Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23cafc05-a0bb-374c-88bb-21712ab1ef8b.roa
File:                     23cafc05-a0bb-374c-88bb-21712ab1ef8b.roa (raw, json)
Hash identifier:          /43Kg05ju5ZTKNWyIHMFwlnoDuUK9CXJWufMV1oJL4w=
Subject key identifier:   6B:E8:9A:FF:8E:AE:5D:C4:4E:D7:2D:B9:C3:C1:98:62:87:A6:C4:43
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACB4101FAB8FA499B2261B980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23cafc05-a0bb-374c-88bb-21712ab1ef8b.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:01:fa:b8:fa:49:9b:22:61:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=993d1f80-7b01-4354-a283-78933f806a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:66:73:af:6b:68:f3:1c:b4:44:e8:6a:37:
                    ff:f5:f4:2f:52:2d:39:3d:d7:ee:df:48:8b:ca:ce:
                    11:d5:8a:bd:b2:b3:ce:4c:a1:3f:b8:2c:78:c9:29:
                    11:6c:d3:2e:b9:87:58:29:2c:f8:8a:fa:61:ab:ba:
                    8e:cf:df:77:a6:6e:19:2d:2b:91:52:a7:4e:5c:3a:
                    cc:04:cc:c5:2d:61:f9:ae:bb:d3:f2:cf:f2:72:b2:
                    12:ea:a6:af:60:1a:05:07:59:73:b8:83:8d:64:3c:
                    82:aa:7d:4a:f6:f5:45:fd:50:c3:e9:18:c0:ef:43:
                    e8:79:e4:92:ba:31:ac:03:ec:aa:e8:9d:c2:5a:a9:
                    96:80:35:b5:10:11:53:97:54:a7:aa:61:11:4f:03:
                    3c:cf:dd:71:e2:9c:56:e9:92:24:eb:1a:d2:de:11:
                    ab:28:76:97:7b:1f:5b:9a:9a:14:4a:60:ab:a7:ce:
                    b5:ae:d7:d9:93:10:65:d4:d5:3e:25:9e:df:76:7d:
                    dc:35:0c:5e:f3:74:b6:fb:ac:41:6e:cc:f6:a0:9d:
                    c6:ef:5e:2d:98:d5:cf:94:19:b9:2c:5a:59:25:66:
                    e9:2c:6a:8f:f9:bb:2a:df:a0:bf:15:7c:b0:f9:59:
                    a9:08:3f:9a:7f:37:21:e6:96:b6:ea:1c:cb:0f:6e:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E8:9A:FF:8E:AE:5D:C4:4E:D7:2D:B9:C3:C1:98:62:87:A6:C4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23cafc05-a0bb-374c-88bb-21712ab1ef8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:85:3e:a5:78:20:a1:09:f2:76:44:64:b5:9b:b2:be:e4:
         bf:2d:71:06:6f:3e:de:de:8d:bc:ef:8f:fd:7d:f1:87:3d:af:
         ee:6b:b8:64:75:07:1c:ee:7e:57:0d:30:84:a5:04:dd:eb:8e:
         b2:44:aa:3a:3e:46:e2:3b:94:71:d6:73:f0:6b:c4:b0:fd:76:
         78:d4:72:0b:0e:7d:3c:32:e1:a0:65:7f:be:d3:fa:6c:b6:49:
         87:d4:c1:83:90:50:94:81:96:ee:00:1b:a9:ac:02:d9:cc:bb:
         1e:c6:e7:19:ee:b1:f1:4d:61:35:c7:33:79:f4:4f:8c:c6:a9:
         d2:c9:57:05:7f:9c:d4:17:2a:d9:ee:e9:8c:09:b2:52:09:25:
         3e:e4:ed:41:c0:2d:ed:a2:4a:cc:1b:b9:f0:d7:9a:6f:1a:83:
         7f:d2:a2:4f:7a:8a:e2:cb:6d:18:b4:63:db:8f:33:dd:01:bb:
         5e:8f:dc:f7:46:f9:c9:4c:9f:7c:28:ff:d2:7f:d8:15:07:7c:
         8b:a9:6c:b7:06:a7:fa:77:53:31:7e:39:68:c7:de:bb:37:a0:
         89:0b:6c:af:f6:eb:f4:75:2d:96:ef:9a:c9:54:74:87:1f:74:
         d4:d1:67:66:88:b8:54:23:8f:c2:8f:bb:48:c0:79:bf:87:7f:
         74:6e:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:11 2025 by rpki-client