Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07dc62b8-839c-384e-8161-66d41b23b962.roa
File:                     07dc62b8-839c-384e-8161-66d41b23b962.roa (raw, json)
Hash identifier:          LTOrc0sUyjBwamHSgtlDhBi6j2SxS5DJcPE9xz7Gb7w=
Subject key identifier:   D5:05:CA:6C:05:5C:15:AF:65:CA:06:46:6A:55:49:91:C1:08:E1:77
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D65E91C6066708BCDAB300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07dc62b8-839c-384e-8161-66d41b23b962.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        172.71.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:5e:91:c6:06:67:08:bc:da:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=f6309f03-a86f-4965-9096-779cb85e6ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f2:b5:e1:78:f7:ef:83:b8:3b:1a:9c:ce:c3:
                    de:3a:be:0f:6d:37:8e:aa:2a:88:c8:94:8b:d2:89:
                    50:f4:64:96:67:a2:bc:b0:10:2b:fa:8a:0d:bc:9e:
                    6f:e1:70:26:90:fc:b4:47:d9:47:d0:55:c8:52:31:
                    f5:eb:61:42:67:1f:8d:4b:6d:4d:ea:c0:52:60:db:
                    8e:ac:53:df:27:ea:c6:a9:07:89:d0:11:b1:ed:f3:
                    92:5b:bf:11:09:9b:83:f6:c3:6c:ea:db:5a:0c:fe:
                    31:0b:f0:e0:14:56:3b:3e:8c:0f:b8:50:ed:db:9d:
                    36:d8:6d:0a:e8:f5:9a:0c:ef:bf:9f:cf:5c:1c:b5:
                    46:11:8c:41:65:53:32:d7:39:36:09:a1:bb:ac:ae:
                    62:03:3d:04:8f:bd:59:8e:bd:17:91:4d:a1:ec:50:
                    9d:cb:5a:07:65:97:42:a7:58:8f:5c:e5:8c:5b:16:
                    c7:f2:be:02:65:f7:1d:2f:76:72:2e:71:44:91:b5:
                    a4:61:de:57:80:2d:58:65:fb:d6:bf:3c:8e:31:4b:
                    11:9d:ae:6f:c0:d5:ab:55:ce:c6:87:09:4c:70:dd:
                    72:ca:29:31:2e:52:66:c9:e1:d7:19:ca:05:b9:9e:
                    71:76:b3:00:8c:d1:62:75:b2:1c:43:55:68:44:4d:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:05:CA:6C:05:5C:15:AF:65:CA:06:46:6A:55:49:91:C1:08:E1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07dc62b8-839c-384e-8161-66d41b23b962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c8:07:2a:27:4c:88:59:78:8c:95:d3:9f:7a:6f:4a:56:31:
         e5:35:99:c1:89:c7:03:4f:01:3b:80:c2:27:a4:a0:19:8e:c9:
         bd:38:19:85:14:42:17:f1:e3:c0:a3:c6:9f:1b:b0:83:b7:54:
         f1:ff:07:11:f6:29:f1:35:5a:05:59:6e:38:fb:51:b3:e9:24:
         f7:6f:dd:5f:ca:15:f7:87:a1:e8:df:d3:e9:70:de:1d:5b:e0:
         ec:41:d3:02:16:83:cf:31:46:19:02:3e:f8:22:0d:e9:8e:14:
         41:45:c1:58:81:a6:31:b7:10:31:c0:1d:62:8b:97:f2:15:8f:
         20:37:66:c1:a3:c1:8f:db:21:65:bd:8a:00:27:8c:fd:98:d8:
         3e:94:df:44:34:2a:8e:90:69:e7:34:09:fc:fc:2b:76:f7:b7:
         ca:5d:7a:4e:4a:3c:9f:4a:dc:99:14:4c:7f:75:89:90:3f:f3:
         44:b8:8e:18:83:70:9c:9b:bd:65:9c:79:b0:80:16:83:1c:c4:
         9a:69:96:f8:d8:06:1a:dd:5f:61:df:bd:72:4c:87:4a:07:10:
         b2:51:6e:54:2c:2b:9f:e8:84:ed:10:42:30:0f:88:0a:31:95:
         3f:c4:47:22:ff:a0:4d:ba:03:3d:8f:df:0a:b9:7f:ee:74:8e:
         82:c5:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:12:20 2025 by rpki-client