Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c9e51d5-d7df-394f-b4a2-5d8c3089f82a.roa
File:                     0c9e51d5-d7df-394f-b4a2-5d8c3089f82a.roa (raw, json)
Hash identifier:          KdgItmTgtFRvqqN5e+1o19KL7+QaRsfb74haAn86ZNQ=
Subject key identifier:   19:06:F8:A6:04:0D:64:C6:58:0F:8E:34:3A:B6:09:2A:CB:06:1F:B8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACB410548636991C1E31C9310
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c9e51d5-d7df-394f-b4a2-5d8c3089f82a.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:05:48:63:69:91:c1:e3:1c:93:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=0a0376bb-3de4-4c43-a3f0-0d4055c916cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:ff:4e:b5:d3:02:d4:b8:da:0b:2f:e0:f3:
                    72:c4:cc:c1:34:09:71:ee:d0:da:c1:2d:b5:a9:3a:
                    81:ec:73:b5:5f:6f:5a:2b:11:3d:40:67:44:8d:0a:
                    7c:25:a8:54:9d:ce:39:8c:67:30:9b:85:7b:a2:d4:
                    3a:36:12:18:64:14:f4:5c:0f:21:f5:7d:9e:80:06:
                    23:03:cb:e8:2e:67:bd:17:37:84:ce:66:fd:ec:7f:
                    19:98:e6:25:80:88:e2:3a:74:51:3b:8f:c4:d2:a2:
                    1e:d6:50:59:74:d4:e3:b5:ad:8d:60:27:5d:cd:2d:
                    7d:ea:24:eb:73:2a:74:2f:ba:ce:74:2f:e1:e9:4b:
                    e6:00:6d:75:9d:c8:b3:30:b9:85:3e:1c:1e:bd:d4:
                    56:15:c1:64:93:26:4f:93:68:76:b6:4f:b7:ee:9c:
                    e5:29:3c:5b:f7:c9:58:1e:ac:de:82:89:a5:ec:59:
                    2c:7f:f3:05:49:d7:2a:4c:fd:ca:3a:86:5f:f6:1d:
                    ff:fb:4f:7a:35:d0:29:d1:c9:d5:fd:48:6e:95:cd:
                    c5:dc:f9:da:c9:62:c7:ac:9a:ad:33:bc:42:3e:4e:
                    d0:f2:92:7a:46:b8:bc:09:f9:93:eb:66:5c:08:ce:
                    30:30:14:03:2f:df:72:24:7b:52:f9:97:01:2d:df:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:06:F8:A6:04:0D:64:C6:58:0F:8E:34:3A:B6:09:2A:CB:06:1F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c9e51d5-d7df-394f-b4a2-5d8c3089f82a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:26:99:8e:fe:5a:fe:90:d7:95:98:d0:75:c2:55:65:79:35:
         33:74:83:d8:8e:0d:2f:56:89:86:ce:4b:69:23:21:1b:00:ab:
         f8:ea:18:e8:a1:64:03:e2:c4:27:f8:c9:fa:80:b0:e3:85:e8:
         5f:7a:a9:b7:11:de:7a:3a:18:a1:73:1c:f3:a1:9e:c3:5d:94:
         ef:da:da:de:9b:1b:81:4b:89:08:77:fe:c2:e5:ef:eb:0b:e3:
         bd:bc:34:cc:f5:4a:2e:3d:a3:e9:31:8d:5c:a2:83:ff:a5:4c:
         cf:7b:34:a9:dd:57:3b:7f:96:19:37:0d:f5:2a:ca:38:c6:09:
         2a:dd:4b:bc:fc:b0:fc:06:97:45:96:fc:12:d6:e3:7a:02:7f:
         36:ae:2f:39:30:27:17:a0:b8:42:9b:f9:62:47:43:4d:22:5c:
         2c:57:7d:05:24:0a:fa:07:76:3b:42:fe:68:3c:15:89:21:05:
         a5:74:e2:2c:b8:06:d0:8f:1e:1c:77:80:35:47:6a:db:7a:b0:
         75:04:00:fd:dc:6f:61:88:9e:1b:d2:46:c8:1d:fb:46:59:be:
         30:fb:01:59:9e:c9:c1:6f:14:1a:1a:0f:ec:63:be:d3:6e:87:
         ce:94:b7:72:e7:83:ea:15:76:e7:2d:91:b7:5b:84:c0:2a:0c:
         0a:b2:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:52:38 2025 by rpki-client