25:B3:99:A6:21:1F:27:41:D8:91:85:2B:1D:88:CF:CD:6C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7110C7EB9CAAD33DA67F4C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0116d82e-63ca-3a2f-8ef7-403c58d041aa.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        172.68.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:0c:7e:b9:ca:ad:33:da:67:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=523325ef-6a71-4c8a-8394-7bb04b036732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:f7:e6:e6:84:fb:5a:36:a5:e5:67:30:15:
                    c5:7b:a7:b6:30:54:63:fa:0d:06:bc:07:a3:61:4b:
                    49:df:70:52:99:59:fe:58:30:ee:a0:d8:e2:34:00:
                    88:67:27:c4:24:10:8a:38:2d:57:f7:7b:38:dc:37:
                    5a:e3:d8:70:17:a1:e5:6c:9d:33:4c:00:18:6e:0f:
                    d8:e0:d5:17:3c:02:14:dd:9b:ec:18:55:b5:92:dd:
                    e3:9e:5b:b4:17:9e:07:43:67:c2:38:63:28:f1:ae:
                    3a:30:ce:ac:be:35:35:87:a7:0d:2a:47:d3:30:87:
                    77:b3:10:ab:e6:c6:40:3d:23:81:55:a3:0a:b9:df:
                    bf:5b:1d:81:66:ef:a1:24:87:27:e4:cf:d1:e0:e6:
                    dd:29:be:59:d0:a3:ed:01:a7:72:f1:3d:3e:86:87:
                    6f:3c:fb:99:8d:b6:27:c1:ba:be:98:22:4a:64:41:
                    98:22:9d:14:68:66:56:6b:56:d7:14:9e:05:8d:ef:
                    e0:93:32:c5:6d:89:8c:d4:e0:b7:e9:9a:f4:48:a2:
                    ef:9b:52:5a:be:4f:7d:00:72:52:c5:00:91:ab:bc:
                    a7:17:b7:3b:3f:07:21:c1:b1:63:05:4a:41:11:a7:
                    3b:c9:23:a4:75:99:ad:07:65:5f:cb:31:6b:ca:7a:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:90:25:B3:99:A6:21:1F:27:41:D8:91:85:2B:1D:88:CF:CD:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0116d82e-63ca-3a2f-8ef7-403c58d041aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:bb:0d:b2:b0:d9:b7:55:4f:3f:39:0d:4c:15:b2:0d:91:
         10:89:f0:d6:5f:62:97:b3:48:68:4e:39:b2:e7:bc:3a:97:22:
         2a:96:47:54:81:92:1b:07:57:94:17:6c:a7:d0:6d:f1:1f:76:
         bc:2c:c4:b2:94:25:6c:17:54:dc:2f:8c:90:82:5b:75:5a:fe:
         be:8c:12:78:f1:21:19:48:13:fd:a7:bc:38:8d:cd:6a:6c:93:
         4f:a0:fe:90:14:ff:11:35:3d:03:ab:08:81:f3:02:91:16:9a:
         b4:cd:c7:79:3c:70:3b:52:2f:ec:6e:db:ad:f8:1a:96:76:c5:
         2d:67:4c:a0:c3:a8:3c:50:39:1e:21:e3:d9:7c:ba:99:64:b9:
         4a:c9:bd:ec:cf:b1:68:0c:02:d9:21:4c:69:b3:66:f8:3a:14:
         c5:15:21:6c:03:3e:96:a5:53:6a:33:3e:de:d2:ee:92:86:cb:
         a8:1f:1a:55:a0:f1:88:ad:6d:18:ab:b6:0a:f7:52:91:81:94:
         1b:cf:94:4d:c2:b3:ad:21:03:9e:10:26:a8:2a:10:c9:03:f7:
         ad:46:3f:93:6a:11:3a:2e:cc:c0:92:cb:3c:ad:76:7c:38:f9:
         ee:1f:77:cf:fd:68:04:4c:d1:e7:8e:8f:ff:66:0e:02:61:66:
         32:39:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:13 2025 by rpki-client